Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a4ef5b1-c0be-3c0b-a032-5db3ad6b8dd6.roa
File: 5a4ef5b1-c0be-3c0b-a032-5db3ad6b8dd6.roa (raw, json)
Hash identifier: g2kl/98ybI+i1knqRoHrtb+cQBGbRDSRbM3SROgU4us=
Subject key identifier: 2A:3D:09:B5:54:0E:85:93:CA:39:26:57:78:63:28:E6:99:81:49:DA
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858490B4C3A23024A72E546CE7D70
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a4ef5b1-c0be-3c0b-a032-5db3ad6b8dd6.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 20940
IP address blocks: 72.246.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:3a:23:02:4a:72:e5:46:ce:7d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=ffde232d-6193-487e-91bd-847d7257affa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8a:d5:ea:c5:2f:7e:83:86:f2:43:dc:4d:e0:
64:76:9c:8d:f8:89:40:bb:43:48:6b:5a:0f:51:d2:
62:86:95:58:73:ce:3d:94:e8:30:98:f2:3a:15:76:
b1:e0:46:b5:b1:d9:22:57:e7:94:64:86:4f:20:2f:
45:21:c8:6d:2d:bf:71:59:3b:9e:a8:62:ec:dc:43:
18:e7:c4:e4:af:18:51:7c:0c:5c:73:a3:2b:63:47:
b9:55:f8:c8:c0:da:cf:85:43:c9:c0:91:9f:40:71:
1a:b9:24:27:0c:66:b3:5f:5b:d0:e8:c1:b2:05:f5:
df:39:7b:67:4d:5c:b6:4f:aa:12:a6:55:56:1f:92:
ab:bd:35:ba:67:de:ac:c1:bf:84:7b:a2:7d:4d:11:
1e:e9:d1:0d:17:8e:3d:8c:69:a1:c0:c5:d0:29:51:
6c:63:9b:18:7e:71:ca:2d:9c:f0:40:96:d1:84:d4:
06:2b:20:03:8f:37:3c:b4:d8:25:98:4d:50:69:63:
31:f5:4a:e2:a0:f3:f7:47:9a:b3:52:b2:ae:3e:d9:
8a:e7:cf:61:75:8c:1d:dd:cc:41:f8:5d:55:fb:24:
7a:72:4e:95:94:5b:bf:04:af:31:56:c3:31:83:97:
0c:af:c4:d1:bc:0e:09:44:75:2a:50:15:6e:40:2d:
1c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3D:09:B5:54:0E:85:93:CA:39:26:57:78:63:28:E6:99:81:49:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a4ef5b1-c0be-3c0b-a032-5db3ad6b8dd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
72.246.47.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:ea:4a:ae:7a:a9:bc:01:36:b0:54:8b:d1:3c:f1:34:bf:94:
be:45:26:61:d3:f3:ef:3b:b4:9b:12:2e:88:4e:43:66:3a:2c:
1f:fc:37:74:f9:d0:23:85:04:5d:7d:fd:4a:2d:a8:d2:f5:95:
55:05:61:30:50:3a:ff:cd:0e:8b:19:67:66:01:bd:8c:12:4d:
7b:9b:e6:45:8f:71:fb:9c:e8:c7:52:bf:98:a6:aa:dd:73:9e:
2a:43:d8:5d:20:cb:55:ef:02:eb:1b:d7:db:fd:ed:04:b3:9c:
79:8d:ff:ed:94:fa:4a:4a:63:b1:59:cb:93:89:9a:19:f6:96:
48:c5:a0:14:01:ae:78:9c:8c:ae:6f:57:f0:09:88:55:b6:13:
e7:dc:b0:4e:37:de:45:74:e0:f3:c7:e7:40:20:b0:33:02:b1:
a4:f3:1c:69:bb:61:b8:8a:bc:02:2b:3a:d4:2a:fb:c9:60:e5:
79:cf:ac:46:a7:cc:7a:ca:e8:31:18:d9:c5:99:c8:68:a7:35:
ad:f9:45:61:af:6d:ce:e9:3a:7a:9c:e3:d9:ab:14:44:80:8b:
93:5d:8b:0a:36:ad:83:fd:a1:5e:14:66:24:4f:6e:54:a6:2e:
10:1b:ec:a5:50:63:5d:a7:f7:06:b5:5a:7b:1e:74:68:64:92:
55:7a:0a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:10 2025 by rpki-client