Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37218c55-d824-3949-9e96-a5163f91ae29.roa
File: 37218c55-d824-3949-9e96-a5163f91ae29.roa (raw, json)
Hash identifier: it1E7doaP7GgrDaG4YzevJY5f0FdpkQhjuPA6n5DOYg=
Subject key identifier: 40:A4:16:BA:B9:DB:7A:34:FB:E3:41:84:C8:0B:46:4C:8D:46:74:51
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584953B64EFCDCE8CBF216F3E930
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37218c55-d824-3949-9e96-a5163f91ae29.roa
Signing time: Thu 27 Mar 2025 12:33:15 +0000
ROA not before: Thu 27 Mar 2025 12:33:15 +0000
ROA not after: Wed 25 Jun 2025 12:33:15 +0000
asID: 32787
IP address blocks: 72.52.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:b6:4e:fc:dc:e8:cb:f2:16:f3:e9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 27 12:33:15 2025 GMT
Not After : Jun 25 12:33:15 2025 GMT
Subject: CN=0f0cc770-3478-4dc3-8e51-35d3dcbd27c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8a:0e:72:83:96:f1:77:bf:6f:ae:21:b7:33:
12:ee:f3:a4:d8:17:8e:31:a5:b9:fb:28:bd:9b:06:
a3:8f:f0:da:11:c7:0e:73:a0:da:36:6e:d6:9a:07:
64:96:c8:8e:b8:7c:a3:f5:ce:90:17:df:29:c8:af:
24:63:e3:83:cc:6e:c9:00:ce:6e:f4:a8:c8:fb:f8:
91:fb:0e:bf:78:e6:39:a4:9c:71:0e:ab:b1:5f:12:
84:b9:af:2e:12:15:64:70:de:53:de:9b:18:55:9e:
28:2c:b2:28:8c:6d:a0:eb:ca:14:36:c4:b4:18:c0:
5c:f4:2f:3e:d1:8a:2c:77:d4:d3:66:1b:cd:d3:13:
33:97:c6:ab:0c:18:89:14:7f:8b:f5:4c:7e:75:f1:
f7:ed:de:b1:bb:41:ae:8d:f0:ba:34:5f:4c:53:1c:
b8:3a:81:2a:9f:07:a8:f7:24:8b:66:b7:ba:85:c9:
bc:0c:bd:52:9d:61:bc:97:8a:9a:ea:8c:96:7d:e7:
ca:8d:af:77:93:ce:bf:d2:27:34:94:51:b6:8c:65:
60:2a:1e:79:13:03:29:ed:7d:54:7e:97:48:3b:58:
97:6e:d7:ef:34:10:92:06:c4:c3:67:f6:be:5c:be:
a0:60:ae:f8:bf:93:55:a7:6c:42:61:a7:6c:c5:b4:
85:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A4:16:BA:B9:DB:7A:34:FB:E3:41:84:C8:0B:46:4C:8D:46:74:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37218c55-d824-3949-9e96-a5163f91ae29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
72.52.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:55:93:66:b8:9c:c4:41:70:2e:fd:c4:89:37:1b:37:ca:3c:
2f:f4:4c:1e:01:e9:0e:48:59:58:b0:ad:04:01:76:e9:8c:db:
1b:27:ff:87:0f:63:ff:d1:96:f4:cf:b5:d4:39:09:b3:18:35:
3d:91:d7:23:90:b9:97:6d:79:a8:a3:4b:34:ac:c6:46:02:56:
21:2c:03:a6:b9:10:46:d6:2b:17:0a:73:56:c6:52:82:d7:2a:
d1:90:c4:4d:f7:6c:b3:9d:1d:c4:e6:6e:9b:14:45:21:16:9a:
48:b3:ad:ca:eb:75:3a:46:2e:a5:21:3b:83:ad:d6:2b:02:5e:
0d:f3:c0:bd:39:ca:ad:de:7c:2b:bf:31:c2:8b:72:c6:1c:74:
20:b6:74:c1:07:e0:3d:f8:44:79:08:9f:fe:58:39:f0:ba:3c:
a5:35:f5:68:77:ed:7d:ac:f9:c0:ca:dc:00:22:bf:13:6a:c8:
16:09:53:da:ab:fd:d2:43:8e:86:7b:7d:10:c3:a9:17:f0:b9:
e3:3e:6b:76:b1:e0:30:6e:34:d3:05:49:e6:40:da:85:01:b4:
e3:3d:19:1c:8f:7f:75:6c:1c:2b:51:11:49:5d:e7:47:07:12:
bc:54:56:fc:34:b4:fe:f7:30:29:65:0b:5a:1c:5f:43:a1:54:
12:eb:74:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:09:19 2025 by rpki-client