Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73/d3047cac-f2f4-32be-99dc-172f87e65ca7.roa
File: d3047cac-f2f4-32be-99dc-172f87e65ca7.roa (raw, json)
Hash identifier: 22WpLQJNhfd1ZX8F2eHdVNO2+4X8v20VD0bZ4Lc8m4I=
Subject key identifier: EE:34:FD:D8:60:85:61:F7:9A:CE:51:BA:27:7F:DF:1A:26:98:9A:EA
Certificate issuer: /CN=42a6a92d-cd75-4125-b537-c87919ad3f73
Certificate serial: 010D0C9F4328584976A98F41C4882CBFC9A03C80
Authority key identifier: 8C:94:14:C3:3F:03:44:25:C8:60:7A:5E:08:AC:01:C6:4C:FE:C7:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73/d3047cac-f2f4-32be-99dc-172f87e65ca7.roa
Signing time: Wed 09 Apr 2025 01:00:47 +0000
ROA not before: Wed 09 Apr 2025 01:00:47 +0000
ROA not after: Tue 08 Jul 2025 01:00:47 +0000
asID: 46573
IP address blocks: 72.19.12.0/24 maxlen: 24
72.19.13.0/24 maxlen: 24
72.19.14.0/24 maxlen: 24
72.19.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:76:a9:8f:41:c4:88:2c:bf:c9:a0:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a6a92d-cd75-4125-b537-c87919ad3f73
Validity
Not Before: Apr 9 01:00:47 2025 GMT
Not After : Jul 8 01:00:47 2025 GMT
Subject: CN=15dfe2dd-4c75-4a02-90b4-6784053df51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5c:ec:45:55:d0:c0:8b:e7:4e:21:e7:58:07:
e8:83:1e:9c:da:5f:ed:d1:94:5c:b8:7f:98:56:b3:
51:91:8e:89:d6:be:80:bd:7e:3f:0b:ca:90:ab:89:
84:f1:05:69:38:c6:ef:0c:b8:45:37:c4:58:17:e6:
43:3a:9e:9a:20:e4:67:5d:99:34:d0:4e:c5:2e:3c:
f5:0f:0f:f5:cc:6f:e2:0c:2a:d5:c3:00:a1:0d:68:
b9:1c:3f:b2:7b:7e:bb:ff:64:39:ca:3e:e5:a2:23:
de:6e:aa:ba:e0:90:ef:c8:4a:fa:50:8e:24:61:f8:
ff:a0:e6:41:87:57:13:10:8d:c1:66:97:ab:2f:9e:
f0:ed:91:05:d8:8a:4c:b8:eb:75:47:f7:43:79:d4:
2d:42:5c:4c:d7:d1:d1:e7:12:4c:07:ba:9f:3b:86:
da:3c:80:be:61:f8:45:71:ac:7d:9d:9c:76:45:ea:
77:07:10:f1:58:e1:b6:dd:32:bb:c8:01:95:51:84:
a5:df:a1:73:86:de:2f:a6:4e:7d:4b:05:1f:e3:1a:
1e:25:1f:1b:e7:45:92:f9:7f:75:02:de:af:ed:73:
69:d4:11:63:41:fe:2d:0b:85:6c:b0:8e:e6:6d:0a:
67:63:55:3d:45:b5:97:5d:27:04:08:d6:a0:51:d0:
80:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:34:FD:D8:60:85:61:F7:9A:CE:51:BA:27:7F:DF:1A:26:98:9A:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73/d3047cac-f2f4-32be-99dc-172f87e65ca7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73/42a6a92d-cd75-4125-b537-c87919ad3f73.crl
X509v3 Authority Key Identifier:
keyid:8C:94:14:C3:3F:03:44:25:C8:60:7A:5E:08:AC:01:C6:4C:FE:C7:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/42a6a92d-cd75-4125-b537-c87919ad3f73.cer
sbgp-ipAddrBlock: critical
IPv4:
72.19.12.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:98:89:8d:7b:31:4a:bd:03:04:2d:31:2b:be:df:ed:e1:c8:
f3:43:e9:73:44:15:03:27:d9:72:74:4f:0c:f7:12:34:0d:62:
54:11:57:f7:7a:0d:24:1d:bd:36:0a:06:ec:be:8d:ce:fb:62:
99:b8:af:e1:e0:a7:d7:67:53:46:43:c5:cf:40:44:5a:ba:31:
23:5f:bc:16:20:42:00:7f:5b:6f:cc:44:43:90:68:26:ac:2c:
bd:18:3e:e5:ef:4c:3e:8f:3a:26:e9:2c:90:94:9e:e3:a0:17:
a3:65:54:6b:5c:8b:f6:41:07:cf:9b:cb:91:c3:12:f5:5e:d7:
cd:c4:79:f4:c9:c5:38:5b:17:a5:47:7b:40:b1:18:31:7a:66:
61:cc:01:df:0c:2d:dd:18:f1:2e:8b:83:7f:bd:14:c1:fc:3a:
8a:62:10:eb:78:d7:67:40:37:7f:37:c6:d5:da:b6:df:53:e5:
c8:a3:73:32:6c:d1:16:a9:69:1b:47:a5:4a:1b:40:50:07:48:
e3:37:33:8f:4e:db:65:05:34:ca:43:3f:64:89:6d:7f:d7:ea:
5c:0d:00:83:c1:c2:1d:45:9c:66:d3:33:47:21:24:20:9e:d8:
a8:c0:cb:84:06:5f:be:6e:2f:da:6d:62:a4:8c:e9:10:69:1a:
9d:59:a6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:43 2025 by rpki-client on console.sobornost.net