Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/d6394bb2-f8e1-30ff-8fc4-7244caf0c9a0.roa
File: d6394bb2-f8e1-30ff-8fc4-7244caf0c9a0.roa (raw, json)
Hash identifier: sLmTBkpRCA2CjfPf+bpy3ahAJs6vYSxnB/cdNtQfvl4=
Subject key identifier: A3:FC:60:75:F1:BA:34:2D:0A:02:6F:36:5B:EB:7A:DA:F0:A3:6D:5D
Certificate issuer: /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial: 010D0C9F43285848897B253B9098D359475D59F0
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/d6394bb2-f8e1-30ff-8fc4-7244caf0c9a0.roa
Signing time: Tue 14 Jan 2025 02:00:39 +0000
ROA not before: Tue 14 Jan 2025 02:00:39 +0000
ROA not after: Mon 14 Apr 2025 01:00:39 +0000
asID: 19871
IP address blocks: 72.22.92.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:89:7b:25:3b:90:98:d3:59:47:5d:59:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Validity
Not Before: Jan 14 02:00:39 2025 GMT
Not After : Apr 14 01:00:39 2025 GMT
Subject: CN=2dbad49a-8137-4a21-8903-78f292ba76d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:a3:b4:ce:32:91:41:a2:dc:15:bf:38:a6:
e1:0d:4b:69:c6:57:51:d6:5b:c8:37:e2:04:09:52:
8a:c2:1f:b1:dc:33:9f:f3:07:9b:98:72:34:ca:bd:
24:02:1e:10:93:ff:4b:f8:7f:fc:aa:1b:f3:20:ea:
85:09:2c:aa:4e:e6:87:db:e8:f6:ab:0f:e2:f9:a5:
a1:ac:bf:ed:4c:5c:22:81:17:1c:3a:45:37:42:47:
5b:54:f6:97:7c:6a:91:90:ec:71:fb:86:3a:1d:65:
2b:a1:6d:a9:34:57:af:69:c5:30:0a:a7:c4:d2:38:
95:fe:0e:26:f3:69:66:fc:73:70:cd:22:71:c3:3b:
aa:a5:92:b0:f3:97:4b:b1:fc:56:f5:ed:d1:56:30:
ef:5f:df:a9:a7:2e:96:e4:07:2a:bc:95:d4:25:61:
ba:1a:29:da:4b:04:84:65:36:80:7e:3c:10:2d:8a:
cf:ff:c8:06:f9:d5:20:00:9c:9c:5b:6e:82:ab:db:
11:52:0a:b4:cd:46:8d:e3:97:5d:8a:22:24:31:14:
41:4a:44:f9:55:19:6b:7e:fd:9c:92:1e:f7:9f:49:
22:5b:3c:31:4a:02:e0:13:e5:c9:25:ee:87:b3:73:
b7:e6:a4:3c:6d:d4:8c:e7:4e:7d:6f:d5:dd:87:da:
45:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FC:60:75:F1:BA:34:2D:0A:02:6F:36:5B:EB:7A:DA:F0:A3:6D:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/d6394bb2-f8e1-30ff-8fc4-7244caf0c9a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
X509v3 Authority Key Identifier:
keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
sbgp-ipAddrBlock: critical
IPv4:
72.22.92.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:52:1a:24:d3:74:9a:84:0b:fd:d2:d7:14:a1:fd:20:e1:d8:
0d:2c:6e:24:a1:a2:fa:94:8d:ad:22:5c:f3:95:67:60:f5:a0:
4e:a3:97:d6:f0:bb:b2:5c:03:d9:c7:b9:c5:03:41:af:79:2e:
26:04:41:8a:9f:5f:6b:0f:3e:0b:a8:ad:cd:c9:ba:9c:2e:df:
f4:2c:11:af:3b:12:9d:31:02:ef:e1:cd:71:63:57:da:27:34:
42:1a:e0:43:e3:36:eb:a4:88:e6:18:a8:a9:d5:61:66:20:d3:
76:82:e9:ea:2c:c2:4c:57:41:e2:fd:a1:09:57:be:c7:7d:93:
b8:e0:c5:9f:fc:e7:f5:68:41:46:ff:ac:19:48:dc:ef:ae:6e:
9f:63:df:04:a8:bc:eb:1a:9c:fa:05:1a:16:cf:df:8f:d7:1c:
9d:73:66:c0:91:94:02:6c:5e:7a:a3:e5:e6:66:c9:4b:03:2e:
44:01:dc:f0:dd:5b:55:31:78:d7:a7:1a:9d:7f:12:18:0b:95:
e3:06:95:3c:6d:18:30:f3:32:f1:e6:db:43:1c:cb:38:1d:e4:
ca:7a:6d:77:73:7c:80:27:5e:99:78:8b:0a:23:9f:03:d9:69:
75:ad:ce:66:5b:33:b8:00:1a:fd:67:39:d5:fa:b0:b4:3c:f9:
92:43:1d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:35:51 2025 by rpki-client