Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/300dbd74-6428-329b-87a1-93eec764e123.roa
File: 300dbd74-6428-329b-87a1-93eec764e123.roa (raw, json)
Hash identifier: 9lO8RBbG3ELKhtI/SPSsMugsNKJHfi07AvTl+4oIJSE=
Subject key identifier: AA:EF:10:14:3D:3E:D5:88:F1:8A:19:3E:0F:0C:D5:86:69:41:F3:0A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858490B4C3B62E16F0EA5FF893980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/300dbd74-6428-329b-87a1-93eec764e123.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 20940
IP address blocks: 72.247.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:3b:62:e1:6f:0e:a5:ff:89:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=54045a27-c7d7-4411-b767-b3baca21826d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:03:02:50:bb:2d:6f:bb:fc:57:0f:93:e4:03:
1b:d4:d8:80:ff:8d:2e:9e:72:3f:be:12:6e:e3:24:
20:1d:49:66:84:14:8d:04:32:8b:87:fd:44:01:8d:
a2:20:df:13:88:76:3d:68:28:91:c6:ac:2c:3a:10:
e3:b9:3b:b7:2d:61:40:c4:93:c2:56:24:8e:b3:d3:
65:16:5e:4c:b9:21:71:0d:24:ca:1a:af:54:73:56:
e2:53:08:43:c6:59:e4:8a:2b:99:1e:b1:d0:4f:10:
8c:e2:2a:fd:9b:91:18:44:d7:b7:bf:27:d7:e1:9f:
b6:c4:b7:fc:9d:00:6e:3a:07:26:df:0d:8d:52:cf:
39:1a:fd:78:9e:a4:02:cf:12:f5:ad:cc:12:06:73:
aa:c2:88:3e:1a:5f:3c:94:c4:97:4a:2a:fb:3f:32:
ae:d1:d7:d5:51:9c:84:ce:a6:e8:c3:c2:4e:5e:df:
88:5c:30:8e:67:b3:6e:cb:cb:56:bd:24:66:47:4e:
78:53:6a:ca:45:aa:ae:3a:77:ec:71:cb:5b:35:95:
42:81:30:53:2a:50:77:50:ed:62:8f:39:7e:11:dc:
ad:33:95:af:a8:ef:52:a2:79:01:ff:87:35:af:b7:
09:1a:4e:20:f1:58:01:38:72:12:9d:cd:3c:91:f8:
1c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EF:10:14:3D:3E:D5:88:F1:8A:19:3E:0F:0C:D5:86:69:41:F3:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/300dbd74-6428-329b-87a1-93eec764e123.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
72.247.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:ed:11:e5:c4:ec:d1:48:ef:50:70:19:1f:ba:0d:a0:df:83:
99:af:f5:05:8b:1a:2a:bd:eb:09:5d:4f:7b:31:87:4a:f0:b6:
7c:6b:31:32:d9:e1:88:d0:be:6b:02:c8:88:50:ad:dd:51:48:
2c:01:ac:34:06:99:b8:03:8b:f3:da:54:ad:44:26:d8:9a:4f:
79:01:66:6f:cd:1b:a4:4c:dd:ad:b6:3a:fa:85:cb:bd:8d:ab:
4d:eb:f1:c3:19:e5:f7:57:a1:2b:8a:af:09:23:d4:0a:4d:09:
a6:13:87:98:98:25:ed:25:33:d2:9a:97:c1:9a:62:43:71:81:
be:02:8a:c4:f7:84:92:e0:54:d8:c6:84:2d:01:89:48:41:a5:
80:b8:29:6d:d1:82:08:93:ab:e6:5f:d8:e3:28:26:73:36:cd:
8b:6d:f4:13:69:8c:d5:e0:7d:c1:c1:39:0c:c9:8e:1d:41:c8:
08:46:af:6c:4c:3f:15:24:9d:fb:60:d1:9d:28:4b:e9:3c:03:
40:0d:67:2e:e9:f1:ce:92:69:cb:f0:c5:c8:ac:29:61:e3:02:
b0:16:a0:8e:6e:cf:ba:45:ec:4d:3d:90:74:e9:8b:cd:ef:37:
42:3e:1e:73:4c:2e:ca:69:d4:08:a2:4c:ee:c9:fa:22:ad:e0:
0f:2d:c4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:13:14 2025 by rpki-client