Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/25b10e5c-852c-3501-b71d-be7d75acec57.roa
File: 25b10e5c-852c-3501-b71d-be7d75acec57.roa (raw, json)
Hash identifier: xQqBvcOu3VK47TMZI1/SSiB1NDDa4jg5+w7zwNegtTU=
Subject key identifier: 27:88:2B:D8:F0:7F:7E:B7:B0:A5:A6:D5:EF:E6:22:7A:D0:FD:10:2F
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F43285848BBBB856DF9100F8D4B88DB00
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/25b10e5c-852c-3501-b71d-be7d75acec57.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 11090
IP address blocks: 72.35.96.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:85:6d:f9:10:0f:8d:4b:88:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=620a05df-2782-4b5c-a014-32fadb0ceb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2a:58:7f:9a:f0:ae:96:b9:e2:e8:a9:cc:f4:
30:4e:e5:c5:23:f5:12:e8:5c:6c:f5:e5:5f:72:ef:
e6:24:3b:19:14:fb:34:e2:5f:1b:32:7a:4e:c9:e3:
cf:79:3c:91:87:31:50:98:90:f3:31:b2:31:bb:e5:
28:ac:32:4f:b0:96:6e:b7:9b:2e:1f:24:f5:27:9d:
61:bf:30:ce:ef:70:ba:a0:00:e4:69:a0:3f:27:05:
87:56:3c:5f:75:eb:eb:64:0c:df:a7:5c:0b:ea:a1:
5f:50:d7:67:7c:8e:b5:76:be:91:89:e7:a1:6f:a9:
ed:88:a1:c1:b4:0e:b3:8d:29:42:09:d6:8c:0c:da:
b7:a8:45:8a:80:70:ef:56:ff:e7:fb:89:db:43:bc:
dc:d5:de:7e:6b:ff:7e:1f:ed:93:ca:31:f0:01:f6:
3d:fd:e4:a1:a3:d7:be:55:9d:71:6f:b6:43:df:d2:
a8:48:24:1e:24:d8:08:32:40:23:aa:64:46:0f:71:
ba:c0:2a:ca:f9:de:b5:83:01:92:d6:fe:f3:27:5f:
9c:88:aa:92:8e:89:4a:43:d4:f8:63:8b:c1:70:49:
48:1d:ea:db:8a:63:cb:c2:16:09:cd:d2:61:28:ed:
e4:7c:09:44:94:a6:19:4c:a0:aa:48:b1:db:ec:99:
39:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:88:2B:D8:F0:7F:7E:B7:B0:A5:A6:D5:EF:E6:22:7A:D0:FD:10:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/25b10e5c-852c-3501-b71d-be7d75acec57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
72.35.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:28:4f:ff:a1:ef:d3:a7:61:04:76:b3:d2:94:9b:bf:f9:c6:
bb:4c:bc:05:40:12:e7:81:8f:32:da:e3:9f:c3:38:ad:55:6e:
b8:12:ca:85:25:b4:2c:2c:cc:51:bd:e1:c3:80:0a:2a:83:3e:
08:f8:7b:cb:b1:15:0f:a5:93:50:ff:5d:14:a6:7d:df:40:68:
df:35:1e:50:d2:12:0e:8c:73:32:7a:29:e5:50:69:48:61:18:
56:1f:a7:6c:38:85:0a:33:f3:53:e3:09:72:13:90:7a:35:a3:
ef:1f:f8:ac:1a:2a:ee:aa:ee:9e:26:03:d7:06:11:07:a2:02:
8d:3c:e5:da:85:09:68:5d:ba:8d:2b:80:d2:73:6f:23:29:cf:
b2:31:7e:a7:8f:e2:89:9f:65:02:26:2d:a1:42:07:c0:75:64:
bd:70:db:9d:53:94:1f:42:4c:65:48:c3:69:5f:64:58:96:0b:
fa:b9:9a:fd:27:5f:38:4c:75:31:2f:97:01:d7:54:41:6f:8b:
63:4b:48:af:39:fd:ee:c4:c4:8a:48:a8:cf:a7:1d:a8:6f:90:
54:2a:79:40:0f:af:58:1e:f6:22:53:ed:e4:03:f6:ac:14:3f:
00:f6:f4:26:4a:6d:69:ef:c2:18:12:5a:93:84:b1:75:4e:32:
f8:c8:c0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:03:15 2025 by rpki-client