Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ab8aed72-03d9-3336-891c-beaf500c0618.roa
File: ab8aed72-03d9-3336-891c-beaf500c0618.roa (raw, json)
Hash identifier: bPMLj4V3oVMcyhV/98kyE2TKhQbtxb241zx6tjf5EwQ=
Subject key identifier: F7:CF:23:17:82:18:71:F6:21:90:EE:54:3F:E1:9A:97:0E:5F:D9:74
Certificate issuer: /CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46
Certificate serial: 010D0C9F43285849244E7B792D0D0685857B5B00
Authority key identifier: C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ab8aed72-03d9-3336-891c-beaf500c0618.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 32524
IP address blocks: 72.21.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:7b:79:2d:0d:06:85:85:7b:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=8fd0cf1d-b59d-4d59-aa44-5ae53e01fbbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:24:6e:41:80:6c:b5:b0:ce:27:6a:61:3a:07:
3c:4e:e9:45:83:9f:e3:d2:a4:8e:c9:19:47:20:41:
99:03:52:59:03:5e:5b:f0:31:46:03:49:eb:af:e9:
4b:74:a7:13:f5:92:13:e4:46:f3:9a:fb:fa:17:aa:
3c:71:fa:d7:8a:d0:8f:f5:4c:e1:c3:c0:5c:50:95:
c7:c2:5f:0f:e3:3a:8c:3b:46:1c:c0:b5:d5:08:9a:
1d:df:85:ba:e2:27:5e:07:63:f9:ca:c0:3a:ac:ab:
46:52:c6:27:6a:fa:a1:db:9c:ea:a2:de:b4:10:a6:
15:42:20:88:6d:09:bf:e1:fe:4f:dc:76:b4:1c:63:
51:fc:d0:2b:d6:97:25:6f:d9:53:97:71:13:43:bd:
93:8c:7d:af:76:a9:e9:c3:64:e2:f7:3d:b6:8c:a6:
65:04:47:ce:23:84:92:cc:ba:4e:4f:0e:30:e4:96:
a4:76:4c:4e:d7:3e:11:b4:7e:94:bd:8b:d5:f1:b5:
fd:ca:26:c7:4a:53:24:fd:6a:25:67:66:5e:d6:b1:
24:66:4c:a6:ef:aa:45:a5:4a:47:18:65:32:19:8c:
16:ac:93:c2:9d:a7:e6:31:4e:71:53:b9:39:15:a8:
aa:56:e4:20:b1:6a:c6:b1:a6:c8:88:01:32:be:b1:
26:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CF:23:17:82:18:71:F6:21:90:EE:54:3F:E1:9A:97:0E:5F:D9:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ab8aed72-03d9-3336-891c-beaf500c0618.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.crl
X509v3 Authority Key Identifier:
keyid:C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer
sbgp-ipAddrBlock: critical
IPv4:
72.21.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:57:0c:87:5b:b7:86:e5:3b:22:f1:b9:28:ee:e6:99:16:b6:
d0:7c:ab:ff:4b:2f:e9:a7:77:70:f6:36:af:b1:34:6d:79:ad:
c2:73:ed:f7:19:32:88:11:de:83:49:db:45:0c:3a:5e:30:ef:
f5:ad:39:79:a8:b4:03:84:89:9d:85:60:62:c8:e1:be:c8:84:
af:57:e3:fc:18:a2:96:be:95:c8:b6:6e:6d:e5:8e:5a:b4:31:
94:38:3c:4c:dc:30:d4:f7:34:18:9d:d0:94:16:a3:40:c6:96:
15:b1:47:81:53:0d:1c:36:ef:a3:4c:4c:5b:76:1c:2a:a7:8e:
ad:ff:c1:fb:1a:2b:c9:fe:b8:1f:b3:47:79:21:d1:5e:79:65:
2e:ec:c5:46:a3:8e:66:88:c1:67:23:b6:21:b9:5b:06:91:6c:
33:13:ca:57:c0:7b:81:05:61:9f:fb:90:06:63:2b:37:f6:14:
6a:2f:97:ef:69:78:06:0d:78:c5:2f:b9:23:06:fb:3c:52:6c:
8d:ce:25:4d:90:b0:f1:1f:98:b5:02:04:ea:69:58:23:01:de:
9f:3b:85:dc:f4:94:66:22:f3:16:6d:e3:48:c7:cc:43:bb:41:
a8:5f:e9:9e:02:62:4b:d0:13:6f:5e:b0:31:b6:6d:b9:74:12:
49:e8:86:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:24 2025 by rpki-client on console.sobornost.net