Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/4db01a54-154f-32c5-a540-8f9f89529b1c.roa
File: 4db01a54-154f-32c5-a540-8f9f89529b1c.roa (raw, json)
Hash identifier: ep3JsT+rvU7kaEs0gDqpiza9leCl3PlxU8okZZvOCTY=
Subject key identifier: 1B:B6:F6:6B:84:FC:24:4B:91:AD:AC:91:FA:89:68:44:16:A7:F1:85
Certificate issuer: /CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
Certificate serial: 010D0C9F43285848E2D114EB02E3A2411660F100
Authority key identifier: 41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/4db01a54-154f-32c5-a540-8f9f89529b1c.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 14618
IP address blocks: 72.13.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:14:eb:02:e3:a2:41:16:60:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=1205acaa-07c8-4fa2-a02d-4180f8ab944f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f1:2d:71:bc:d9:87:c3:a8:73:aa:e7:28:1f:
61:fa:04:b8:79:64:0e:68:31:97:7b:59:9e:df:36:
b4:ef:c3:ca:52:9e:fc:c8:bb:6b:16:7c:1f:cc:ee:
5c:13:28:54:63:84:7e:80:01:8a:41:25:99:0d:83:
e2:70:f2:e9:95:47:b0:8b:95:5f:69:4d:bb:2f:3f:
bb:ee:bc:a8:f2:95:7a:9b:f0:b5:cc:17:54:50:b6:
25:19:ff:2c:9b:c9:bf:70:0f:65:41:35:ba:21:08:
5c:6c:e9:f2:ac:f1:e0:dc:7d:7b:91:e4:5a:fb:7c:
47:9b:1b:11:7e:22:20:fe:97:f2:eb:99:30:f7:fb:
23:f8:12:51:aa:68:b2:91:4c:26:9e:a8:df:46:96:
fc:5b:e0:d7:48:a8:cb:30:a2:0d:7a:d9:2f:71:4c:
96:28:0c:2b:9f:fe:f2:d5:f2:8d:68:16:c3:53:15:
19:17:c1:23:82:91:d8:ad:ff:65:c9:ea:17:e9:d9:
4c:e2:73:82:f4:3e:e0:5e:d6:a2:10:e8:61:ed:a4:
94:d8:5d:2b:32:64:81:b1:29:74:da:64:ab:3a:7d:
01:44:88:02:c9:38:d0:a9:28:41:17:79:f9:5a:1c:
01:41:88:82:86:a0:90:05:c1:d5:e3:b3:2f:8f:94:
ca:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B6:F6:6B:84:FC:24:4B:91:AD:AC:91:FA:89:68:44:16:A7:F1:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/4db01a54-154f-32c5-a540-8f9f89529b1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl
X509v3 Authority Key Identifier:
keyid:41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
sbgp-ipAddrBlock: critical
IPv4:
72.13.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:8f:10:c6:c2:0a:7a:c5:6a:67:ec:7d:2d:7b:8a:70:55:9a:
df:ab:e9:8f:26:ee:c5:ca:5f:66:1b:c9:36:e8:ca:d4:97:d5:
1a:2a:da:54:f4:7b:77:89:b0:5a:ca:5a:9f:7d:ff:a2:9d:d8:
39:bb:00:b4:6e:81:82:08:b9:eb:ad:79:2b:50:9b:38:89:18:
85:8b:5d:36:9e:5b:b2:39:e2:11:0c:10:98:e2:6c:61:0c:16:
eb:61:b9:63:45:30:9d:c8:02:57:95:08:2e:c6:f9:60:46:1b:
c3:91:bf:4d:1a:20:ea:27:42:03:31:ea:93:f6:3d:aa:a7:6d:
6f:c0:5d:ac:b5:e4:45:1d:45:8b:17:5e:8a:26:55:19:93:84:
94:6f:14:68:ff:a7:15:cf:5e:eb:4d:a3:2f:a4:96:ce:dc:1e:
d6:73:14:ff:4e:b6:07:fa:e4:44:80:53:86:28:81:d2:3e:35:
44:6e:a8:ed:21:48:d2:ea:28:b2:c2:3d:79:5a:e5:5a:4a:e7:
15:4b:92:ba:a0:58:40:bd:dc:2a:6f:5a:c0:c3:f7:4b:50:7e:
77:56:2b:ec:cb:45:7d:af:d4:7c:9d:93:b3:85:92:a4:6e:36:
3c:f7:63:f2:2b:7b:70:ce:57:e3:44:dd:b7:27:f3:a4:b8:e1:
19:08:c4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:44:13 2025 by rpki-client