Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7a5249fa-3825-3e53-a896-2e3f36be529c.roa
File: 7a5249fa-3825-3e53-a896-2e3f36be529c.roa (raw, json)
Hash identifier: eg6YqPUXIoiyjQJwxsLIgsoYg405vgZJG92AogbZq6o=
Subject key identifier: E7:FD:AE:59:EE:6C:D4:0F:E8:5D:A4:73:0E:44:7B:FC:74:02:31:A7
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D128A162F778367CF52150
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7a5249fa-3825-3e53-a896-2e3f36be529c.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 10796
IP address blocks: 72.135.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:28:a1:62:f7:78:36:7c:f5:21:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=3aaf9a6c-4842-45b2-bf3f-058ff5d5b553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b9:4a:77:de:de:9f:85:85:b6:71:4c:61:0d:
80:2e:cd:c8:24:4e:c1:08:a9:61:11:e8:bf:a3:1c:
04:87:ac:70:66:ba:71:d4:93:eb:d0:72:4c:a1:af:
e9:a0:94:c4:ad:ff:2c:aa:c0:82:be:4d:3c:e1:7b:
a4:a1:0e:ce:3f:59:c4:fb:55:79:b1:bf:ae:1e:93:
a9:ca:3d:46:b4:59:9a:c4:8f:b1:bf:aa:4d:05:2d:
a1:5f:2d:54:28:03:dc:45:fd:0e:62:91:88:69:10:
ec:34:de:8b:6d:f6:e4:4f:f2:65:88:c8:44:36:ce:
0b:56:82:b4:75:de:52:32:b6:e6:14:c4:c2:a7:26:
31:98:27:a4:a1:f5:a6:1a:f9:d3:69:a2:4d:49:d9:
cc:8a:90:30:3f:ab:4e:7d:03:2f:e2:81:de:79:3f:
ad:42:e8:b5:5f:df:26:be:aa:e5:b8:b3:56:cd:43:
f1:b0:fc:d2:13:c1:3d:0f:4f:82:be:04:f0:00:e9:
fa:a3:3b:0e:a6:6b:12:4e:9f:63:15:68:39:9b:fc:
65:61:e4:9b:c9:5a:b3:be:51:33:d5:e4:b6:ec:73:
3d:f0:d3:db:7b:0d:e7:77:ac:d0:c7:6a:fe:ca:90:
0f:6d:dd:ee:28:5a:c7:f4:fd:6e:36:a2:e5:ba:b5:
f2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FD:AE:59:EE:6C:D4:0F:E8:5D:A4:73:0E:44:7B:FC:74:02:31:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7a5249fa-3825-3e53-a896-2e3f36be529c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.135.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:89:98:fc:66:77:e8:92:6e:aa:cd:d3:ef:a2:98:43:3c:04:
14:fc:b3:02:c6:cc:d4:8d:d9:2c:d5:04:31:e8:e5:f8:2f:4c:
bf:62:cb:1f:b3:62:2f:e0:a3:41:66:19:85:2a:0e:4a:a9:cf:
0b:00:8f:f1:06:1a:57:6b:8d:32:d2:55:88:77:6c:1d:eb:ee:
a9:76:0a:37:84:f7:3c:02:78:b1:f5:51:56:63:34:75:0e:94:
96:ee:9d:7b:98:cf:b3:8f:a3:67:ce:93:22:40:fa:fa:4f:c6:
84:84:39:8d:2a:a3:79:46:9f:fe:a1:34:bf:a3:1e:7d:57:cb:
10:04:50:61:a5:c1:19:b5:d9:08:44:e0:79:02:47:2a:c8:e9:
e0:80:29:9e:3b:d7:7d:3c:90:a1:16:58:21:2b:fa:6f:32:65:
ca:82:bd:8d:46:88:8c:49:77:24:16:7e:fa:8a:0a:f7:20:60:
20:01:ac:5c:d6:a3:75:5a:10:49:7f:e7:c6:b3:45:86:b4:7d:
f5:bb:a2:a1:d7:3d:69:5f:8a:35:74:2b:c1:b9:21:7d:e8:b4:
ee:6d:ca:3b:ad:2e:a3:d0:11:4d:12:cf:28:27:b7:ed:14:3e:
5d:ad:0a:e2:05:84:c0:9f:0b:82:b9:28:d9:bb:11:aa:c0:92:
e4:6a:5e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:08:17 2025 by rpki-client