Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/52e481f4-64f8-3d63-ad40-121e9f60245b.roa
File: 52e481f4-64f8-3d63-ad40-121e9f60245b.roa (raw, json)
Hash identifier: Wu5Y7gxyaHrFOJdzQiJRG5ENGmzYzZSgxYgD/MlT2KA=
Subject key identifier: AB:F2:8E:E8:1F:91:23:C0:C0:5D:51:07:24:1C:07:ED:A1:04:C9:9B
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F43285848E006917FF48786B4BEFE1080
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/52e481f4-64f8-3d63-ad40-121e9f60245b.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 33363
IP address blocks: 72.17.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:91:7f:f4:87:86:b4:be:fe:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=6ab5d3d2-95aa-4115-9d72-104a49b3f576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:73:71:c0:c4:89:83:54:17:c0:8f:0f:81:78:
69:1c:df:39:07:55:71:29:ed:b7:02:4e:87:c6:0c:
61:22:f0:01:19:31:60:8b:4c:e7:20:ea:aa:a7:2c:
42:42:f1:17:d3:11:33:5c:cd:ee:8e:b3:8a:16:71:
b7:98:ed:39:d1:17:d2:b7:a0:68:81:c0:a0:bb:08:
60:3c:ae:c5:11:85:7b:1f:a3:d3:d2:50:48:ee:c8:
4a:a8:be:dc:3f:81:d0:19:9f:33:55:58:80:86:4c:
c7:32:aa:f8:04:05:7d:99:0d:4d:c4:c2:1c:05:9e:
ee:7b:aa:cc:97:3a:e6:fc:6c:25:ec:f3:8f:fe:7c:
c4:a4:7c:92:b3:57:6e:7e:2b:92:60:c5:a8:6d:5c:
6e:90:90:ce:77:de:e7:4f:4a:c3:20:94:88:c4:ab:
6c:a3:a8:61:3f:71:26:ff:1f:e7:27:aa:85:1b:6f:
78:4f:51:32:1b:d2:bb:61:60:50:33:94:a2:6a:99:
e9:a1:bc:06:03:47:8d:a8:65:ce:33:0f:0d:a3:d7:
ac:09:9c:99:30:b0:d1:85:ae:c4:f6:a7:be:35:e5:
b8:f0:5f:8c:70:18:f5:1b:31:c2:cb:0e:d7:ab:bf:
9d:ec:bc:e3:f4:0f:03:5b:46:d1:2f:72:4b:3a:0e:
ab:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F2:8E:E8:1F:91:23:C0:C0:5D:51:07:24:1C:07:ED:A1:04:C9:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/52e481f4-64f8-3d63-ad40-121e9f60245b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
72.17.82.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:9f:18:1b:c7:2f:d1:05:d3:4e:ad:a4:e8:b6:18:f0:65:0f:
51:be:78:ac:eb:ec:73:4a:87:bc:df:30:18:43:56:f9:50:24:
76:08:69:c2:94:78:b4:16:58:be:64:25:9c:7f:ac:84:22:83:
64:09:2d:78:42:b1:d8:1a:04:03:8a:19:8c:a1:b0:1c:82:40:
61:f4:e8:f1:1e:be:f8:70:05:ad:2b:2b:ef:cf:c0:88:63:d0:
b5:9f:64:e4:49:9a:6c:59:0c:93:78:ff:ee:c2:bc:48:f4:b8:
a9:91:32:aa:ea:a2:02:9e:49:11:80:08:bf:67:18:d4:32:3e:
5c:73:0f:d6:46:27:0d:bb:05:86:59:88:f9:b6:67:cb:fb:40:
6b:d5:93:ce:bf:8e:66:6f:7c:20:fc:ef:c7:24:27:45:e7:1d:
f9:c6:f8:bc:9c:df:a1:bc:f8:cd:b1:74:a4:72:be:76:13:32:
82:c1:36:cd:2c:45:c5:70:9f:db:55:f9:fc:6a:f6:4d:14:e5:
24:2a:95:38:da:55:61:e5:f5:22:1b:7c:16:ad:d3:cc:de:75:
f2:eb:7f:66:55:86:37:c7:7b:81:3c:58:09:09:f0:99:ab:9e:
e3:5e:3d:1f:d4:20:f9:6d:0a:9c:a7:ef:87:a1:87:9d:9c:2f:
ce:d1:5e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:45:19 2025 by rpki-client