Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/69850838-f6f7-39ae-a994-94f64acf9b5b.roa
File: 69850838-f6f7-39ae-a994-94f64acf9b5b.roa (raw, json)
Hash identifier: eZRYDbRcplYhUWlZDYE44AfUMbygCRnEOJRL3BMzZPo=
Subject key identifier: 90:A2:A3:BB:13:3F:13:35:8F:69:8D:DB:04:12:FC:9D:4A:DD:EE:41
Certificate issuer: /CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
Certificate serial: 010D0C9F4328584902EC17F107D067EEAA899940
Authority key identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/69850838-f6f7-39ae-a994-94f64acf9b5b.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 395425
IP address blocks: 72.42.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:17:f1:07:d0:67:ee:aa:89:99:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=ac26f99f-1f86-4d9c-a820-ab37a2a6d950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:30:a5:ea:ff:95:e5:52:72:ae:0f:c1:06:80:
87:d7:83:ac:93:72:e3:83:d5:a5:1e:dd:04:67:4f:
c8:3e:5d:d3:e2:5e:81:31:78:3b:27:2d:a1:ff:dd:
1d:54:dd:41:a1:e3:9f:d9:01:55:39:7f:be:7d:1d:
6e:a9:e4:3e:3b:97:69:6a:22:a2:e3:64:b6:d4:c1:
26:7f:e8:27:e6:f7:9d:c1:35:02:39:99:b7:9d:c1:
b8:a2:67:13:a5:f0:b2:85:3c:46:10:b6:d6:42:34:
61:cf:1d:dc:ff:b6:81:93:6f:46:db:0e:08:c0:de:
24:08:ad:70:97:79:e3:30:9d:d1:e6:61:ae:f8:ad:
93:b9:6c:b7:5a:8f:bd:38:8e:12:df:1e:b9:fc:74:
10:a8:9f:79:b0:ff:bc:6b:03:e6:de:7c:7d:75:4c:
22:c0:3c:e6:5f:14:d7:5f:c7:37:65:7b:28:4e:85:
8f:bf:60:fb:e3:78:e7:05:f1:9c:31:ef:c2:54:09:
74:af:86:f7:73:13:69:98:4e:b8:90:32:42:e1:03:
db:b0:89:e3:ce:6c:f4:fd:ce:bd:d8:9c:e4:42:41:
3f:a5:41:c1:fd:03:30:9a:aa:44:80:9f:f7:f3:ab:
7a:af:aa:61:d1:f6:eb:1a:85:38:38:a6:3d:6f:45:
8a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A2:A3:BB:13:3F:13:35:8F:69:8D:DB:04:12:FC:9D:4A:DD:EE:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/69850838-f6f7-39ae-a994-94f64acf9b5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl
X509v3 Authority Key Identifier:
keyid:12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
sbgp-ipAddrBlock: critical
IPv4:
72.42.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:9a:d0:e4:ba:5e:e8:80:50:e5:c5:5e:e9:3e:8c:83:39:3f:
1a:3d:18:ca:4b:d4:c0:3e:0d:e8:96:e9:80:50:92:3d:5e:e6:
2e:5c:ba:d0:e9:e1:fa:aa:20:14:06:5c:86:28:03:44:0f:95:
98:d3:fc:fc:7a:e0:05:25:b3:eb:d7:d7:52:53:97:da:6a:95:
47:6d:d6:b8:db:27:f0:81:f0:85:af:4c:ac:02:f1:92:74:5e:
9d:ff:4d:15:4f:62:47:38:53:74:bf:37:85:b4:08:9c:1c:0a:
fd:0e:b0:cd:1a:60:0d:52:e8:74:d2:67:f0:2a:cb:c6:9b:4d:
5f:67:d5:6a:29:cb:bb:fb:87:9a:7b:52:33:45:3f:13:ad:71:
28:aa:3c:a6:00:52:8c:3e:03:c8:ff:aa:67:e6:18:66:a5:cd:
92:97:9a:d0:ef:10:17:09:5d:78:b1:2c:6c:9f:18:1a:2a:fd:
e9:c3:eb:9b:c2:b3:1f:b2:ab:4e:e2:0a:33:1c:c3:0a:af:6b:
15:d8:f7:13:6d:b1:a7:f7:96:db:fa:5a:c4:20:40:99:ba:47:
3d:5b:a1:3e:be:68:ca:28:c9:3e:ea:b7:83:02:18:37:04:ea:
a7:34:de:0e:c6:39:d0:db:fd:2f:f5:35:8b:02:91:9a:55:20:
3e:e8:87:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:26:44 2025 by rpki-client