Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c5d3310e-e918-369d-914a-283ed8041eed.roa
File: c5d3310e-e918-369d-914a-283ed8041eed.roa (raw, json)
Hash identifier: 2MnfHWR4/qzI/0hG36KB2YuRd0FuLL8jmjG9iK+m4A8=
Subject key identifier: 82:EA:8B:74:5A:B2:2A:97:E4:D6:11:B8:91:48:84:DF:0A:5D:AC:E3
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848FD10A25D98A4D70E7BD31700
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c5d3310e-e918-369d-914a-283ed8041eed.roa
Signing time: Mon 24 Feb 2025 11:39:55 +0000
ROA not before: Mon 24 Feb 2025 11:39:55 +0000
ROA not after: Sun 25 May 2025 10:39:55 +0000
asID: 30036
IP address blocks: 72.255.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:10:a2:5d:98:a4:d7:0e:7b:d3:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 24 11:39:55 2025 GMT
Not After : May 25 10:39:55 2025 GMT
Subject: CN=86ae56c3-a464-41af-ac9e-f3091a8360b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:99:b9:67:04:b5:c9:db:9f:f1:98:54:88:c3:
56:a4:fe:da:77:ce:e1:2a:34:53:05:ea:bf:66:7e:
b8:3a:23:fc:24:b7:0f:62:83:ea:0b:bd:b1:32:ab:
b5:3b:45:fa:07:33:23:7a:64:9e:ba:39:79:5e:01:
a7:f5:17:2c:eb:1a:c2:52:67:e5:fa:f2:81:e8:22:
7c:46:ec:e6:d6:f8:5e:d6:42:cb:f5:63:b1:2f:26:
b9:51:35:10:73:02:5a:f7:cf:4e:7b:ab:66:a0:63:
02:82:7d:e1:d5:a7:ab:39:d1:ac:33:44:47:9c:09:
9c:6a:8d:63:60:f3:82:17:01:bc:12:7c:36:8c:8e:
08:f2:7b:bf:74:95:fa:34:9b:a1:69:14:58:33:22:
51:2b:60:97:0c:83:26:36:7c:d2:74:46:48:74:52:
45:20:51:5e:01:d1:de:03:25:0a:d4:08:be:b9:35:
33:26:e5:5c:60:e1:da:78:91:bc:ba:03:f1:80:cd:
11:a6:49:b5:79:1c:c3:c9:63:ee:e0:30:ca:16:76:
b2:e6:75:3d:c2:5b:ae:ca:b8:e9:cc:28:e6:0f:eb:
c2:34:df:52:50:d0:42:59:a4:b6:6b:c1:87:16:80:
85:b6:92:1f:43:fa:b6:f3:e6:ca:d0:16:42:96:21:
2a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EA:8B:74:5A:B2:2A:97:E4:D6:11:B8:91:48:84:DF:0A:5D:AC:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c5d3310e-e918-369d-914a-283ed8041eed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
72.255.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:3f:a9:fc:e2:0a:cd:0d:5f:0d:4d:a0:f3:77:db:8c:6a:06:
ee:77:f4:78:34:43:c6:e1:4d:58:53:7a:aa:9f:31:82:c5:82:
7e:38:ff:54:38:79:e8:1d:8a:6e:4f:e1:68:23:31:16:b9:8a:
07:94:3d:01:6e:40:e6:89:64:89:6e:65:a2:eb:7b:2c:10:a1:
7b:db:b4:2d:36:95:00:d4:41:30:b1:2e:5f:06:a2:e3:e1:69:
a5:71:75:9f:bb:45:79:7a:86:e3:03:d4:74:af:91:a8:2e:58:
9a:13:67:c1:20:47:f6:5b:be:41:6f:17:70:26:e8:d3:e2:6f:
73:c0:19:50:9a:b6:ae:ca:4d:08:1f:80:34:6a:3a:0b:11:e5:
14:54:d2:ab:12:44:fb:14:dd:74:20:48:3d:90:d8:f8:fb:c3:
ad:e6:9b:d1:db:37:72:61:1f:60:bb:07:1e:df:b0:9c:8a:6e:
99:8f:3e:f2:97:65:a5:e6:39:4f:11:cb:74:32:5f:d4:42:fb:
28:0b:96:3a:90:11:ac:68:df:88:d7:ce:44:47:a9:b7:63:90:
4b:af:82:b5:c6:79:8b:31:59:41:0e:89:e3:5d:a8:bb:da:b2:
1b:cf:c3:25:02:7e:57:bb:f0:36:1f:5a:1a:57:a0:83:0d:88:
8b:02:3c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:15:45 2025 by rpki-client