Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/b473f5ac-0772-3249-bf61-f3d093aa4c99.roa
File: b473f5ac-0772-3249-bf61-f3d093aa4c99.roa (raw, json)
Hash identifier: dQDKE+Q/caxAPaDNFv5LZ5akkWZAMtYdnPHiQcvbuS4=
Subject key identifier: 27:A2:5E:7F:3D:D8:99:44:AF:64:73:9D:7F:F1:7D:74:29:A3:E5:F3
Certificate issuer: /CN=fc9e4738-7902-435b-802c-f37dc4b25f95
Certificate serial: 010D0C9F43285848881C3D39B9E268DC82605AC0
Authority key identifier: 34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/b473f5ac-0772-3249-bf61-f3d093aa4c99.roa
Signing time: Mon 13 Jan 2025 14:13:43 +0000
ROA not before: Mon 13 Jan 2025 14:13:43 +0000
ROA not after: Sun 13 Apr 2025 13:13:43 +0000
asID: 701
IP address blocks: 72.1.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:1c:3d:39:b9:e2:68:dc:82:60:5a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9e4738-7902-435b-802c-f37dc4b25f95
Validity
Not Before: Jan 13 14:13:43 2025 GMT
Not After : Apr 13 13:13:43 2025 GMT
Subject: CN=f2136908-8aa0-4dbb-86eb-12bca8306f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ff:eb:e0:71:2d:30:51:09:ad:58:bb:7d:49:
f4:28:43:ca:4d:65:a9:bc:62:a3:3a:16:0a:c7:b3:
8e:63:14:79:7b:f9:cb:c2:11:3e:bc:7b:a4:7a:2c:
32:a4:cf:d9:f6:c4:f8:6c:e1:7b:65:9d:dc:28:ef:
65:0a:fc:92:2a:c6:2b:15:c0:d7:73:88:82:fa:b5:
16:d6:37:4c:c0:07:09:52:53:05:4a:8b:b4:4d:33:
20:83:28:ed:df:26:b4:3c:be:13:2c:38:19:3e:36:
9a:bb:40:03:b4:7e:e7:a9:f7:a8:0f:3e:58:18:05:
57:2e:ff:7b:25:a6:7d:4f:80:4e:ee:54:7d:e3:3b:
2a:da:a7:3b:d9:45:8c:60:8a:24:b7:f4:6e:50:d8:
f6:56:f3:ae:21:ac:ba:8e:b1:06:53:13:73:c6:73:
28:9c:83:02:2c:ec:1a:73:fb:cb:06:42:1a:e6:47:
59:ae:58:88:26:36:25:d1:8f:0a:a7:e0:83:10:92:
30:97:67:0a:b6:f0:4a:ba:f8:99:31:e2:89:7a:ba:
a9:fe:49:5c:89:58:4d:68:7d:6a:3d:ac:60:7e:c9:
f7:14:c1:09:9d:e1:6a:9e:0b:05:f0:a3:88:e5:64:
5b:16:58:c1:a8:4e:25:95:03:40:35:c4:d0:a2:7b:
3b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A2:5E:7F:3D:D8:99:44:AF:64:73:9D:7F:F1:7D:74:29:A3:E5:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/b473f5ac-0772-3249-bf61-f3d093aa4c99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.crl
X509v3 Authority Key Identifier:
keyid:34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer
sbgp-ipAddrBlock: critical
IPv4:
72.1.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:ea:9a:e1:20:1d:1e:de:ac:89:d8:48:ef:53:69:b4:a3:ec:
ae:aa:81:0a:49:fa:1f:44:17:df:4e:ae:91:7b:3e:02:55:fc:
d6:28:60:21:3f:64:0c:bf:39:8d:b4:2e:f5:8c:69:cf:3c:2b:
bd:3f:8b:92:a9:a6:95:7d:ae:f6:7b:81:d4:12:3a:45:1c:be:
d6:02:47:70:f1:18:88:3c:00:9e:42:53:3e:30:3b:fa:a1:27:
e6:4b:d4:74:76:85:9f:73:43:b5:e3:d0:ec:5e:78:8f:ed:0e:
79:29:f9:27:f5:d0:9f:56:89:c0:18:89:af:fa:30:d4:03:20:
de:95:95:dd:8b:a3:7f:65:8d:a8:f5:a0:bd:90:7d:95:a9:15:
d3:8f:b6:9c:b6:ad:3e:e2:d9:4b:95:85:20:a3:a4:44:ac:66:
78:00:db:d1:d2:d2:cf:75:c6:e7:57:64:e2:43:39:c0:17:f6:
3e:43:a0:d2:f2:3c:bb:02:fd:bf:25:89:eb:f1:9d:7b:fd:1f:
62:4a:f7:f5:9e:1c:53:2e:41:77:b2:8f:b7:de:d1:7c:ef:3b:
a1:78:b0:82:0a:0d:85:26:fe:51:29:5a:e0:c7:3a:83:5e:6e:
0b:75:22:b1:fb:02:d3:e2:cd:8d:6f:0f:50:50:a3:27:ee:71:
ef:81:4b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:10:18 2025 by rpki-client