Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f39e52c7-d594-3418-9480-29cc8cf218ee.roa
File: f39e52c7-d594-3418-9480-29cc8cf218ee.roa (raw, json)
Hash identifier: VSWc2V7LI4zFJ2n8FY/R7/nGPUc58Dq7uWn4Kp837Ps=
Subject key identifier: 24:0C:79:BA:ED:24:2A:74:A2:C8:70:82:48:97:10:95:72:50:40:63
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848FD109DBAF5A82A066BFDDD80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f39e52c7-d594-3418-9480-29cc8cf218ee.roa
Signing time: Mon 24 Feb 2025 11:39:53 +0000
ROA not before: Mon 24 Feb 2025 11:39:53 +0000
ROA not after: Sun 25 May 2025 10:39:53 +0000
asID: 30036
IP address blocks: 72.255.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:10:9d:ba:f5:a8:2a:06:6b:fd:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 24 11:39:53 2025 GMT
Not After : May 25 10:39:53 2025 GMT
Subject: CN=1d8a6ac9-45b3-4e1f-baef-245190d0d5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:30:83:60:a3:e5:5e:5d:97:86:cb:a0:61:2f:
3b:3d:3b:39:a3:82:66:04:a7:28:b4:af:21:75:be:
49:b7:3b:72:5d:a3:8a:a9:22:3a:a3:44:be:80:b1:
be:fc:a3:b4:c4:b0:4e:7b:72:e6:ef:d1:71:a5:50:
91:b2:e7:ee:e6:57:8c:57:00:4f:50:31:b1:11:85:
b9:02:43:00:21:33:7e:9a:c8:65:24:c5:4d:97:9f:
58:d3:77:13:e9:98:5e:9d:5a:2b:b3:bc:37:75:91:
07:e5:8e:6d:2e:54:2d:d5:a2:e6:76:bd:fd:00:68:
5d:83:4b:af:11:b7:26:2b:42:48:34:11:8a:4d:7e:
f7:0e:e1:15:64:04:fc:61:db:67:40:a3:61:06:9c:
c6:27:e7:b9:fc:c1:93:92:a2:ab:45:c8:12:12:ac:
84:c5:97:a0:b9:95:60:b7:da:69:0b:bb:e0:b8:66:
a4:63:b5:82:9a:a3:91:79:90:e4:67:b0:e0:59:d9:
14:7e:45:ff:e6:9e:c7:f7:e2:d1:3f:e9:4f:ec:61:
bd:29:2b:0d:a1:2b:b2:18:f6:0e:f0:bb:b6:69:c5:
3f:1d:f2:2a:2d:25:70:d3:c0:74:0c:c6:ac:19:e4:
76:bf:db:50:3c:d6:33:33:cf:f6:16:e5:19:74:d7:
9b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0C:79:BA:ED:24:2A:74:A2:C8:70:82:48:97:10:95:72:50:40:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f39e52c7-d594-3418-9480-29cc8cf218ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
72.255.110.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:6f:f9:b1:3f:32:67:70:b9:0b:7e:58:c3:0c:ce:17:da:4e:
d6:58:9b:86:01:07:fc:c0:fc:25:ad:b6:ed:bb:f7:51:fe:32:
26:62:ee:32:d0:d1:06:20:fc:9f:a6:78:2c:cb:3e:8f:23:bd:
b7:15:75:c4:7a:f6:b4:01:0a:63:67:a9:80:af:46:90:6e:a4:
3e:fc:ca:25:80:3b:ef:1e:4d:03:57:9c:44:fc:7d:3f:5b:ad:
80:57:5f:b9:c5:8b:bc:43:c7:ae:41:48:b0:72:13:a5:d9:9f:
7f:b8:f0:02:70:81:fa:39:26:97:71:a8:0a:a8:cd:44:d0:d4:
b7:07:c8:5a:89:63:a5:d8:57:19:7f:3a:e3:46:bd:38:0b:ab:
f8:ac:74:1c:43:1a:6d:b5:d0:94:ed:28:e8:7c:1b:bd:28:ce:
57:f7:5e:8f:3a:6b:82:8c:3e:ed:2c:84:e0:67:ac:9f:f9:ec:
45:e2:b3:f9:ce:19:47:d5:da:76:bd:6b:e8:44:da:62:bb:26:
25:b8:4f:53:00:6c:4c:8f:83:ab:a3:f2:5b:e1:f1:77:ee:b4:
d7:0d:86:ac:68:18:10:63:0d:1c:71:c6:21:5b:f5:23:97:a2:
9e:52:c5:b2:9d:bc:46:32:48:eb:bd:d1:c6:62:6e:f7:09:88:
e5:36:20:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:12:16 2025 by rpki-client