Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/0f216025-08f0-3ed8-84c5-9f7904503c8e.roa
File: 0f216025-08f0-3ed8-84c5-9f7904503c8e.roa (raw, json)
Hash identifier: ZzdWiqKiD63glDFtEp5SYe4IH/L3/j1BlC/iksHj8qk=
Subject key identifier: 22:75:E7:DC:0B:C0:4E:64:C9:68:C4:C7:3A:0F:4F:7C:B8:AA:2D:DA
Certificate issuer: /CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05
Certificate serial: 010D0C9F43285848E9CBD70FB58C9DF37E68DE00
Authority key identifier: 46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/0f216025-08f0-3ed8-84c5-9f7904503c8e.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 14717
IP address blocks: 72.21.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:d7:0f:b5:8c:9d:f3:7e:68:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=ceb85298-06f9-45f0-ac8d-d274349fefdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:07:1e:41:67:c3:f8:cb:e6:ad:60:df:24:4d:
96:5e:8d:fc:b7:f6:e9:1e:2b:a2:eb:b4:6b:b0:d1:
ac:0a:ad:fb:e5:23:68:8a:ec:00:01:3d:ec:fc:49:
44:ee:85:b2:78:57:0d:18:80:4a:3a:54:5f:3c:5f:
33:43:27:2e:61:07:d5:f3:c2:24:b9:3e:7c:76:5b:
de:ad:3e:5a:59:8d:3d:44:28:fd:5c:57:b0:44:e3:
98:6c:30:ed:c6:7f:5a:32:93:fb:e6:a2:df:c3:d0:
7e:83:30:52:8a:22:46:8a:31:7d:27:cc:d1:ea:d6:
8e:92:1d:f1:73:41:f8:b8:e6:6a:1f:31:5f:3f:03:
e0:fa:8a:d1:49:78:c1:c5:61:1d:f4:62:2f:3c:38:
02:8b:f6:fe:0a:cf:46:ad:74:e9:52:15:cb:5d:7d:
a3:84:7b:18:da:38:19:6b:97:9b:41:63:5b:4c:bc:
f7:64:f1:5d:25:cb:a3:63:3e:0c:86:7f:2d:e3:72:
51:ee:45:b9:06:11:5c:13:42:74:26:ce:00:09:87:
5c:e8:08:f7:d3:e1:22:15:c4:c1:4f:d8:7a:8b:51:
c9:50:9b:26:e3:f4:29:2f:a3:5b:55:f5:83:dd:48:
62:df:87:fe:d3:f0:31:bc:38:b6:38:4b:4a:c3:ee:
06:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:75:E7:DC:0B:C0:4E:64:C9:68:C4:C7:3A:0F:4F:7C:B8:AA:2D:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/0f216025-08f0-3ed8-84c5-9f7904503c8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl
X509v3 Authority Key Identifier:
keyid:46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer
sbgp-ipAddrBlock: critical
IPv4:
72.21.160.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:ca:9c:7a:a9:4f:f0:af:7d:30:9d:69:ab:09:9b:ee:ed:e6:
5e:de:7c:bb:e5:34:17:b5:6d:39:45:e3:c9:09:e5:83:17:19:
e9:70:f4:db:cb:86:16:e3:7a:94:31:74:01:ba:a9:95:f5:3f:
bf:2c:81:6c:75:87:1b:24:22:79:f7:a7:16:96:41:ce:12:8e:
28:5e:7b:e3:db:2f:40:4c:c8:d3:c4:15:4e:72:62:45:cf:e3:
3e:7d:9a:a3:15:eb:00:5c:46:e0:8e:72:0b:9f:c0:77:ee:70:
15:e4:0a:fe:c1:48:23:b1:da:7b:3e:fe:57:1e:4c:78:d1:90:
c8:a8:6a:b3:38:03:cc:84:a7:95:c7:c2:c8:a0:a3:64:38:71:
e3:77:df:61:14:63:59:7b:03:b1:b3:06:41:43:7c:bf:f4:a0:
7c:7b:df:58:89:6e:07:ab:7a:9f:0d:61:88:8d:cd:2c:c4:b1:
b6:b1:c6:9d:62:f7:5d:60:82:a1:93:66:7b:3a:9d:26:06:51:
13:5c:d9:f6:4d:d5:82:31:58:c9:4c:b4:8d:5f:9e:59:46:b8:
c4:61:17:52:87:84:05:f9:b0:0e:38:d2:4a:bf:b0:67:2f:c2:
e3:df:12:1d:e5:6c:c7:5d:0f:34:3a:16:52:b7:61:b5:1c:e3:
52:7a:1f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:12:08 2025 by rpki-client