Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/e667c5dd-d722-3d40-ba59-95b2adb19266.roa
File: e667c5dd-d722-3d40-ba59-95b2adb19266.roa (raw, json)
Hash identifier: g+QxdU2nw5XF+lhW9OuLuYEFtPThvuM+Xp8a80NgwGM=
Subject key identifier: E9:15:6D:C1:27:09:46:AD:DD:7B:4F:C3:26:CF:3A:DF:3F:C3:11:6D
Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial: 010D0C9F4328584919418A0F5F006BF5FE2F6080
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/e667c5dd-d722-3d40-ba59-95b2adb19266.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 22765
IP address blocks: 72.20.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:8a:0f:5f:00:6b:f5:fe:2f:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=9c064819-adeb-4406-834f-650608c4f675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d5:6d:91:97:a5:58:39:88:ac:74:c9:19:b9:
fc:24:03:38:80:20:2d:e1:2b:bc:c2:26:29:db:bc:
29:9a:99:6d:3e:04:ac:65:36:3f:10:3d:26:fc:76:
17:59:a9:1f:3e:99:d2:dd:1e:fa:be:9c:1f:9a:ee:
98:27:e7:99:bb:30:2d:89:57:a9:5d:60:0d:d7:0b:
71:37:b7:8e:69:6f:0e:66:91:54:29:ff:ca:c8:54:
14:21:46:c2:e3:e1:ad:81:ec:f0:dd:ca:57:eb:69:
1e:35:85:f6:da:1e:e3:d3:00:af:95:bd:e8:c0:e9:
33:59:ae:28:6f:e9:89:7f:56:84:bf:ee:9f:d1:8d:
3d:6c:7b:43:82:60:86:1c:83:8a:e6:61:d6:74:b9:
c5:47:dc:e5:98:65:3f:0d:c8:fc:bd:45:53:15:39:
2d:1a:21:e2:10:d8:ec:af:db:d0:7b:86:7a:dc:6e:
82:c8:f7:f4:6a:d9:2b:c9:4c:83:53:5b:47:f4:fd:
1a:95:2e:5a:c7:6c:d8:19:91:92:01:0d:3c:fb:bb:
d0:9c:13:e1:ae:c8:ce:a4:8a:b6:5b:d4:ee:60:d1:
ee:88:44:f1:15:56:7e:60:51:25:fd:97:c7:4b:52:
d8:c3:45:d9:76:a6:0e:18:b9:4f:41:af:a3:7f:22:
b5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:15:6D:C1:27:09:46:AD:DD:7B:4F:C3:26:CF:3A:DF:3F:C3:11:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/e667c5dd-d722-3d40-ba59-95b2adb19266.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
X509v3 Authority Key Identifier:
keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.20.192.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:ca:d3:b5:a8:cd:41:f8:aa:ef:fd:ac:55:d4:1d:25:a8:00:
a0:14:b8:dc:12:c1:96:35:4f:75:b0:77:5a:e9:07:95:d3:9e:
a7:bb:00:e0:4a:c6:70:81:88:be:93:4f:2f:6d:a9:c9:46:cf:
37:aa:9c:8c:7e:a0:dd:55:07:59:9d:5c:c2:b0:08:4f:48:ab:
fa:0e:01:e7:24:07:b3:98:c9:f3:98:7d:b0:2e:2b:6f:c8:ea:
16:5c:4a:76:43:ec:ec:1e:5b:ba:a5:56:2e:76:59:03:32:70:
75:d0:b5:9e:e3:ad:cb:eb:07:75:ad:fb:4d:78:25:4b:39:e4:
bc:39:14:63:44:fe:e9:de:3f:59:06:80:37:f2:b4:60:7c:2a:
23:c8:51:2f:93:cb:3d:3a:c2:d3:c9:7d:c4:ad:fc:eb:33:28:
f9:6c:91:8d:64:04:2c:6c:d4:42:37:b8:18:cb:25:74:51:ed:
ea:c8:64:9e:67:76:31:d2:5c:a7:db:46:27:40:ff:87:ad:41:
fd:d4:df:b7:bb:96:04:d0:dc:de:b3:4b:ab:3f:3f:53:a0:b3:
60:d5:6c:25:a3:a6:88:e4:14:b6:be:bd:bb:f0:ff:7e:45:cb:
b6:14:26:cb:d6:ed:a5:d2:01:bb:b1:87:c5:df:20:ba:06:40:
7f:24:fa:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:43 2025 by rpki-client