Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3295264a-c1a1-3d5e-9514-6a927455b612.roa
File: 3295264a-c1a1-3d5e-9514-6a927455b612.roa (raw, json)
Hash identifier: 8sulvVIKtYosfe8xjBuVNhoE3E853rVNNbKQgGglXEE=
Subject key identifier: 96:C6:CD:F1:A3:B5:59:53:F2:83:9F:91:8C:D3:AC:D4:87:F3:23:AE
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D211021BBD6675716E385500
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3295264a-c1a1-3d5e-9514-6a927455b612.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 26717
IP address blocks: 72.4.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:02:1b:bd:66:75:71:6e:38:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=43c5ca5a-0cbc-4f80-be4e-b476706c802f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:3c:80:a5:6d:4d:14:7d:b9:3d:09:a8:58:
e6:66:7c:a5:75:90:2b:ea:23:ae:ec:56:33:bd:fe:
a3:99:37:48:50:1a:3a:e1:e5:51:06:4a:31:50:59:
66:2b:c0:e0:ac:47:bf:49:99:bf:41:e3:33:a2:59:
6d:79:e7:65:42:65:c6:62:02:6c:40:40:e2:5d:f3:
14:95:c4:46:6a:ac:22:0c:c3:13:95:2e:c0:1c:92:
2e:a0:db:8b:4c:58:34:2a:48:ab:cf:39:36:c5:ec:
2b:e5:92:e7:03:64:23:ab:5c:a1:e5:b8:91:c2:28:
fb:bb:07:a5:97:cf:26:cd:fb:64:52:6f:85:4f:5b:
2b:62:d1:dc:95:b1:7b:a5:d8:10:5b:e5:4d:8b:b4:
fe:23:83:7b:52:87:9a:fd:c5:f7:78:19:de:ef:84:
85:ee:85:47:aa:4e:14:0d:97:28:b5:4e:fc:dc:65:
92:de:e2:a8:fa:d3:22:18:e5:d8:28:f7:8e:02:61:
e8:5d:da:b0:70:dd:39:7c:84:8d:75:eb:e5:8b:51:
60:b0:79:22:ff:d8:3a:9b:3f:f1:36:cd:66:83:d9:
82:fe:0c:fb:e7:74:2d:74:af:6e:11:f0:5b:d2:3d:
71:38:18:87:bd:8b:49:18:49:57:c0:00:77:a3:4e:
4b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C6:CD:F1:A3:B5:59:53:F2:83:9F:91:8C:D3:AC:D4:87:F3:23:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3295264a-c1a1-3d5e-9514-6a927455b612.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.4.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:6c:51:90:e9:da:24:e3:46:c5:ee:43:7f:1b:33:4f:bf:b1:
01:93:d1:06:28:d6:9f:d1:cf:de:9b:c1:65:49:4d:42:95:50:
64:5c:f1:7f:58:eb:85:48:b6:5e:4c:32:c6:51:10:25:ce:2e:
5b:a9:6a:1e:c3:75:d7:8d:42:b0:df:63:07:3b:05:65:96:43:
b5:c9:9f:ea:fb:dd:3c:2c:74:ea:25:69:3b:76:3b:1b:e6:d2:
2d:71:ae:7f:65:d4:78:dd:07:86:9b:da:9f:57:90:04:7a:ea:
1a:f9:ed:3a:02:60:67:b4:25:a6:d3:dc:8a:1b:e4:7a:ba:bc:
61:b1:a9:ca:47:0b:90:9f:c5:57:f2:b1:b4:2b:b0:93:5c:d0:
ac:99:5e:5e:0f:21:cc:9c:39:66:78:51:55:43:41:22:70:ce:
cf:65:86:ca:43:0a:27:c5:f0:de:e6:39:f9:6a:00:b3:b3:c3:
43:f2:4d:30:03:54:59:6a:32:c1:a7:d8:87:06:f2:b0:84:44:
04:63:a9:a1:01:6b:d1:e7:05:f6:89:93:04:48:75:76:5a:9c:
46:51:82:af:e5:03:04:08:1b:62:c3:6f:ac:f8:20:75:91:55:
e1:7b:cf:db:39:06:da:5d:fa:0d:d3:2b:28:b1:e6:dc:83:09:
b8:bb:b9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:14:05 2025 by rpki-client