Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/0de8a9ec-bfc4-3e80-b8fa-67d78b5b184d.roa
File: 0de8a9ec-bfc4-3e80-b8fa-67d78b5b184d.roa (raw, json)
Hash identifier: CWfX9CTRors23ciHqoa5TJKG2TppxQXnI4qZl5I+NF8=
Subject key identifier: B2:DA:50:BA:55:61:A7:BB:52:9A:62:96:C3:B2:DF:1E:3E:67:D9:A2
Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb
Certificate serial: 010D0C9F43285848C580F563A5E13DA5B8D41F20
Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/0de8a9ec-bfc4-3e80-b8fa-67d78b5b184d.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 33322
IP address blocks: 72.1.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:80:f5:63:a5:e1:3d:a5:b8:d4:1f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=f1620f33-5098-410c-92c4-d2cd8a02d824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b2:64:3d:f3:bd:4a:b3:a5:17:d4:9b:ac:35:
9e:54:e5:df:13:3d:1b:6d:6e:80:4c:51:e5:6a:0c:
24:01:10:f9:77:00:31:92:82:dc:c3:eb:83:bb:d8:
3c:42:0e:71:3a:ec:7e:f1:ae:ce:3f:ce:8e:d8:25:
4d:a1:fe:93:b0:51:ea:ed:fd:4f:3a:68:a2:69:2b:
32:a9:04:ff:13:e4:35:20:70:2f:4a:fb:68:e4:05:
ac:e0:0d:f2:e8:78:70:86:b6:b7:41:ed:4f:78:82:
98:53:5b:9a:5a:60:72:d9:bb:98:b7:89:24:46:08:
48:08:4c:c8:d8:4a:b1:6b:a7:c8:bc:d6:40:4c:b9:
81:d4:62:88:02:d4:c5:54:c5:07:4d:2e:38:78:b0:
c3:34:77:45:f2:2f:ce:73:e6:30:f4:02:d8:6a:16:
0f:91:aa:93:2a:45:f4:c4:9d:01:84:29:57:a6:22:
2b:bb:bd:f1:ad:5f:27:33:c6:47:4c:82:14:ed:47:
e1:2a:d8:e3:db:e7:cf:83:7c:bc:27:3b:69:89:3c:
9d:6f:fa:46:14:79:23:10:d0:f1:84:3d:9e:ae:dd:
9f:b5:69:d5:a1:34:08:6c:8d:59:3f:29:68:84:b2:
07:b2:4f:eb:02:20:fb:53:b7:bb:bd:91:1e:5a:65:
16:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DA:50:BA:55:61:A7:BB:52:9A:62:96:C3:B2:DF:1E:3E:67:D9:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/0de8a9ec-bfc4-3e80-b8fa-67d78b5b184d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl
X509v3 Authority Key Identifier:
keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer
sbgp-ipAddrBlock: critical
IPv4:
72.1.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:f4:e6:49:de:fc:f3:ac:ea:f1:55:71:8e:1e:5a:b3:b1:e7:
41:4c:f3:ab:b8:af:4a:2e:86:78:84:12:81:42:4e:86:ec:12:
01:e6:61:43:c7:7e:46:b4:49:4e:e3:8f:65:d8:45:cf:25:d5:
10:c3:22:f1:00:28:c7:e1:e3:36:27:77:c0:b3:ce:76:10:64:
d5:52:89:7d:ce:04:d8:b0:81:8b:b0:2f:85:9b:59:fd:ac:0f:
f4:a5:eb:cb:6c:cd:7d:b7:5b:43:e3:53:e8:d0:e6:7b:ee:f0:
80:c4:95:2a:24:7c:6b:71:86:84:8b:d5:94:0d:63:eb:83:eb:
d5:05:cd:51:b5:01:a0:4f:07:65:f9:d4:a2:75:23:13:4e:75:
1d:73:af:22:02:64:bd:a1:c2:f6:9f:8f:30:f1:f7:fe:f0:e3:
91:1f:27:ad:3f:37:3f:7b:31:9f:01:89:45:64:0a:d2:51:9b:
41:c1:bc:f8:ac:2c:02:2f:1d:4d:a2:56:a0:24:61:33:5f:96:
d6:7a:d9:d2:64:3f:9f:9b:94:cc:73:37:1a:0e:2a:d2:4a:27:
00:ed:d9:f1:cf:68:d2:f8:45:d7:f9:5f:71:80:2f:45:fd:26:
eb:32:27:e9:bc:4c:6d:33:c4:31:f8:74:fc:5f:f7:61:b2:1f:
bc:a6:53:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:05:03 2025 by rpki-client