Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc091a5c-1d82-3d91-abc1-a1cc0050c791.roa
File: bc091a5c-1d82-3d91-abc1-a1cc0050c791.roa (raw, json)
Hash identifier: alqN8uNN+TUvus7UyzNVSnPRcP4h42szW7TAe8e8fzo=
Subject key identifier: 06:04:57:21:86:72:46:EC:53:F0:29:C3:90:D7:FE:B3:FB:5C:4B:4C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489E6B622698241CD6AF75D480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc091a5c-1d82-3d91-abc1-a1cc0050c791.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 63949
IP address blocks: 72.14.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:62:26:98:24:1c:d6:af:75:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=35e2ba60-06c9-4f7b-82ce-151133fbb927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:34:04:a2:76:8a:6e:dc:3e:90:e1:5f:cb:ac:
6f:a1:d3:e3:25:26:cf:a1:55:69:2b:73:3e:05:3f:
09:fe:bc:15:37:f6:b7:70:80:c8:d6:15:b8:28:51:
81:ac:bf:a9:00:d8:8b:b5:bb:54:ee:25:da:5d:a6:
df:0b:71:43:70:eb:a5:45:91:43:cd:82:38:87:9d:
79:c3:72:33:68:ec:97:b6:2c:98:a5:5a:88:36:7e:
33:a8:62:51:54:0c:2b:09:b7:e5:6a:c2:c7:43:3f:
67:df:b9:65:31:9a:a6:f1:c1:1d:bf:db:7e:35:9d:
6f:11:0d:32:5c:f5:07:eb:59:94:8e:65:e2:15:fc:
3c:70:41:9d:4c:1b:f0:83:20:45:4a:f0:cf:f2:bc:
9f:9f:f7:f2:5f:b9:d9:15:7d:84:ae:cb:36:0a:a8:
a6:63:79:19:a4:b2:3d:f1:c6:37:99:4d:c1:56:49:
be:69:03:b7:90:55:89:d5:73:3d:f4:99:52:69:32:
f5:11:19:1a:37:12:c1:bf:37:75:b9:33:25:de:f0:
75:46:69:e7:ff:ae:05:27:f1:d5:9b:d1:63:76:0f:
af:9a:51:df:2f:c8:a0:01:ce:2e:26:75:3a:80:51:
0b:22:8e:a0:f6:57:e1:7c:d6:b5:fa:97:5d:23:dd:
3a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:04:57:21:86:72:46:EC:53:F0:29:C3:90:D7:FE:B3:FB:5C:4B:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc091a5c-1d82-3d91-abc1-a1cc0050c791.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:b9:9e:47:1d:1a:c6:cb:18:bb:31:0e:fe:e4:6e:05:93:c4:
47:5f:6c:1a:43:51:8e:ff:9e:d2:32:cd:30:7c:31:1d:60:47:
1e:b6:20:80:c1:e0:d0:f3:60:05:6f:23:f1:04:a8:04:d3:e0:
16:2b:71:00:29:8f:06:4d:21:78:e9:31:7b:de:46:a3:9b:2c:
07:61:29:5a:8e:56:1c:c5:ce:7b:d1:9b:e8:5d:36:2d:d7:eb:
b4:ec:13:2c:f4:6a:2a:87:f6:78:09:73:6e:b5:05:7f:65:46:
a2:99:e4:03:01:72:09:ca:03:b5:63:c2:ad:79:6c:c9:b8:c2:
ae:9c:95:ed:dc:d8:67:c4:8e:5f:d8:24:f4:53:ec:f4:7a:63:
1c:a7:45:f4:e7:fd:e4:93:f7:b7:a4:e7:5f:b3:dd:52:a5:15:
48:a4:eb:95:43:c5:d1:01:d4:d2:66:64:1d:e6:b5:aa:a9:7c:
05:e0:ae:2d:ee:50:3f:2e:f1:82:6f:db:41:d5:ce:19:38:ee:
bf:91:f3:be:38:b5:4b:9c:8d:0f:1c:91:b9:61:7d:43:82:f1:
bf:27:a5:f3:13:e5:5d:3a:f2:01:96:41:5e:c0:de:b7:73:28:
b3:35:76:fc:30:e2:b1:85:dc:0c:fa:56:55:2f:52:19:3e:cf:
82:da:7e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:12:54 2025 by rpki-client