Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/708e041f-6eea-32c5-b5ef-2437b86a4217.roa
File: 708e041f-6eea-32c5-b5ef-2437b86a4217.roa (raw, json)
Hash identifier: 1V1QMXaCDWW4zllGsPRrwLRmZUEGYF4lUjwbwu11LF8=
Subject key identifier: A1:7C:CA:B0:08:9D:37:02:09:9C:F2:EC:15:FC:0B:B0:92:AE:77:ED
Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial: 010D0C9F432858491AA6BA2FD1DA50C1FE3718C0
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/708e041f-6eea-32c5-b5ef-2437b86a4217.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 211373
IP address blocks: 72.14.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:ba:2f:d1:da:50:c1:fe:37:18:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=a14e2e6f-5222-4708-b50f-af3cb563ec83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2e:a8:57:da:43:97:16:1f:5a:71:1c:ce:c7:
4d:c8:90:47:0b:48:8d:7d:cf:b9:ab:aa:b6:60:67:
98:2e:2f:42:61:33:52:35:36:ad:6f:11:5d:f4:74:
76:9a:aa:85:df:2e:8b:ce:78:35:37:e2:b2:2c:ad:
b2:fb:39:19:75:1d:bc:59:ec:bc:fc:c6:06:5a:25:
7c:71:d4:0b:44:eb:47:ce:0f:d7:fc:11:14:d0:95:
17:cf:fe:8c:1e:ff:21:e9:3d:6a:37:1c:d5:88:36:
29:82:5c:62:4a:9d:14:92:75:cf:05:89:d3:f2:ab:
7a:93:3c:4c:a6:46:e3:d6:b9:ef:a0:f9:17:69:d3:
77:56:c7:c8:06:97:ba:57:c9:9f:a6:0a:04:39:ff:
17:18:06:ee:3d:4c:f5:91:01:70:0c:44:03:95:e1:
7d:86:55:3e:dc:90:05:75:54:78:76:c8:a6:e8:d2:
b3:3c:dd:a9:67:cc:d8:ff:30:37:2f:87:83:47:58:
fe:05:43:32:16:27:db:51:b8:29:40:2e:58:f5:94:
7c:0d:10:53:56:b7:5c:4a:6f:5c:65:3a:8a:dc:f3:
e4:cd:a5:72:31:d9:ca:e6:56:91:07:0c:7a:f0:fa:
b6:99:0e:4c:88:f1:98:04:b4:b8:ec:d5:1e:33:47:
4d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7C:CA:B0:08:9D:37:02:09:9C:F2:EC:15:FC:0B:B0:92:AE:77:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/708e041f-6eea-32c5-b5ef-2437b86a4217.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
X509v3 Authority Key Identifier:
keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:10:9e:53:e2:3e:16:a2:c9:23:ef:a8:54:bf:8c:b6:34:c9:
d9:bb:ec:8c:9c:d9:3f:1e:d3:d5:99:3c:8d:b8:90:75:f0:6b:
67:fc:ff:ea:9a:57:4f:71:52:29:63:e3:1a:14:59:3c:02:51:
57:d0:80:e9:28:e6:30:6d:1e:23:8c:77:b2:c6:19:3e:48:68:
49:da:ec:47:4a:fc:50:59:49:81:4d:52:38:85:b4:22:cf:f1:
cc:9f:f8:a5:92:2f:97:83:da:50:32:71:9b:dc:9a:93:1e:14:
61:3f:98:c6:dc:71:63:9f:2a:b9:68:4b:07:d5:7c:c3:a4:2c:
52:82:7e:83:de:a9:ca:5c:03:ea:43:b9:c3:24:11:65:6d:52:
59:0e:32:ed:7e:ba:1f:98:26:5d:cc:43:19:3b:d4:e6:e7:17:
e9:3b:61:5c:f0:b0:a6:97:63:2f:dc:4f:7c:d6:42:1e:48:00:
cc:cc:41:4a:aa:0a:d8:a1:bc:3f:47:6e:08:2a:08:54:a1:73:
51:ea:22:ba:7a:88:ae:c4:5b:4a:95:de:75:a7:60:aa:2d:ab:
e7:be:44:6b:fb:19:d2:e9:95:5b:2a:29:84:df:bb:63:56:a9:
f5:8a:b5:23:85:60:0c:42:30:27:cd:4d:9d:ad:a3:95:9f:44:
d8:89:2c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:40 2025 by rpki-client on console.sobornost.net