Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ac2bcab8-41c2-3cb6-993f-426483ae939c.roa
File: ac2bcab8-41c2-3cb6-993f-426483ae939c.roa (raw, json)
Hash identifier: DSOtQ00e0rMybvBenyHaU/LqEgw2c36Aw+vUOp88GFo=
Subject key identifier: 2F:D6:91:01:D6:A6:17:F0:43:60:2A:FD:CA:92:F6:41:83:C6:D7:E1
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285846126EB81BDD3A3136B894EE60
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ac2bcab8-41c2-3cb6-993f-426483ae939c.roa
Signing time: Sun 02 Jun 2024 01:00:26 +0000
ROA not before: Sun 02 Jun 2024 01:00:26 +0000
ROA not after: Sat 31 Aug 2024 01:00:26 +0000
asID: 14663
IP address blocks: 72.9.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:12:6e:b8:1b:dd:3a:31:36:b8:94:ee:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jun 2 01:00:26 2024 GMT
Not After : Aug 31 01:00:26 2024 GMT
Subject: CN=22b6fb4f-8386-4577-a11c-0860d544b7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9c:f9:22:9a:f2:f9:fa:6c:6e:78:57:65:0e:
3d:0f:b5:8c:4c:18:16:e7:86:53:3d:fe:42:7f:4b:
c3:67:52:7a:21:94:31:16:b8:aa:85:f9:3f:b3:06:
1c:c6:04:60:9c:a7:36:df:fd:5c:a5:d1:d6:9e:32:
ea:a0:c2:97:50:08:ce:df:e7:7b:32:98:4d:d6:a0:
4f:cc:a5:4b:32:13:a2:ab:fe:ff:6a:b3:91:1e:31:
75:41:11:73:72:ad:59:84:24:f9:66:b2:ce:f3:95:
70:d0:fd:ff:9d:98:3c:4f:5f:6d:9a:0f:a3:5c:2c:
bd:12:1e:92:60:7a:87:e3:00:e7:0c:3b:bc:ad:35:
e6:76:c8:49:0f:a5:37:de:0d:21:8d:11:fa:bb:a5:
96:cb:87:c7:0c:22:2f:6a:62:14:0e:5f:60:89:45:
a6:cd:64:a2:39:79:24:c0:a3:45:0c:90:0a:2c:20:
27:1f:b9:1f:3d:0d:23:03:b8:b4:dd:7a:bd:02:bd:
f6:92:d4:e7:52:04:7f:ae:75:08:47:60:fb:84:69:
32:20:bf:85:48:ea:1b:d1:0f:f9:27:51:e9:94:c1:
4f:eb:9c:9a:9c:a3:a7:95:41:97:e3:1d:d1:5f:a1:
2b:83:36:82:d4:ba:ac:29:c1:eb:8e:79:69:cb:53:
c5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D6:91:01:D6:A6:17:F0:43:60:2A:FD:CA:92:F6:41:83:C6:D7:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ac2bcab8-41c2-3cb6-993f-426483ae939c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
72.9.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:84:da:19:de:dc:ae:00:d5:28:c6:e4:3e:a1:89:5d:39:c0:
94:86:93:0f:fb:89:a6:03:8a:ed:b6:69:b1:9a:2a:de:f7:71:
3b:10:09:32:c7:42:b5:3f:42:c1:13:e8:e2:16:4b:3b:66:2a:
71:a3:c8:a4:4c:4d:7e:6e:f0:fe:d5:9d:b4:d1:c7:be:93:10:
65:a3:ee:73:d2:b0:9a:bb:d0:90:2d:a4:58:cf:35:6f:e8:30:
fc:41:4b:34:f6:1e:e7:8d:97:74:4d:5d:1c:5c:a7:d1:e6:fb:
ed:b3:70:09:3c:57:64:f0:46:d0:8a:e1:06:8f:67:f6:de:3d:
59:5b:4d:28:bc:a8:a5:a7:84:2c:59:f6:08:1f:59:55:7d:cb:
1d:e4:d8:70:29:23:59:f1:a4:36:46:1c:4b:31:3e:07:26:31:
1c:36:3b:29:cd:d9:a9:59:16:32:ca:c2:24:0c:3f:4d:81:b7:
44:ab:7f:d7:97:2e:07:6a:94:35:09:17:46:30:8a:e5:50:53:
b0:4e:4d:93:47:e3:d1:d1:ed:da:f8:6e:bf:7e:e6:b6:ce:e6:
84:d9:fd:4b:c6:ba:61:31:f9:96:2f:60:fb:93:3b:7f:53:c7:
10:15:cf:f5:64:f7:fc:18:98:a6:94:d9:bb:e7:61:a7:30:36:
1d:da:19:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:42 2025 by rpki-client