Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d1a2c10d-cca0-3fa3-8712-e69273b46b4f.roa
File: d1a2c10d-cca0-3fa3-8712-e69273b46b4f.roa (raw, json)
Hash identifier: rK4BfFbtE7rpI7xeYERa2xh2MFZyskvca53hi3sdkm4=
Subject key identifier: 2A:E9:59:5C:A3:F9:DA:E3:0E:30:B7:C2:BA:5A:C1:B5:CA:96:36:DA
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F43285848BBBB853B86F8C0AC0D7BFD20
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d1a2c10d-cca0-3fa3-8712-e69273b46b4f.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 11090
IP address blocks: 72.35.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:85:3b:86:f8:c0:ac:0d:7b:fd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=72eb9aa1-8178-4882-900a-3418e72f078a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e8:8d:a8:23:2e:ac:07:72:40:5d:3a:52:00:
49:ce:d6:76:40:93:97:df:6e:cf:43:e3:d3:09:24:
f7:20:9d:48:f5:df:8d:a1:d8:d9:68:0c:9f:84:9d:
39:a8:d6:43:e6:f6:16:f9:da:75:37:6e:39:9c:04:
df:c8:db:b8:ac:24:76:c0:a8:65:82:0e:ff:65:ae:
d0:4a:d7:17:a9:33:8d:42:6c:9a:e5:7a:90:92:5e:
93:c4:17:40:07:a7:72:a4:47:bb:1d:2e:98:98:b1:
45:1e:3b:d6:66:1e:a8:72:90:97:3e:0a:dc:be:48:
fb:a1:a1:82:94:c3:66:55:b2:20:ac:4f:59:cd:ac:
d4:9d:93:02:29:c4:56:79:cf:5d:ae:08:71:d6:91:
87:83:cb:40:5d:c4:15:bd:ed:1f:36:0d:ae:9d:0f:
d4:c3:f7:fb:b4:fe:47:93:29:c3:43:eb:a6:6e:ad:
c6:3a:99:f7:85:d4:f7:f2:61:4c:ef:7c:8f:e1:59:
26:9d:d1:1a:48:34:4c:51:b4:5b:d6:af:43:f4:fb:
d8:b9:e8:da:01:19:22:47:d1:aa:1c:5f:52:76:0c:
cf:f9:39:20:25:d5:8a:b7:bb:0b:9e:40:52:08:21:
df:86:7c:59:1a:41:91:41:0d:8e:dd:c4:aa:18:61:
70:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E9:59:5C:A3:F9:DA:E3:0E:30:B7:C2:BA:5A:C1:B5:CA:96:36:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d1a2c10d-cca0-3fa3-8712-e69273b46b4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
72.35.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:58:8a:fd:54:d5:ab:49:dd:4b:12:bf:62:e4:fe:ec:18:9d:
17:95:28:94:7f:04:55:0f:39:df:91:40:35:47:0d:ac:73:cf:
bb:e4:0b:96:3e:9d:10:ed:e5:de:4b:87:a7:4b:72:75:70:32:
32:1b:7f:a5:75:6f:a0:84:c7:53:04:8c:70:b7:16:05:48:3c:
51:0d:b5:7e:cb:56:10:a1:7d:a9:bb:80:63:4b:19:13:98:26:
b5:fb:07:93:40:79:86:be:86:e1:e3:59:81:84:fc:4e:78:3c:
4c:38:c1:8a:42:56:f6:38:65:88:84:2b:f2:86:78:75:60:e8:
13:7e:65:30:2e:22:d5:2b:7c:71:ed:b5:7f:f9:e0:63:07:14:
43:3b:bf:2a:ec:d0:92:55:a5:19:ab:f4:5a:99:46:42:73:b2:
2b:b3:a0:8d:62:d3:cc:a0:06:8e:70:5f:73:f9:5e:ab:27:d2:
52:e3:5f:f0:1f:a4:cb:eb:46:a5:20:6b:28:e0:e5:fb:cb:15:
06:61:14:cd:97:57:f1:fb:03:0b:07:8f:92:14:fe:c9:39:6c:
07:74:3b:53:3f:09:c1:28:c6:1f:49:69:a8:20:fc:45:cd:d6:
70:c6:c8:c2:40:6d:a6:5d:95:f8:db:da:92:9e:4d:d8:70:79:
24:4b:c8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:59:33 2025 by rpki-client