Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa
File: 2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa (raw, json)
Hash identifier: WG+CiniipMxGoVsyHa6aHQijECMzMpNZbUjj8bSIW1o=
Subject key identifier: A9:03:90:31:D0:51:9D:C0:A5:8A:9D:43:56:BF:C2:5E:86:A4:B5:7D
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F43285848BBBB72ED1125FA438D2F0820
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 394437
IP address blocks: 72.20.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:72:ed:11:25:fa:43:8d:2f:08:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=803b6fdc-72bb-4d25-bd66-de4026d01855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:39:b1:48:24:76:2b:b6:0b:a1:97:84:b1:
42:79:aa:8e:55:fc:a1:56:2b:c6:4e:47:a2:8c:56:
cb:4d:99:0f:45:53:3f:55:26:5d:c1:dd:01:b4:a3:
82:90:4d:b3:fc:54:72:55:4f:d6:ef:02:80:e5:82:
15:6e:84:ca:60:41:b1:09:3e:27:3a:79:da:4e:f7:
0c:da:bc:e0:5c:ba:7d:47:86:ca:f6:ad:6d:ff:49:
44:29:33:6e:bd:71:c7:f9:af:03:af:ce:16:eb:40:
9d:89:91:4c:72:32:27:02:83:3d:93:cb:0b:be:9e:
8b:d8:c5:f5:e9:af:32:6b:fa:7b:5b:b3:7b:85:38:
7c:5a:ab:25:6a:33:85:70:a5:a8:fc:06:8b:58:37:
e6:82:aa:37:68:57:6e:76:1e:31:c4:b4:e8:d2:fa:
d4:4f:ca:f2:aa:6c:0d:bc:e1:f7:0f:4f:b6:f2:03:
0e:e9:10:c9:df:4c:c6:10:56:e2:cf:04:78:76:e9:
6f:eb:af:4d:26:fb:d5:22:4f:68:2f:ed:15:4b:74:
b7:f9:22:dc:90:bc:f5:55:bd:1f:7c:6b:16:9a:cb:
af:73:50:5b:e7:b9:3e:f5:1a:34:97:98:5f:26:71:
49:a8:d6:cc:09:6b:30:08:32:a5:fd:ad:fd:f8:d8:
fd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:03:90:31:D0:51:9D:C0:A5:8A:9D:43:56:BF:C2:5E:86:A4:B5:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.20.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:27:26:3b:d1:27:32:d0:7c:cb:c4:98:79:46:32:20:8c:2f:
ed:4b:2e:42:33:88:9d:dd:d6:f3:df:d8:7c:a5:d2:48:d4:65:
c9:f8:99:91:39:27:f9:d2:20:82:db:f7:d4:22:50:e2:0c:ff:
27:aa:51:9d:16:bf:2a:cc:91:36:6f:6e:e9:16:0a:f8:3e:72:
f4:89:fc:3a:21:b8:dd:4c:93:a6:ca:5a:88:6c:5b:d0:00:02:
52:ae:c1:e1:e3:28:43:08:4b:1d:62:8c:5f:eb:27:53:38:bd:
d2:6a:43:0f:0c:3d:14:d6:af:16:6c:ea:9f:12:11:d1:e7:b8:
c7:5b:86:c3:dc:26:56:f2:63:60:1a:17:c0:06:9f:37:36:0a:
63:e4:a8:a3:b9:8d:00:b2:35:51:9f:58:bb:03:64:6e:94:ac:
71:1e:83:41:5c:2d:96:50:70:9c:d5:41:72:04:b0:36:9c:14:
4e:34:27:f3:e3:7d:0a:0d:7a:67:23:7c:53:eb:5b:49:27:75:
00:99:c0:f8:a9:9a:9c:85:94:c7:bc:13:fb:38:ba:5e:9e:bc:
ca:27:18:8e:da:c9:3b:72:ca:b4:98:a8:69:7d:eb:92:7e:00:
c0:1e:5a:e3:9e:b6:7a:ff:64:e3:c4:0e:53:b9:92:3d:bf:00:
91:54:ed:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:28 2025 by rpki-client on console.sobornost.net