Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c01b867-e0ea-380c-95a8-417bf084bf0e.roa
File: 8c01b867-e0ea-380c-95a8-417bf084bf0e.roa (raw, json)
Hash identifier: X4Um2VwjyrfqYSbMoD+GRXWB3fzjN1dKlKQVIudFfRA=
Subject key identifier: 7D:5D:DB:8B:64:5E:62:BB:3C:FA:25:CB:20:F2:6A:9A:97:0F:38:F8
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858490B4C3B5780D5BA58D38B6C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c01b867-e0ea-380c-95a8-417bf084bf0e.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 16625
IP address blocks: 72.247.208.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:3b:57:80:d5:ba:58:d3:8b:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=49d678cd-5cb0-4a78-91bc-a111562d8fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:25:52:b8:bf:70:e9:4f:14:66:ce:63:f4:b7:
8a:96:55:58:44:83:b1:13:a7:b1:24:2f:4e:f9:6d:
18:02:6d:48:da:df:4c:ba:dd:6f:9e:a1:78:33:47:
e2:3f:29:44:cb:b7:8b:de:6f:b8:00:3e:c9:74:de:
e3:d2:0d:51:16:93:cc:cc:da:db:52:e3:8a:70:0f:
fc:d7:eb:b3:53:2c:f1:44:1e:69:cb:7c:d0:b3:a0:
81:7f:17:bb:74:18:6d:39:dc:e1:5a:35:a6:90:62:
ef:fc:84:09:74:fd:9d:02:1f:0c:ce:eb:a9:16:9f:
08:25:46:a8:53:bf:5d:ce:29:3e:3f:96:64:b3:08:
b2:11:98:d9:cd:7f:cf:5f:6e:67:de:4e:6a:75:cb:
91:6d:59:e9:1b:31:1b:fe:1d:fe:10:fd:fc:7e:3c:
71:74:27:c5:fc:1a:fc:cf:32:78:85:7a:a3:6b:e9:
2d:94:9e:6b:f7:15:8e:d6:bb:f3:37:e6:e8:d7:f7:
d0:34:d8:fd:cf:86:9b:2f:5b:6a:2c:72:b5:3b:eb:
75:67:61:4b:79:f5:f1:73:bd:ff:30:a7:7a:30:1d:
ce:cb:f1:5b:2e:55:27:dc:97:7f:be:f3:f3:9d:83:
94:31:f0:1a:15:b3:44:f5:72:66:ff:16:a6:87:f4:
2b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5D:DB:8B:64:5E:62:BB:3C:FA:25:CB:20:F2:6A:9A:97:0F:38:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c01b867-e0ea-380c-95a8-417bf084bf0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
72.247.208.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:34:3e:3f:31:1c:e8:48:7d:b6:01:f8:4c:3a:d6:f2:d2:d3:
03:c7:92:a8:55:33:51:c0:61:4f:24:af:6d:67:8a:10:79:80:
9e:36:e4:6f:2f:0b:d5:a6:8a:85:08:ae:a3:11:9c:cf:7c:7c:
29:96:ba:ad:69:7b:81:ce:3c:9f:e0:c4:45:ab:5f:d1:60:34:
c2:59:9e:2b:0f:27:7a:29:69:d3:2b:2f:29:2c:36:d7:ae:05:
10:fd:8d:d5:78:e3:70:b7:cf:97:98:f6:20:a6:b0:7a:69:ad:
55:18:ee:33:f7:31:2d:64:94:c8:7f:95:f5:b8:b9:f9:a7:69:
41:82:8c:1e:84:3f:5b:2a:73:ed:e4:94:8f:4d:9b:e0:17:52:
df:b0:50:0d:a8:28:fb:ad:d7:85:ca:35:81:92:5c:3f:88:0b:
cd:5c:da:bc:1d:3e:4e:5f:8f:f5:a1:03:75:fc:64:5e:08:11:
e6:ab:51:5e:c7:0a:89:82:9d:e0:51:b6:8b:e8:d0:b0:61:c0:
4c:f2:5c:91:66:69:c5:85:8a:3f:89:55:f0:45:05:05:9a:67:
ed:16:9d:32:ee:01:f9:a5:52:ab:c0:a5:24:60:31:7c:60:0b:
92:c0:9a:8a:70:31:cc:06:1f:6f:5b:14:32:14:84:3d:b3:47:
1f:5c:10:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:02:44 2025 by rpki-client