Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/4c72c677-b0dd-379a-a02f-bd64e70317e6.roa
File: 4c72c677-b0dd-379a-a02f-bd64e70317e6.roa (raw, json)
Hash identifier: 4BaYK4yuASNhjYT1RIbAIjvvTZ9+0oNP0Cgjb6jyCWg=
Subject key identifier: 24:0B:E7:C7:D0:E1:AF:15:33:DD:E6:31:BB:9A:0F:49:A5:DA:53:F5
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F432858477230DE84B3C327B1422295C0
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/4c72c677-b0dd-379a-a02f-bd64e70317e6.roa
Signing time: Sun 06 Oct 2024 01:00:31 +0000
ROA not before: Sun 06 Oct 2024 01:00:31 +0000
ROA not after: Sat 04 Jan 2025 02:00:31 +0000
asID: 394437
IP address blocks: 72.20.152.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:72:30:de:84:b3:c3:27:b1:42:22:95:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Oct 6 01:00:31 2024 GMT
Not After : Jan 4 02:00:31 2025 GMT
Subject: CN=d756550f-627f-4ae6-8fb8-a7b62da74d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:69:ee:f4:ba:6c:70:51:55:de:9d:a1:b5:dd:
19:15:0d:82:78:44:91:79:91:3d:92:6a:ce:e3:29:
0c:43:d6:59:21:62:55:ba:04:cf:9a:c0:13:c1:ce:
83:3d:e8:07:92:fb:10:85:74:a9:86:20:fc:70:96:
6a:04:71:b2:8c:ab:79:5c:f3:56:a0:02:51:12:ce:
8a:c5:57:5d:6a:89:f9:9d:37:e1:3e:fc:00:c7:98:
64:7a:8d:98:ce:4f:97:4e:26:47:85:e8:86:69:d1:
be:78:25:28:f4:cf:47:f1:7e:0c:93:e1:ac:cd:04:
1e:a6:a6:d6:06:a4:db:cb:71:2e:c9:52:7a:29:17:
2c:44:b2:08:c5:50:2a:4b:04:74:1f:c8:e0:4b:cd:
8f:d9:31:8a:ab:ad:7b:97:a7:27:b6:2c:f4:da:4f:
62:72:8c:cc:1f:bd:9a:70:4e:6d:9e:bf:fb:73:a1:
d0:32:21:7e:48:b5:7d:70:e8:86:fd:91:9d:eb:c5:
50:4b:8b:1a:96:4f:31:9e:54:27:74:79:e3:67:65:
ce:37:84:48:3c:e2:b7:58:55:fc:b0:67:fd:a4:09:
ad:46:a8:d7:61:6b:35:53:3c:5f:d3:20:37:19:5b:
69:a6:b3:1b:d6:0e:35:08:29:d8:bf:f6:5f:f9:b3:
8e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0B:E7:C7:D0:E1:AF:15:33:DD:E6:31:BB:9A:0F:49:A5:DA:53:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/4c72c677-b0dd-379a-a02f-bd64e70317e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.20.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:60:cd:00:50:4b:27:dd:12:ab:30:f4:ea:7a:ba:af:30:9f:
d9:8a:8f:1f:77:d7:e5:37:92:76:26:c0:42:85:12:3e:68:14:
f2:3b:5f:72:a6:be:e4:91:67:4b:5c:ca:03:4a:3a:4f:78:f6:
08:54:d2:76:59:d5:5d:de:ec:ed:fd:4d:ed:02:d0:0c:c9:ab:
bb:0b:3d:25:d1:1e:85:36:a5:b3:82:bd:1a:db:5b:77:2b:2a:
d2:b2:63:15:3d:2f:2d:b0:41:4b:54:94:4f:b4:23:b5:a3:e9:
f5:fe:4c:ee:f5:8a:31:0b:2b:22:15:71:2f:90:9a:7b:57:51:
a3:22:f5:29:37:77:c8:2e:64:6d:2b:33:56:44:8e:32:78:8c:
0a:ca:48:03:10:7d:6c:a4:54:cc:94:d2:1a:ac:95:c1:a0:74:
fd:74:56:fd:bf:b7:03:83:fe:08:73:fa:69:47:59:81:c3:53:
75:e3:12:ec:c8:3d:fa:6b:4d:f6:76:ca:17:ca:0c:f0:e3:03:
09:73:17:73:87:56:2e:0c:bf:4e:89:9a:cb:83:0c:2b:e0:10:
5e:9b:d6:55:ec:52:56:a1:1c:26:bb:03:41:e6:a2:11:78:f8:
48:2a:da:e5:89:3d:e1:0b:c0:9f:55:4f:67:d7:56:23:fb:40:
c6:ed:32:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 19:04:15 2024 by rpki-client on console.sobornost.net