Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/495cb66f-12f2-3497-84f1-a6fdf007b729.roa
File: 495cb66f-12f2-3497-84f1-a6fdf007b729.roa (raw, json)
Hash identifier: 8NrwwwTjldVkVMBnEE3pVC8SZYZA3GFsbpyUsLWexXU=
Subject key identifier: 88:5B:2D:0F:25:5C:F9:15:95:6D:D3:A8:D7:52:9E:C4:25:57:18:EA
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F43285848E0068CC45711C83BD97FA200
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/495cb66f-12f2-3497-84f1-a6fdf007b729.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 33363
IP address blocks: 71.44.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:8c:c4:57:11:c8:3b:d9:7f:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=2e8a04f5-1a00-44c3-ac4c-0545d5453a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:36:83:6d:9a:7e:0f:9c:f9:7c:e9:d3:ab:a2:
e0:82:66:65:1b:61:3f:50:77:63:3a:ae:d2:2e:0f:
33:6b:5e:f7:d5:54:de:75:c7:0d:5f:5a:d3:3d:30:
75:e9:41:ea:fc:94:02:30:34:47:17:46:ed:64:e3:
1c:95:56:a3:f2:f3:ec:49:67:e5:8c:aa:1e:21:88:
fc:02:f8:b5:aa:0d:16:8c:45:09:01:81:51:89:14:
c2:6f:64:bb:7b:1c:d8:66:c2:5e:c9:4f:eb:ce:65:
65:ea:16:38:35:ac:c0:09:2e:f1:9d:2e:bc:93:27:
40:95:a0:2d:da:54:b7:cb:6c:e5:30:a9:e2:54:d8:
4d:99:d4:88:43:4b:f8:67:32:5c:0e:88:9c:c8:d8:
df:17:76:da:b4:8c:c5:b4:67:40:bf:fb:49:a6:23:
e5:78:94:60:72:3d:2d:be:67:09:7d:4a:a4:fc:9b:
6a:da:96:40:00:ec:91:e3:54:60:02:52:86:a2:14:
d2:89:90:27:89:91:2e:4c:1c:0c:d2:e1:27:03:93:
f1:95:86:02:4a:c2:8a:83:51:b1:13:62:dc:2a:d1:
6b:12:ed:91:d8:b4:0e:b6:87:ca:9b:ab:e9:a7:1a:
e7:5d:17:59:e7:ff:db:fa:02:a1:bf:e1:c1:e1:b4:
bf:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5B:2D:0F:25:5C:F9:15:95:6D:D3:A8:D7:52:9E:C4:25:57:18:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/495cb66f-12f2-3497-84f1-a6fdf007b729.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
71.44.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:dc:5b:54:07:e8:ab:65:ac:d7:a9:51:2b:60:eb:1a:a6:0b:
1a:a5:7d:43:17:b7:4d:26:ca:62:c8:29:4c:6d:eb:1b:63:3a:
fa:4e:a0:30:d4:07:db:2e:f8:45:78:f0:f3:d4:96:4d:ed:68:
dc:b6:e3:b2:7b:6d:76:32:3e:f1:51:7b:bd:e5:b7:57:6d:d4:
68:f5:b3:84:18:29:7f:a7:1f:9f:6f:04:3b:f8:7d:17:19:af:
8d:9f:b4:7f:e6:09:28:f0:16:88:a4:72:69:57:4e:8b:af:87:
69:33:60:fd:5d:f2:5b:df:ad:fd:b1:57:9f:78:6c:43:3b:2e:
ec:65:a1:47:c0:d6:31:e6:34:2c:dc:6d:44:72:54:46:f4:c7:
c4:11:73:e5:8d:76:c1:19:52:ae:79:23:42:05:4b:e0:b4:c6:
6e:c5:0f:11:8e:a6:55:f9:01:8c:04:bf:2d:f0:50:95:12:0c:
a4:5a:d2:87:b8:57:72:88:2d:cf:f1:05:c6:8f:99:af:5a:82:
af:d6:ae:4c:3d:e2:bb:c9:89:a7:b2:42:d0:0b:04:fc:4b:20:
4d:4a:2a:31:fd:f8:ee:d8:3a:de:3d:82:36:eb:62:d8:0d:6f:
0c:c9:7b:94:86:0d:9b:98:ab:25:5d:7b:29:91:0c:c0:31:63:
5c:44:07:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:07 2025 by rpki-client