Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/dd463f07-79db-3bc9-94f4-f299b76b8bcc.roa
File: dd463f07-79db-3bc9-94f4-f299b76b8bcc.roa (raw, json)
Hash identifier: gx7yDFRzLje0yBHBHuVnQcqdlWqwrowO7W23IHfCTS0=
Subject key identifier: E5:15:35:53:D1:87:BC:8D:2D:D3:1B:41:1E:4A:1A:46:D3:A1:4E:0B
Certificate issuer: /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial: 010D0C9F432858487A2087AC9E7279AEB015B400
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/dd463f07-79db-3bc9-94f4-f299b76b8bcc.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 7992
IP address blocks: 72.38.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:87:ac:9e:72:79:ae:b0:15:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=43564f0c-7bd8-41e4-8a39-86801f087f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:47:a8:17:29:ce:4b:e4:b9:80:39:5c:96:71:
6d:70:9a:eb:74:6e:ab:d2:18:41:a4:de:ef:c1:f5:
78:ab:13:97:57:aa:0a:f1:6d:fc:67:c2:b2:0d:d0:
b3:42:79:ad:5d:bb:ce:cf:56:17:50:e6:f7:e0:d0:
31:de:dc:7f:67:c7:1b:4a:f8:05:58:d6:c6:c2:2c:
15:57:27:4e:35:d7:85:9d:e6:ff:87:31:dd:01:a7:
67:56:79:df:46:23:0f:2f:73:13:a9:79:9d:da:0f:
95:c4:38:f8:f2:a3:db:07:6a:9c:78:67:c8:82:85:
a7:41:d1:17:00:1b:17:0d:9d:0d:9d:31:e2:19:1d:
3e:11:11:17:64:f0:ad:1b:b8:57:f2:20:e2:58:54:
58:cd:f8:1a:b4:10:20:1c:1c:ac:64:a9:38:d7:84:
63:13:a0:71:cc:0d:ed:17:4b:73:1d:96:88:bb:73:
d6:b2:99:6a:dc:b3:82:de:30:5c:b3:bf:42:24:dc:
e6:a0:9d:01:e7:88:ce:90:a9:9c:16:50:4e:87:1e:
ba:c1:83:8c:eb:5c:35:55:bb:f0:1f:b9:09:ab:3a:
e6:0e:10:e7:d3:40:96:a2:c8:ae:f2:93:c3:fa:6e:
d4:a1:66:88:85:f4:a9:22:6d:e8:a6:d6:06:46:7f:
21:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:15:35:53:D1:87:BC:8D:2D:D3:1B:41:1E:4A:1A:46:D3:A1:4E:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/dd463f07-79db-3bc9-94f4-f299b76b8bcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
X509v3 Authority Key Identifier:
keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
sbgp-ipAddrBlock: critical
IPv4:
72.38.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:ac:b3:81:e3:ff:86:21:15:0f:47:49:26:d9:db:cf:d0:59:
08:3f:73:65:51:0b:d4:d0:31:53:be:60:5f:b5:13:3c:5d:0c:
fa:a7:45:95:cb:47:cd:70:80:23:9b:cc:9e:c4:31:1a:99:e0:
5e:93:36:9a:35:9c:74:2e:cc:c7:88:bc:c7:b8:15:4c:83:85:
16:02:93:a2:da:b7:a9:25:68:f7:89:55:ef:ec:ce:4e:71:f8:
49:ec:1b:4a:33:9a:2a:5c:0d:46:da:cc:b8:79:e5:86:98:84:
bb:2a:15:81:b2:e8:c4:34:c0:e1:41:72:ab:b4:ad:63:0f:0a:
bb:d9:68:ac:31:68:36:da:64:7e:67:da:82:11:9e:f4:1b:a3:
13:d3:67:66:72:8e:6a:96:5e:32:b7:86:23:74:d4:3a:01:7a:
fd:58:5d:f3:27:cc:e5:1b:60:63:be:95:d5:ba:2e:ca:a2:ab:
b9:09:35:ac:a6:2c:4a:9d:ff:4e:c3:20:8c:08:5d:4d:d8:95:
e3:2d:89:43:d9:c6:1d:cb:2a:6c:94:ea:e2:26:a0:8d:60:5f:
dd:d7:88:e7:6f:f1:c1:ad:ad:87:db:35:e8:59:f1:b8:8d:23:
63:76:4b:7a:37:67:92:e1:1a:0e:b3:eb:17:78:57:aa:37:37:
5d:be:f7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:45 2025 by rpki-client