Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/4f57b72f-fafb-32a5-8dd0-753f1f879774.roa
File: 4f57b72f-fafb-32a5-8dd0-753f1f879774.roa (raw, json)
Hash identifier: RrFsWOfK9W750S1Zqptb0J34jiJdB7htDSk3PXAvs7E=
Subject key identifier: C1:3C:FB:28:5C:D1:AD:EC:69:A8:80:F0:26:09:1A:3E:E3:F0:E2:94
Certificate issuer: /CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
Certificate serial: 010D0C9F4328584902EC17E1553000C9D9309780
Authority key identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/4f57b72f-fafb-32a5-8dd0-753f1f879774.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 395425
IP address blocks: 72.42.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:17:e1:55:30:00:c9:d9:30:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=21c9ef25-ec93-4681-b804-14b1941b29f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:95:9b:fa:0d:f6:28:5d:12:2e:9b:b8:84:5c:
16:dc:1b:e2:e7:17:9e:a6:9f:1d:b8:b4:25:21:0f:
7f:2e:6a:69:20:ca:c7:07:55:e3:f2:60:2d:43:54:
27:af:f7:f7:fa:c5:2f:6c:87:7e:33:33:1b:c7:a8:
11:30:cf:65:b8:c3:85:ee:88:b6:cd:5e:7a:dd:5f:
39:c3:cb:e0:f2:5f:1b:b7:a9:f9:c7:2e:68:ef:c0:
25:cd:b7:5b:b7:ab:43:c7:84:cb:17:2d:99:1a:cb:
26:ca:cd:7e:47:71:d0:7e:68:5d:ea:45:97:6f:d2:
71:1d:ac:70:09:36:4a:3c:6c:69:26:06:a3:eb:bc:
79:54:f7:14:b3:83:74:42:e4:ad:38:93:86:ee:9b:
ee:3e:23:fa:07:62:b8:cc:ac:dd:f7:a2:0e:c8:24:
37:4b:02:b6:a2:fe:ae:57:98:be:61:9e:48:8a:b5:
ae:61:24:fb:94:cd:dd:50:9d:a7:78:5c:46:20:f5:
49:c4:0b:0e:44:80:ed:b8:b9:63:f9:b6:ae:33:06:
f2:28:e8:57:66:f2:fe:e5:7f:71:77:cb:c4:20:ab:
bd:b9:58:4f:9c:12:6b:45:3a:87:c1:78:85:28:9a:
b6:3f:35:b0:f8:50:03:9e:04:db:b1:47:49:ef:48:
60:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3C:FB:28:5C:D1:AD:EC:69:A8:80:F0:26:09:1A:3E:E3:F0:E2:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/4f57b72f-fafb-32a5-8dd0-753f1f879774.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl
X509v3 Authority Key Identifier:
keyid:12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
sbgp-ipAddrBlock: critical
IPv4:
72.42.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:17:11:b5:41:22:16:aa:d8:90:a8:46:82:91:55:f6:a0:ab:
3f:1f:aa:d6:38:95:ab:cc:7a:bd:08:f7:d3:32:f8:8c:dd:5e:
6f:fa:da:c0:9c:6c:74:2a:15:fa:ff:6f:b4:0f:c2:9e:f7:bd:
6f:b3:29:bb:88:e1:48:14:4b:24:fb:d1:94:9b:bd:45:9a:fe:
0e:7a:ac:a0:8e:f3:2f:83:24:87:11:90:b7:cf:03:2b:22:bb:
63:ac:ea:49:d3:02:0d:cb:99:7c:ab:f3:0f:48:ae:60:f9:ff:
29:42:8f:ee:8d:46:62:0e:01:cd:30:50:8a:20:30:4a:72:32:
36:d6:d5:ff:4f:a0:ff:dd:08:a2:fa:64:30:25:59:9b:60:3f:
b6:90:d8:bf:63:ed:20:92:49:1c:25:d7:3d:2e:1d:25:58:a1:
c8:6c:58:87:4b:02:cd:f1:b4:da:a6:77:16:27:f0:8f:ba:65:
72:75:42:c1:aa:c8:cd:9b:ff:5f:72:e1:70:4a:af:65:3f:b6:
78:1e:ad:15:11:54:19:cc:7e:30:15:95:0a:2f:a2:0a:c3:2e:
92:9a:b3:da:29:ef:83:5e:f6:e5:d0:44:e6:bf:f5:a2:fa:9b:
65:35:87:c4:81:bd:72:e6:ca:6f:58:d4:57:b6:9b:d2:fd:fe:
02:db:f8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:19:11 2025 by rpki-client