Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1728381e-dbb1-3796-870d-8a3cdc93d9ff.roa
File: 1728381e-dbb1-3796-870d-8a3cdc93d9ff.roa (raw, json)
Hash identifier: eYmBFYbowdSEMQ3lE9j9jKNe35aJfyNFAthNUQOW+2o=
Subject key identifier: 70:6F:74:BE:72:05:B7:96:9E:8E:79:33:0C:D1:4C:C8:9C:52:DF:64
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F43285848BBBB72B4B5FC8F3AE6CA9B80
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1728381e-dbb1-3796-870d-8a3cdc93d9ff.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 394437
IP address blocks: 72.20.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:72:b4:b5:fc:8f:3a:e6:ca:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=4e6dab3b-549b-41b8-9ae1-e720b5d97712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:6c:ac:6e:b8:f9:3b:ff:db:ee:7f:2d:49:5a:
e8:7c:de:9c:ea:83:f0:be:34:31:32:d2:13:5e:c6:
bb:6e:eb:bb:8d:10:a9:0a:b4:50:a6:68:dd:37:a4:
f7:59:a1:a6:52:9a:b4:94:7e:19:e2:ae:65:dc:78:
96:09:5c:bd:99:5c:f2:70:df:d7:12:21:0b:06:43:
b0:36:84:c4:be:b5:86:02:9d:78:4b:64:21:7d:1e:
70:90:7c:30:32:60:0b:b9:41:58:c6:28:83:30:74:
c2:1a:2b:69:5e:43:9d:24:d1:04:71:d1:f5:62:b0:
38:fb:24:86:2f:34:19:83:92:f1:4a:1e:04:dd:e0:
0f:35:3e:d2:d6:07:22:5e:02:ad:5a:d3:09:a4:1b:
a9:5a:94:8b:44:5c:88:3a:b9:ee:7a:45:e6:15:39:
cc:a7:9e:6e:b6:d5:f3:1c:c1:01:88:85:86:97:fd:
a9:42:18:b1:9d:a6:1d:a4:d0:fe:b4:d4:e5:4e:3e:
c8:0c:3d:30:6a:ec:e2:e5:86:87:e4:ae:5a:b1:64:
89:cf:f1:71:97:0b:99:94:98:5d:56:77:7b:41:a6:
18:17:4d:dc:68:e2:05:5d:98:32:3d:7f:e8:3c:87:
23:56:99:39:43:bc:ee:f8:57:65:c1:34:9f:8a:f9:
02:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6F:74:BE:72:05:B7:96:9E:8E:79:33:0C:D1:4C:C8:9C:52:DF:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1728381e-dbb1-3796-870d-8a3cdc93d9ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.20.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:59:d8:3c:c4:97:d9:16:32:e6:01:15:bf:b5:d5:aa:ae:e5:
df:75:1e:46:37:f8:2c:1e:70:0f:62:83:21:1d:e6:1c:61:36:
2d:41:b0:d5:ff:23:1f:95:ba:fd:6c:aa:81:54:99:6d:4b:da:
e2:96:87:57:e4:23:44:b5:79:f6:25:be:d6:d2:2f:d4:ef:07:
5d:4f:96:17:35:3b:de:84:1e:17:48:70:c4:1c:ea:02:4e:f2:
55:c3:63:58:48:9d:08:e2:34:e7:95:5a:00:61:4e:cb:77:47:
28:e0:ea:57:0e:64:48:ce:91:1a:85:1e:01:8f:65:ab:ce:94:
8e:c5:3a:66:b8:02:c1:54:40:06:d1:b6:da:9f:44:47:15:39:
23:d6:55:50:db:c8:cf:3c:7c:89:cd:80:e0:53:5d:d8:a0:fa:
5c:70:a2:67:f2:d7:c4:00:f9:e2:fb:6b:77:41:8e:da:f5:37:
0d:fb:cc:19:86:93:a0:63:4f:91:5c:24:8a:e6:1a:88:52:7b:
d2:6c:ea:ee:59:fb:b4:3e:95:7a:fc:71:64:19:44:d5:0d:c5:
74:f0:12:9a:46:7e:71:59:fb:b4:4c:80:65:ea:ff:e1:6c:c7:
32:0c:ee:41:59:61:6d:0c:bf:f8:8d:a0:1e:57:c5:bb:fb:68:
81:e6:6e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:57:36 2025 by rpki-client