Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3c14bf1e-f46e-38cd-9d06-8e2b77fb1c06.roa
File: 3c14bf1e-f46e-38cd-9d06-8e2b77fb1c06.roa (raw, json)
Hash identifier: w8Qq64DMXyLmW/WoSdJrVzFqx0JHIHydjhOpB4tlEoM=
Subject key identifier: 5A:65:A8:1F:F4:26:E3:ED:11:6A:34:A0:24:20:DB:79:47:32:ED:02
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F43285848E0068DD7BF5DA80D52E22680
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3c14bf1e-f46e-38cd-9d06-8e2b77fb1c06.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 33363
IP address blocks: 71.44.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:8d:d7:bf:5d:a8:0d:52:e2:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=5a0d7790-f05f-47d9-9bee-2afbdc289bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a2:2e:0c:28:e5:48:43:8f:45:d2:32:89:81:
fb:23:ef:97:c1:6c:d8:58:2f:bf:43:3d:db:33:c5:
9c:81:c7:6c:a9:4a:6e:1b:67:a8:ce:85:1c:e9:c4:
63:a6:89:ce:d3:85:9b:aa:10:ed:08:39:ff:ba:92:
6e:4b:7e:92:12:50:50:0d:bc:bd:ad:df:28:4e:42:
2b:05:27:12:23:e4:c9:1b:9a:49:1a:cd:a5:05:a3:
2f:51:15:cb:64:e6:1b:e0:bc:6c:64:ab:73:d6:92:
27:29:d3:fa:33:12:96:1b:b2:c6:9e:77:07:4f:4d:
60:54:de:56:0d:7b:45:40:01:1f:34:74:cb:21:21:
f2:87:44:77:89:88:0e:44:f5:fc:74:9d:ab:ff:4b:
66:ee:90:61:4e:2b:e8:42:35:82:38:56:0d:26:27:
48:e0:f4:06:66:49:2b:d8:db:a7:51:b6:91:f3:76:
1a:db:b2:b3:82:15:ef:f0:27:68:35:09:e9:3b:04:
da:c1:7d:cf:90:78:c2:9b:17:0f:78:5f:cd:41:7e:
5f:eb:65:6e:2a:29:a7:d9:d9:46:ff:a4:74:95:bc:
d9:63:2e:12:d9:b4:1b:2c:16:99:07:f6:ea:2a:2e:
f2:83:9b:63:6a:08:ea:05:a8:f2:0e:20:2f:b8:e9:
0b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:65:A8:1F:F4:26:E3:ED:11:6A:34:A0:24:20:DB:79:47:32:ED:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3c14bf1e-f46e-38cd-9d06-8e2b77fb1c06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
71.44.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:05:70:33:89:ac:80:a6:74:3f:0d:a0:e9:17:2c:a6:ee:08:
07:df:49:80:08:de:d2:58:41:c9:16:b9:b9:43:e7:a7:58:85:
4e:8c:4d:47:b7:83:a5:6e:99:13:1d:30:3d:0d:b7:0d:53:2c:
54:ac:d7:2c:99:ce:af:5c:e5:ec:bf:ed:6b:5e:fa:c2:15:68:
42:fe:46:2e:73:5b:59:35:ce:95:45:d0:40:8b:6e:0a:de:6e:
e8:75:0c:7c:02:5a:59:e6:ca:98:d5:1f:b2:64:42:10:98:3a:
9f:59:9a:34:a2:cc:01:9c:ba:da:21:15:54:1e:22:be:a9:93:
8c:e1:12:e4:f2:35:ba:60:f0:7c:02:f3:7a:90:db:2a:47:e2:
99:cf:30:bb:3a:e2:8c:98:9a:9a:90:be:02:bc:ed:81:1f:91:
a0:df:67:c3:db:c5:b0:e2:20:67:33:89:2c:33:27:14:b5:4f:
c2:0b:c7:23:38:42:04:89:ab:7a:24:ee:4e:49:bf:b0:12:4d:
ce:84:6e:b2:70:b5:0f:52:24:63:83:d5:b6:f1:e3:3d:d6:23:
9f:fd:c7:74:eb:ff:d4:65:b2:e7:91:24:42:58:9e:c8:81:e9:
5e:ef:2c:c0:39:6a:2b:d9:c4:9b:5b:fa:88:9f:1d:0a:c5:61:
e1:d5:ab:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:42:43 2025 by rpki-client