Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/920faa16-167f-3f76-aea3-3d03a027c5c3.roa
File: 920faa16-167f-3f76-aea3-3d03a027c5c3.roa (raw, json)
Hash identifier: XlpfMnCkz9gG5JKcQ48Pdc8kIUO9Uv+7TXGA4wO+Nhc=
Subject key identifier: 18:DC:3A:D8:79:FF:D2:D8:D1:3A:EF:E1:B3:B5:9E:25:CC:E5:7B:BB
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848FD0909973E4C9278FC36DC80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/920faa16-167f-3f76-aea3-3d03a027c5c3.roa
Signing time: Mon 24 Feb 2025 11:24:37 +0000
ROA not before: Mon 24 Feb 2025 11:24:37 +0000
ROA not after: Sun 25 May 2025 10:24:37 +0000
asID: 30036
IP address blocks: 72.255.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:09:09:97:3e:4c:92:78:fc:36:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 24 11:24:37 2025 GMT
Not After : May 25 10:24:37 2025 GMT
Subject: CN=c53bd850-636b-4e3a-8905-d1b072f58aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:08:d4:f5:32:6d:02:bd:1b:83:58:88:f7:28:
7f:f8:ff:9a:8e:77:fb:0c:b4:97:2e:46:88:19:2e:
ce:05:1e:0f:ca:d7:05:ef:c6:b9:79:31:46:e6:ad:
d7:37:c9:e0:a1:8a:39:f7:9f:00:d5:6f:38:72:e1:
f7:88:7d:73:99:02:fa:b4:42:53:15:1f:68:2c:7b:
b6:9c:cb:c5:fc:8b:28:61:74:fd:05:0b:31:d0:2d:
18:38:3c:56:59:76:7f:48:fe:a5:1b:6b:ea:49:6c:
c9:f3:6d:58:54:1c:b9:d8:45:a2:11:f6:77:65:0c:
b5:c0:5d:04:6d:fd:4e:3d:ca:df:6a:d6:2e:21:11:
6d:43:3b:b5:03:ca:18:fb:a9:b1:2d:50:69:1a:00:
50:82:8e:f2:a4:2a:14:fd:51:d0:af:2e:26:f1:7b:
05:89:c4:d8:5f:be:50:50:8d:5a:90:fb:ad:f9:cd:
eb:75:2a:1b:18:95:00:64:dd:db:72:1f:e4:11:1a:
6a:f3:ae:55:58:e1:ba:45:cd:1e:4a:fa:9b:11:f8:
bf:29:06:f7:d8:25:89:75:23:62:fa:a8:97:d4:45:
26:37:5c:9b:99:6c:78:51:90:1e:d9:df:7a:03:53:
47:e9:f6:b0:45:eb:80:ac:dd:6c:75:17:14:f5:16:
8e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DC:3A:D8:79:FF:D2:D8:D1:3A:EF:E1:B3:B5:9E:25:CC:E5:7B:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/920faa16-167f-3f76-aea3-3d03a027c5c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
72.255.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:02:30:60:4b:85:a3:05:e8:3d:2e:94:dd:0d:d1:83:92:cc:
03:41:48:3b:ba:07:28:ec:0d:0a:e9:49:70:42:5f:07:db:cd:
31:60:9e:0d:1d:47:d8:2d:0c:7e:b5:b0:72:05:8d:48:e2:51:
cb:13:51:7c:ea:f3:00:2b:19:71:4e:77:02:ba:dd:68:7b:fc:
92:32:6f:17:ab:7d:73:bf:9e:fc:68:12:2f:d5:83:06:32:17:
7b:92:ce:7e:5e:8a:91:10:22:b3:89:7d:03:9a:45:8e:38:f5:
45:28:4c:18:ff:c9:34:47:96:41:4d:61:e6:82:78:c4:d3:02:
fd:df:08:30:eb:60:96:b8:cc:ce:89:51:05:a5:41:d1:6d:a5:
ca:5f:20:48:87:aa:31:70:ed:b2:c8:09:eb:ef:41:e8:57:4f:
e5:04:6b:bb:40:a1:39:47:b1:94:80:ba:d6:45:7b:24:01:1b:
e0:a5:1b:62:7f:de:95:00:43:c2:45:ed:7d:08:95:fd:39:0b:
de:28:7f:c6:33:96:f7:9f:5a:86:00:99:30:96:86:4f:f5:dc:
48:76:60:81:61:52:16:d2:b5:15:85:f9:f7:4e:56:59:cc:d0:
83:df:93:f0:1f:5b:87:47:96:6f:47:05:a7:e5:98:28:be:ec:
05:89:fb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:06:34 2025 by rpki-client