Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/0aaf16f1-c6c6-3bf5-ac5e-3e59733357f9.roa
File: 0aaf16f1-c6c6-3bf5-ac5e-3e59733357f9.roa (raw, json)
Hash identifier: FgjXFLM7lEiS+qlmaytSr5n/Nbs69excGuialoR0bQo=
Subject key identifier: CE:8C:14:FC:B9:A6:AA:65:53:A4:90:C5:C6:FD:E4:73:6D:A4:0B:3F
Certificate issuer: /CN=fc9e4738-7902-435b-802c-f37dc4b25f95
Certificate serial: 010D0C9F432858481AC20E6D009D00B8C2328F80
Authority key identifier: 34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/0aaf16f1-c6c6-3bf5-ac5e-3e59733357f9.roa
Signing time: Thu 05 Dec 2024 10:08:54 +0000
ROA not before: Thu 05 Dec 2024 10:08:54 +0000
ROA not after: Wed 05 Mar 2025 10:08:54 +0000
asID: 701
IP address blocks: 72.1.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1a:c2:0e:6d:00:9d:00:b8:c2:32:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9e4738-7902-435b-802c-f37dc4b25f95
Validity
Not Before: Dec 5 10:08:54 2024 GMT
Not After : Mar 5 10:08:54 2025 GMT
Subject: CN=dfae17e6-ff9a-4110-bbd5-bdccae6bcd41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:27:b3:3a:33:89:0f:29:50:4f:8c:86:91:f6:
cb:c2:bd:b4:bd:2f:10:6a:31:0f:c6:53:0e:b6:fb:
31:f6:47:0e:79:19:ca:eb:0f:8f:7c:51:b0:13:ba:
67:83:c6:71:d9:d5:98:fc:8f:72:53:b6:3d:73:f9:
87:c0:50:dd:7a:b1:99:cf:92:1c:eb:f4:97:9f:08:
77:fb:0d:94:4f:66:37:b3:b1:fb:e3:ed:52:fe:a9:
57:69:17:00:05:4e:c6:94:71:04:2c:94:9e:ad:82:
cf:8b:a8:b9:79:61:bb:2c:b0:7f:10:3f:ee:ed:a3:
07:ba:62:aa:6a:1d:7f:9a:92:1a:57:10:e6:1e:95:
07:8d:24:33:5c:d7:65:63:11:28:76:2a:e9:66:37:
73:c5:fb:74:db:39:e3:bf:8f:7b:f3:62:bf:14:35:
34:f2:fe:61:a2:8e:f4:d7:38:d8:69:5d:0d:34:13:
87:16:e1:17:af:8f:95:e3:68:90:9b:7a:e0:1b:cf:
92:57:43:e3:03:ff:18:e5:88:1c:8c:a2:76:8d:37:
70:76:46:0b:ee:f5:42:63:fd:66:bd:d9:37:a9:a2:
5a:d2:05:da:bc:c9:eb:92:c2:4f:1c:11:f5:90:70:
5a:e9:88:0a:00:dc:93:e6:17:8d:1b:d5:0c:76:c0:
75:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8C:14:FC:B9:A6:AA:65:53:A4:90:C5:C6:FD:E4:73:6D:A4:0B:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/0aaf16f1-c6c6-3bf5-ac5e-3e59733357f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.crl
X509v3 Authority Key Identifier:
keyid:34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer
sbgp-ipAddrBlock: critical
IPv4:
72.1.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:8a:15:cd:c4:f1:57:4d:6d:c8:6c:db:7d:7c:e7:bd:ed:e0:
e2:f0:41:12:81:06:c6:8b:96:39:34:e7:49:2e:6e:69:00:c7:
4a:de:95:b8:57:2c:cc:ee:5d:4b:2b:3c:b3:21:2c:2b:a4:a4:
65:9d:e4:b2:39:39:b6:82:5a:f3:31:52:25:98:9a:7c:5e:fe:
45:51:8f:e8:fd:de:fe:e2:ae:ec:6c:e7:8d:47:f7:70:09:ca:
25:c0:02:1b:4b:d9:0b:ac:7c:45:de:70:ee:78:ff:b2:34:8a:
b2:40:c9:25:2b:21:8f:14:d7:fb:8e:dc:ee:9e:0c:df:fc:85:
24:b9:4e:31:e7:c9:a0:78:98:37:99:59:5f:44:40:f2:2a:80:
d0:01:5f:5b:2a:99:d1:fb:a1:c6:99:8e:ca:e9:8c:df:7a:5d:
26:3f:dc:a1:d0:17:ed:26:66:f6:19:32:be:13:8c:75:90:f9:
0f:c4:e2:8a:9d:f3:a8:c7:f9:fa:d9:b5:91:5c:dd:60:75:13:
7c:c3:d2:70:b4:c8:c9:ec:3f:64:fe:bf:2f:b7:97:08:c6:13:
20:30:57:28:42:b3:6a:55:e4:2c:42:87:28:bb:ba:42:bc:58:
aa:21:18:40:6c:3f:b4:4c:fb:07:d4:9e:2d:c8:a4:1a:44:e5:
5e:3f:dc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 19:05:30 2024 by rpki-client on console.sobornost.net