Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6b95c0a0-e9c6-369e-a5a0-471a1c0f6e43.roa
File: 6b95c0a0-e9c6-369e-a5a0-471a1c0f6e43.roa (raw, json)
Hash identifier: 5yZ3+iy6qdtGVaHerJMS/vrdgRkEz6mH3uEm3duxgMw=
Subject key identifier: 09:59:8A:2A:90:7A:16:0A:98:3D:6B:BD:F1:C7:08:5A:DA:5C:E0:05
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848FD018C55FD486080110C4D80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6b95c0a0-e9c6-369e-a5a0-471a1c0f6e43.roa
Signing time: Mon 24 Feb 2025 11:09:31 +0000
ROA not before: Mon 24 Feb 2025 11:09:31 +0000
ROA not after: Sun 25 May 2025 10:09:31 +0000
asID: 30036
IP address blocks: 72.255.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:01:8c:55:fd:48:60:80:11:0c:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 24 11:09:31 2025 GMT
Not After : May 25 10:09:31 2025 GMT
Subject: CN=87c66037-f407-45f7-aca6-d475c1612650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6b:b6:84:69:41:de:6b:29:86:1b:dd:8c:e7:
30:bc:bc:35:75:3c:56:5c:71:f1:cf:f9:f6:75:3c:
62:0f:2b:17:5f:35:a5:d1:74:ae:b3:93:f3:b6:bf:
c1:f3:02:2a:6b:da:5e:f1:7c:46:81:77:fb:b2:eb:
93:6b:9e:50:80:8d:ce:b7:7e:a8:4b:9a:de:77:41:
d8:fc:2a:cc:9a:47:b7:46:ce:b4:ef:2f:00:08:7b:
05:09:95:c9:cd:48:a0:24:de:60:e5:a1:ee:72:ca:
72:f2:a3:75:ec:86:5e:82:0b:a6:15:a0:9b:c2:3a:
ba:78:0a:37:4e:2e:fb:4d:ec:98:b4:7a:6b:95:82:
84:90:b1:3e:eb:b8:c2:b2:f3:3f:7d:a2:64:f2:1e:
d2:c8:ae:b9:86:a6:f3:2a:4e:5a:25:ff:b6:7d:4c:
88:25:6f:e2:50:21:3f:9e:07:d6:75:d5:79:f1:f8:
0c:85:18:fc:cc:9e:ad:e8:6a:6e:53:4f:b2:d2:5b:
41:fb:80:93:b6:cd:b5:ba:00:d9:82:8b:ed:f4:9c:
d4:c3:fb:0d:15:e9:8d:42:33:4a:ba:0a:65:78:57:
42:0d:f3:c3:22:b4:63:48:3f:fb:2c:66:8f:21:42:
1b:62:56:19:e2:05:73:f1:ff:f2:76:3c:c1:66:e0:
95:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:59:8A:2A:90:7A:16:0A:98:3D:6B:BD:F1:C7:08:5A:DA:5C:E0:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6b95c0a0-e9c6-369e-a5a0-471a1c0f6e43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
72.255.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:52:af:2e:98:68:6b:7b:55:a0:b2:77:90:9a:fa:c8:58:79:
d7:5d:10:1f:9d:f5:90:5f:ce:b7:0c:fa:7a:17:f7:7f:11:12:
b4:0c:d0:2d:7e:fa:d4:39:52:26:af:6c:ea:b9:a0:6c:1d:da:
79:46:44:26:41:a3:38:bc:77:7a:83:fd:8b:9d:c6:20:51:da:
a6:12:27:ba:c7:1d:a8:53:64:fb:88:02:df:be:4e:88:3b:7a:
ee:be:0a:1c:b9:7d:39:43:7e:93:3d:c4:12:fb:16:51:bb:84:
69:ac:6f:ec:80:57:e2:69:91:ef:ec:b3:10:bb:58:6f:76:14:
a3:cc:dc:06:3b:2b:77:ae:9f:19:1d:33:84:2b:d7:63:64:1e:
48:73:1f:77:ce:27:f3:53:17:79:a7:3c:fd:3f:68:1e:52:91:
be:33:71:61:02:e4:6a:c5:b4:23:98:a9:f8:9c:58:0e:b5:c9:
60:d7:aa:30:d0:d1:e0:96:4c:65:1d:fe:41:8a:4a:66:56:37:
8e:09:a5:49:de:f4:b1:f0:35:81:f9:d6:ac:95:f1:63:19:2c:
aa:a5:37:23:84:fd:52:6b:ef:c9:cc:e3:1b:8b:ea:48:42:e9:
ce:85:a1:41:58:2f:66:d5:db:22:78:a9:2d:9d:68:fa:ba:b9:
12:78:0e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:53:48 2025 by rpki-client