Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/b5145eee-313d-3f9d-b8b2-bc9db6651be0.roa
File: b5145eee-313d-3f9d-b8b2-bc9db6651be0.roa (raw, json)
Hash identifier: 76apMwFos/07F91CqPhcmYBCrv+I5M8oJgiCq98W6xs=
Subject key identifier: C1:54:8A:CA:53:43:00:6D:2C:E7:B6:A4:03:72:AB:31:50:65:48:CE
Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial: 010D0C9F43285848B4C0D567756DA6607BD60740
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/b5145eee-313d-3f9d-b8b2-bc9db6651be0.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 18672
IP address blocks: 72.172.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:d5:67:75:6d:a6:60:7b:d6:07:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=bfe26299-8d49-49ef-9d0a-448072afce19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e8:c8:5f:0c:b1:bd:b3:1e:45:03:a5:97:54:
f0:87:60:08:fb:26:4d:a8:9f:23:92:a0:cd:c0:b9:
bc:d5:65:5d:eb:8c:7e:aa:24:0a:44:b4:b2:bf:0a:
17:90:c6:50:31:d9:3c:45:83:7c:b6:e9:ca:a8:cb:
eb:f5:c8:8e:0f:87:91:89:c7:b0:2d:08:64:5b:87:
b0:47:43:a6:a4:41:2b:46:40:80:6a:80:13:29:de:
1e:12:8d:e7:d8:0f:59:dd:5e:55:fe:e6:9a:80:54:
86:3e:42:ab:0f:a2:6b:ea:0c:13:86:89:18:47:65:
32:50:24:ab:29:1b:22:ac:3c:39:1b:65:47:ec:38:
c7:7e:54:b8:41:17:41:94:2d:ff:4e:6e:83:d6:44:
a8:d5:e3:c5:fd:ed:75:d2:ad:64:f0:cf:62:f7:ad:
3d:d7:fa:99:84:c8:7a:79:f7:a6:4a:1a:24:2d:8b:
65:5e:6e:b4:73:88:76:7c:14:2c:57:c5:74:95:57:
22:52:55:e1:5b:b9:94:eb:53:5d:ca:4e:0f:90:0d:
e6:3d:06:05:62:8f:03:69:48:71:23:de:79:0b:83:
1a:62:5c:f8:b9:7f:85:cf:68:93:14:34:d4:77:04:
01:34:1d:ee:40:ad:5d:5b:67:47:3e:b3:d3:0c:60:
e4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:54:8A:CA:53:43:00:6D:2C:E7:B6:A4:03:72:AB:31:50:65:48:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/b5145eee-313d-3f9d-b8b2-bc9db6651be0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
X509v3 Authority Key Identifier:
keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
sbgp-ipAddrBlock: critical
IPv4:
72.172.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:07:fe:69:ab:ec:6d:62:16:d2:43:76:a3:3f:96:f7:2d:13:
74:b1:75:5c:07:b8:39:70:dd:03:5f:39:24:0c:eb:f7:2a:72:
9e:0d:bc:52:8d:91:9e:d6:b9:32:48:2b:76:cc:0d:78:2b:c8:
96:65:e8:69:c5:65:3f:1b:c5:b1:96:66:72:95:6a:e6:c9:e5:
45:56:73:45:66:dc:34:23:50:ce:a6:00:ef:aa:ac:f2:9a:5e:
32:34:5c:a4:18:1d:61:00:74:6c:3b:d8:83:a6:d1:47:a4:85:
36:48:4b:c9:7e:c8:87:96:3a:75:05:c0:57:cd:6f:03:48:a3:
97:8d:a3:f0:54:07:6c:42:ef:81:81:ce:65:7b:70:7d:fd:5a:
46:fc:17:a2:27:75:1c:57:99:8c:8b:22:59:20:2b:9a:23:bf:
ad:46:83:c5:af:f2:7f:1d:fe:70:45:ea:7b:e0:42:87:5c:bb:
d8:92:8c:0d:76:d3:8d:e0:48:c1:9c:ac:b3:a1:b9:aa:aa:7c:
d3:73:93:60:a2:35:c9:14:c5:37:3f:56:7d:28:94:89:94:c2:
72:04:33:c7:30:e8:40:2f:68:9d:03:e3:62:5b:f6:aa:39:df:
a5:11:e5:1c:f6:a9:da:45:da:df:c6:12:74:6b:14:81:9a:7a:
97:00:e4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:34:06 2025 by rpki-client