Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cd7580fa-aca7-3782-a4c5-4385a6cf4ba4.roa
File: cd7580fa-aca7-3782-a4c5-4385a6cf4ba4.roa (raw, json)
Hash identifier: 9zFvitjyErhCFoUikeuVv8v7+qmYiiHIqzwAm+T1h8E=
Subject key identifier: FB:AB:72:B8:AE:F6:7A:66:C4:2A:1F:1B:A6:BE:CD:53:CC:D6:48:43
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848FD090C16EE2630517E9B7280
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cd7580fa-aca7-3782-a4c5-4385a6cf4ba4.roa
Signing time: Mon 24 Feb 2025 11:24:38 +0000
ROA not before: Mon 24 Feb 2025 11:24:38 +0000
ROA not after: Sun 25 May 2025 10:24:38 +0000
asID: 30036
IP address blocks: 72.255.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:09:0c:16:ee:26:30:51:7e:9b:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 24 11:24:38 2025 GMT
Not After : May 25 10:24:38 2025 GMT
Subject: CN=b6f608d1-e268-46a0-bd2c-8e98d65eb6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7b:90:40:29:90:ac:de:3d:83:ee:dd:bb:76:
21:fa:5e:fa:89:bc:af:e2:c8:ef:cf:7d:1f:54:43:
ec:04:46:85:61:cb:4b:ec:d8:b1:64:37:15:2d:30:
bb:f1:21:17:12:57:c7:62:7b:d5:93:b8:18:d8:06:
6c:6a:ff:de:93:6d:8d:6f:71:9a:cf:3b:be:ae:58:
2c:e7:51:3e:52:5a:49:ed:50:f3:70:52:a1:41:b2:
01:c6:11:4e:eb:bd:2b:62:1f:46:cb:cf:b8:23:c8:
1d:aa:1d:d6:65:77:69:96:2b:1d:d6:70:86:5d:4d:
ce:d7:d9:e4:d0:11:b5:23:26:97:51:7f:20:d0:28:
08:4b:74:48:a6:9f:7d:eb:c2:ce:ca:71:7a:20:76:
c7:02:05:ae:cc:b5:03:5e:6e:bd:00:99:af:ee:cd:
fe:ef:89:4f:b8:5d:9b:67:04:a2:4c:19:7f:b5:0c:
b8:a7:b8:38:35:2a:10:29:a0:6c:8d:81:55:16:bc:
f9:7e:9b:3a:66:f2:b7:33:4d:7c:b2:ab:63:ec:d5:
db:9c:56:bd:8d:3f:26:c4:bc:75:aa:af:fc:a0:52:
37:9c:9e:4f:4c:0b:a2:28:45:b9:54:94:23:d3:cf:
f3:86:59:cb:2e:21:e9:bd:f9:60:84:c8:66:2e:81:
13:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AB:72:B8:AE:F6:7A:66:C4:2A:1F:1B:A6:BE:CD:53:CC:D6:48:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cd7580fa-aca7-3782-a4c5-4385a6cf4ba4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
72.255.79.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:5e:c6:f2:ce:a6:25:d2:67:ab:d1:33:e2:28:c0:d9:9d:4b:
a4:b4:7a:4a:3a:16:2e:f4:59:fb:54:19:64:ad:4c:1e:41:f8:
da:17:19:4b:16:d6:e4:05:74:3f:6c:df:e7:4e:37:b9:8d:d0:
ba:bf:99:a6:ba:73:f3:d1:87:9c:8b:12:92:16:c5:63:2b:50:
4f:37:bd:ed:26:0d:6f:16:22:9d:01:e1:e4:6d:c4:70:19:cb:
97:34:ed:75:d5:a9:b7:ae:a7:99:a2:d1:50:de:91:f0:69:d4:
16:c0:10:75:0b:82:59:90:21:a6:7f:69:74:75:67:64:7e:52:
e8:2a:4c:e8:4e:70:33:e1:2f:8c:42:de:30:3c:ea:40:47:aa:
c4:41:1d:37:b0:7c:c3:10:02:cd:61:7c:74:ee:0e:1f:74:5d:
f6:1b:fb:1b:e9:5c:93:20:e2:b8:66:a0:9a:65:4f:48:9c:e6:
b7:8a:9a:29:0e:7c:b3:85:28:f5:33:02:e7:5c:a0:87:f4:bd:
af:1e:41:03:80:2c:d2:db:54:fb:d9:c0:e1:06:bb:bc:a2:d9:
da:0f:cd:fe:4f:ef:54:e7:15:f0:6a:c1:a6:7b:07:ba:fa:0d:
e3:d1:2d:1b:eb:eb:30:39:83:92:af:56:b4:84:8d:d3:e4:2c:
3e:24:75:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:58:47 2025 by rpki-client