Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c35888ef-4cd3-3aef-af71-6a02f56f600d.roa
File: c35888ef-4cd3-3aef-af71-6a02f56f600d.roa (raw, json)
Hash identifier: /KC+V4AsTk1s3KBUciwQGR7Q31oQRmfhtS5Nvp1kdaI=
Subject key identifier: A0:12:3F:42:31:49:A3:1A:42:32:9F:0F:04:E7:B6:4F:23:A7:D3:46
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F43285848E0068D34934230F341E8CC80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c35888ef-4cd3-3aef-af71-6a02f56f600d.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 33363
IP address blocks: 72.31.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:8d:34:93:42:30:f3:41:e8:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=beb25e19-2441-4c10-8bf4-5f8abe5d24ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5e:34:6c:56:98:26:d9:da:5d:74:5c:69:b2:
2b:2b:0b:a9:95:78:3e:53:ef:20:ec:19:4d:b5:56:
5d:1c:06:89:c0:69:57:fa:32:f5:63:dc:6e:92:8d:
32:88:08:89:e7:03:0b:c7:f8:c6:6e:8f:8a:c6:cc:
d6:18:e0:5a:30:8c:96:2f:1a:8d:cb:a0:02:42:0f:
c1:99:57:30:ed:16:02:e1:d4:99:7f:b5:7f:1f:e2:
5a:94:6e:e6:99:0c:33:41:fa:18:ab:d1:7c:5f:cc:
59:82:a0:c4:2f:12:13:2e:ee:7e:dd:1b:e2:9f:c1:
73:df:f5:d3:97:39:6e:f1:b0:aa:3a:f7:5f:2d:47:
c5:6a:91:80:7b:4e:40:a7:07:61:64:dd:83:31:38:
86:f1:e4:7e:03:3f:69:1b:40:77:46:23:31:2a:71:
bc:70:58:f3:f3:24:7f:79:71:9b:de:d6:f1:95:ce:
5a:72:54:b9:45:27:66:fa:1d:55:2b:97:4e:15:10:
b4:7e:78:6d:5d:5b:06:0c:04:ef:8d:0f:88:08:60:
04:7d:77:20:de:40:b0:fe:5a:6a:0f:4e:95:0d:db:
33:ba:13:e9:39:4d:bf:e5:cb:84:19:71:64:fb:d0:
72:c9:50:ba:8d:59:6d:b1:9d:26:0d:1e:36:f5:92:
ab:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:12:3F:42:31:49:A3:1A:42:32:9F:0F:04:E7:B6:4F:23:A7:D3:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c35888ef-4cd3-3aef-af71-6a02f56f600d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
72.31.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:ee:50:03:f0:18:17:9b:fa:3e:6b:f8:cd:b7:43:6f:4f:6c:
45:d5:58:c7:8b:45:2a:28:82:ce:81:58:90:22:5d:9b:5f:9f:
a5:26:58:e1:7b:9a:bf:06:a6:d2:1e:64:10:69:87:4d:e4:ea:
1e:bc:a6:4a:3e:f9:8d:d0:53:80:48:5d:78:f5:0f:fb:17:df:
01:dc:25:aa:a9:6c:f2:54:e4:f3:bc:e9:4d:79:5c:f8:59:fa:
df:35:58:fd:45:13:13:51:27:89:be:a7:49:91:58:85:de:22:
8a:71:c2:af:52:ef:80:2c:0c:66:1d:66:6f:07:2a:e8:92:50:
ed:cf:2d:60:b2:28:95:83:05:9d:30:5b:c2:f5:45:99:1a:b5:
e3:d5:af:5a:20:2f:2d:bf:5c:af:31:c8:bb:6b:5d:24:df:5d:
f2:59:10:14:7e:6a:58:04:af:10:bb:6b:f7:31:c9:9d:94:3e:
f3:b1:a3:cb:31:79:d4:ae:04:4d:04:70:39:40:41:8a:fa:6b:
1d:22:de:67:60:a1:1a:d9:15:ac:3f:17:a7:44:8d:4f:91:f7:
84:a2:db:71:b2:31:e1:28:aa:4d:57:9e:88:f3:9a:fe:b9:90:
70:e5:79:40:14:36:6d:cd:3e:5c:ea:12:5b:35:3e:e5:a6:86:
e9:f5:ef:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:44:07 2025 by rpki-client