Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbfcc425-8445-3bc6-8c15-29376feda2c6.roa
File: cbfcc425-8445-3bc6-8c15-29376feda2c6.roa (raw, json)
Hash identifier: +EUL9XK6V2kjI40NIqTip1JTNzbMlCDTu90Blcrdtik=
Subject key identifier: 0C:91:42:74:F2:79:C1:0E:29:1F:EE:3D:47:F7:62:9F:EB:1C:F1:E2
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926BD1106F6195FBB0B8740
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbfcc425-8445-3bc6-8c15-29376feda2c6.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 54288
IP address blocks: 72.52.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:bd:11:06:f6:19:5f:bb:0b:87:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=2c8168df-1e4e-4a7e-9a69-6e0da61c2920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:55:cb:7a:22:56:b7:81:26:9d:5c:4c:4c:9a:
c5:cb:c6:f0:d4:6d:74:2e:f2:cd:3e:06:e1:ca:7a:
da:5b:10:1a:1c:81:22:fa:07:b5:7b:71:b2:9f:16:
18:6d:43:53:23:90:bc:5b:71:45:08:c9:58:7e:41:
62:50:31:a1:13:0b:2e:6b:86:6c:e9:01:8a:52:e5:
4b:2c:ef:16:3e:15:46:d0:41:ef:45:d4:f8:cf:10:
be:95:cb:a1:5a:9d:ae:39:5d:48:0e:49:1d:56:d7:
f1:a4:55:f5:bf:83:cf:34:6e:89:0e:3f:2b:63:2e:
27:0a:2d:c7:45:bf:86:57:c1:82:5a:ba:c5:7d:13:
a4:bc:d4:a2:43:ce:6f:bf:05:94:f5:10:00:a2:13:
8d:2c:5b:04:aa:13:c4:c1:57:c4:89:90:bf:e9:75:
11:00:11:46:5b:e8:62:df:61:e7:d2:b1:00:9b:84:
14:dd:ad:60:10:58:b6:26:a2:23:06:8e:80:ad:3a:
5f:3f:c6:03:3f:d2:5a:2a:df:0a:db:db:37:d6:19:
22:7a:51:93:e3:e7:11:67:66:c0:fe:c0:6d:73:09:
8e:9f:30:30:c3:0b:ad:01:56:11:e4:64:4a:d9:11:
6c:1d:41:53:77:c1:66:0a:d0:aa:1b:17:05:4e:3c:
e5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:91:42:74:F2:79:C1:0E:29:1F:EE:3D:47:F7:62:9F:EB:1C:F1:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbfcc425-8445-3bc6-8c15-29376feda2c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
72.52.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:62:11:38:bd:f0:db:0b:c1:b4:f3:b4:ce:4b:78:96:75:fe:
93:fe:5e:56:1f:91:14:e0:cb:e4:bd:20:88:46:03:a4:bb:4a:
6a:41:20:94:2c:17:26:55:19:ee:e5:0c:10:7f:be:f8:ef:5b:
2c:6f:66:84:eb:c6:56:7e:4f:3c:1e:68:88:d1:2a:91:22:47:
a6:e6:ef:82:ac:42:05:43:62:24:f6:aa:92:33:5b:75:2e:42:
e8:39:8b:32:e4:cc:50:07:ca:ff:9d:6f:8b:fb:0c:7e:05:07:
ab:26:37:5a:b7:49:aa:56:0e:c1:75:f4:96:f0:16:11:6b:dc:
26:eb:e4:52:cc:1c:bb:89:58:7d:26:f3:f5:f8:16:ff:47:e5:
dc:5a:1f:94:9b:55:0f:b3:05:c2:41:3e:fa:5a:51:b4:13:92:
ef:e3:ca:d1:06:ab:8b:c1:75:94:2b:f9:02:1b:2a:ed:2c:9e:
37:0f:b8:05:5a:5c:86:03:8c:c0:2d:7c:b7:27:d3:1c:29:9b:
c8:b7:35:dc:e8:98:a8:21:9f:df:43:92:15:30:71:20:ef:ff:
68:46:32:70:c4:a5:60:41:be:e8:89:23:32:46:fb:0a:88:e9:
1e:20:a7:3b:4b:5f:d1:2f:c3:1c:74:98:f6:5a:a9:3d:6d:a1:
fc:8e:72:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:53:16 2025 by rpki-client