Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c40cbd31-a5ab-39c2-891d-cc7d996e6c02.roa
File: c40cbd31-a5ab-39c2-891d-cc7d996e6c02.roa (raw, json)
Hash identifier: ZpLrqrdSSesAd3FCrQMvZL7oAkcSAdY4tSJLfXfcEds=
Subject key identifier: 0E:54:FA:2C:9A:4F:84:14:F6:6C:85:10:6E:EE:C0:A3:96:46:B8:9E
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F43285848E0068D45598C62F1CE232CE0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c40cbd31-a5ab-39c2-891d-cc7d996e6c02.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 33363
IP address blocks: 72.31.146.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:8d:45:59:8c:62:f1:ce:23:2c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=8788ef01-7917-4ce4-9d4f-74a0262dbc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:86:a1:bc:1a:3a:cc:4a:9b:af:3c:6a:0a:
83:88:1f:e0:d8:2c:b0:d7:69:9d:7e:e2:71:92:c2:
c2:03:ba:c1:d1:da:8d:83:2f:34:cd:71:63:b8:e2:
7b:fb:16:96:d6:fb:29:a2:4a:cb:4e:1d:a7:d7:47:
41:5a:d0:64:77:b5:b1:a1:c0:d8:83:97:9d:c8:e4:
d6:56:12:78:81:10:63:74:c7:74:c1:f7:b8:c3:72:
52:be:46:e6:4c:92:66:b7:77:af:e6:f9:b3:59:8d:
83:60:74:6a:e0:d5:48:2b:6c:13:b1:a6:c9:83:9d:
61:04:66:ee:f0:d3:61:6f:b1:0e:25:89:cf:47:e7:
cf:33:2d:ab:37:64:17:d7:c6:9e:95:af:4b:ae:db:
21:47:6c:2c:0e:15:d0:b5:33:42:b5:0b:e9:d5:b5:
13:aa:f6:53:16:c7:80:d8:94:a4:a8:84:7b:59:3b:
f1:67:43:4d:64:67:8f:9d:99:cd:aa:fb:0d:fe:fe:
86:1f:1b:1a:de:6f:a7:5d:22:2f:b6:41:f4:40:bc:
e7:10:c6:53:1a:8f:59:bb:9c:ad:f1:b6:0c:e6:55:
1b:af:c3:05:e3:13:f3:c9:31:a5:6d:bd:0c:9a:6b:
26:4f:f0:93:d6:67:67:6b:8c:51:de:6b:75:5a:0a:
68:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:54:FA:2C:9A:4F:84:14:F6:6C:85:10:6E:EE:C0:A3:96:46:B8:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c40cbd31-a5ab-39c2-891d-cc7d996e6c02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
72.31.146.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:0d:a0:43:59:eb:b4:87:3c:c9:1e:c4:36:cb:c4:ef:90:38:
e0:08:1d:c9:f9:7b:91:86:c1:f3:78:d7:af:e6:5a:f8:16:45:
1b:c5:56:ca:c5:69:b8:61:9a:96:3b:62:0e:85:d8:ee:55:b7:
11:27:5c:9e:fe:a3:71:da:05:39:05:f9:99:aa:30:85:d2:15:
06:29:64:67:f2:87:24:ae:03:34:5d:bb:1a:97:c3:af:0e:13:
b0:61:4e:ed:f1:94:51:e3:be:b6:16:70:8a:2e:89:76:bb:91:
ed:6e:75:a8:84:5e:ca:35:eb:96:f1:6d:71:c1:ef:f1:36:bc:
4f:bc:f6:54:47:ea:22:4e:d7:9b:55:cd:e5:3f:d3:86:36:7d:
df:44:27:0b:6e:b6:ea:e4:e4:44:8f:a9:5b:0a:8b:95:c0:c9:
64:4f:75:79:f2:48:84:67:79:fd:26:e7:57:f3:6a:5a:bc:c8:
22:bb:82:19:27:7c:5b:2d:aa:72:11:f1:c7:bd:75:b2:48:fe:
ea:8d:39:bc:6f:ee:02:4e:80:55:87:ba:39:d3:07:81:96:47:
41:41:9a:c5:c5:76:c8:98:b8:6f:3d:5d:37:e9:81:20:98:a1:
d3:4c:9f:a8:01:d8:4c:f4:c0:bc:5d:f8:8e:e1:c9:ea:f2:4f:
29:5a:fa:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:45:37 2025 by rpki-client