Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70d4429d-87bd-4cd8-8a69-e77cf29b9493/a59dc2c2-a1be-3059-9836-00b4f0e30698.roa
File: a59dc2c2-a1be-3059-9836-00b4f0e30698.roa (raw, json)
Hash identifier: yon0AeQGYmaAuzRrR2F6WH19P5C/I8IhkjAp5zN82ts=
Subject key identifier: 38:E6:DB:78:B0:94:88:B4:96:E8:DE:AE:D6:8F:E7:CD:26:CD:A3:7A
Certificate issuer: /CN=70d4429d-87bd-4cd8-8a69-e77cf29b9493
Certificate serial: 010D0C9F4328576D51CC73C042CFC1713B66F815
Authority key identifier: E3:3A:FA:19:C2:5B:C1:C3:3B:BB:09:80:81:10:1B:09:E7:80:B3:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70d4429d-87bd-4cd8-8a69-e77cf29b9493.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70d4429d-87bd-4cd8-8a69-e77cf29b9493/a59dc2c2-a1be-3059-9836-00b4f0e30698.roa
Signing time: Thu 02 Apr 2020 14:58:56 +0000
ROA not before: Tue 09 Jul 2019 04:00:00 +0000
ROA not after: Wed 06 Jul 2022 04:00:00 +0000
asID: 35280
IP address blocks: 72.19.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:3b:66:f8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70d4429d-87bd-4cd8-8a69-e77cf29b9493
Validity
Not Before: Jul 9 04:00:00 2019 GMT
Not After : Jul 6 04:00:00 2022 GMT
Subject: CN=76476c93-f4bc-49cc-b438-0db3b255f15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:dc:9c:3e:81:e2:1d:6d:71:a3:c7:87:de:
0c:5c:04:cd:ed:46:69:84:e0:97:98:77:ec:31:7e:
75:1f:4a:e7:f3:15:7a:e3:6f:a4:34:4a:5a:9b:be:
bc:10:6c:3a:c7:b1:73:21:55:7a:dc:71:2b:8d:f1:
ff:24:4e:1d:4a:92:e3:9a:db:c2:c6:de:b5:83:a3:
26:41:4f:81:ef:3e:ec:46:2c:62:61:2a:0b:e9:8f:
d9:12:1c:17:9a:fb:ff:a6:58:55:d6:58:11:0c:d7:
c3:a8:bd:96:11:12:7b:51:27:bf:e3:3d:11:0f:8a:
51:e5:5e:8e:6f:66:1e:1d:82:f3:f0:39:75:ba:e2:
00:b8:36:87:cc:ff:bb:d3:e2:25:91:0e:77:30:fa:
04:c7:da:08:e3:cc:98:ba:ea:18:56:9e:0d:60:05:
0f:20:ef:74:c4:48:0a:73:81:3b:49:4f:51:eb:db:
7f:42:05:f5:22:c7:2b:3e:4b:c6:01:32:32:bf:d9:
ef:26:d4:ef:f6:2a:3f:6b:88:1e:5b:a0:0d:ca:37:
ea:25:56:f2:7f:82:f2:05:af:71:a7:14:83:0b:33:
e1:bd:09:dc:3b:56:1f:2e:48:54:ff:ae:b6:1b:c4:
f6:80:80:c9:90:e4:ac:bd:c6:5e:58:21:44:75:61:
03:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E6:DB:78:B0:94:88:B4:96:E8:DE:AE:D6:8F:E7:CD:26:CD:A3:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70d4429d-87bd-4cd8-8a69-e77cf29b9493/a59dc2c2-a1be-3059-9836-00b4f0e30698.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70d4429d-87bd-4cd8-8a69-e77cf29b9493/70d4429d-87bd-4cd8-8a69-e77cf29b9493.crl
X509v3 Authority Key Identifier:
keyid:E3:3A:FA:19:C2:5B:C1:C3:3B:BB:09:80:81:10:1B:09:E7:80:B3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70d4429d-87bd-4cd8-8a69-e77cf29b9493.cer
sbgp-ipAddrBlock: critical
IPv4:
72.19.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:e9:19:7f:63:49:bc:f1:7d:f1:cd:4b:4c:7e:bb:aa:5b:c7:
fa:38:ed:8f:e8:a2:c1:24:b9:e4:fc:db:f4:23:c6:6c:d4:29:
f2:a0:25:37:dc:d4:a4:ea:9f:ae:1e:bf:5e:71:5e:c9:59:bf:
69:f2:85:9f:93:8f:00:e8:aa:e6:5e:5d:7a:6b:41:2d:5f:07:
30:30:09:0f:5b:04:3e:9d:1c:6f:6d:11:33:bf:f3:bc:9c:76:
5d:d1:58:58:d7:c1:6d:99:b3:5c:52:9c:4d:1b:b3:86:cb:fd:
89:66:72:00:93:98:75:33:96:e2:64:2d:14:42:9f:3f:3e:01:
7a:ae:7b:18:78:6d:43:ad:c5:ee:d3:1f:41:8d:94:a9:04:c3:
90:6b:63:6a:cd:02:7f:ff:f0:b7:6f:b2:76:c8:86:f4:0c:d5:
cf:c9:0b:05:68:ff:a9:55:b0:3e:13:d4:f2:87:ae:4d:70:8a:
50:ac:64:25:07:fe:f2:c4:b1:6b:e5:d7:e7:35:77:05:a9:7c:
3e:9d:7e:d5:7b:3e:a8:21:9a:d9:72:60:3d:38:88:80:0d:a8:
fa:86:73:e0:ca:3e:2f:fa:c9:8a:6b:8c:27:a6:46:a8:db:ab:
0d:e2:5d:c7:b9:31:f2:0a:80:01:07:72:52:d9:99:25:70:80:
13:83:4d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:03 2025 by rpki-client