Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/755a8dc3-3cd7-3e8c-82da-5405f1993ac1.roa
File: 755a8dc3-3cd7-3e8c-82da-5405f1993ac1.roa (raw, json)
Hash identifier: Ap+Wc/ofzu456pNaXQ//Kbn5uV2mJg8QkCgcKDempU8=
Subject key identifier: 25:A0:2B:EC:71:EC:35:7B:12:C7:B9:75:B0:5C:18:11:F0:63:A0:31
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F43285848E006896F991F91923D499060
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/755a8dc3-3cd7-3e8c-82da-5405f1993ac1.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 172.221.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:89:6f:99:1f:91:92:3d:49:90:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=df73cec2-b366-48d0-9549-799d3740e273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:ba:6d:5b:06:ae:df:78:ae:ce:95:c7:a1:
84:12:05:b1:e0:90:dc:0e:c5:69:87:8c:5f:dc:9a:
83:18:ef:69:c9:02:4f:f1:5b:a4:24:f3:60:1c:de:
9d:5e:16:4c:4f:85:f3:c2:d5:28:ab:34:3f:3f:e6:
4c:8a:1a:e1:1d:73:1b:62:31:da:14:91:c0:5b:0b:
12:c1:79:2b:26:67:af:d9:b6:b2:1e:b9:2d:7e:66:
dd:b2:23:03:ec:a5:73:ba:f8:f7:08:8a:3b:ff:2b:
bf:2e:49:8b:20:c7:62:ab:32:3b:21:13:33:b8:24:
bc:09:b7:e9:b6:af:e1:01:30:3b:d3:8f:e5:57:05:
97:7a:42:a8:b0:f7:99:be:ee:d3:c2:77:07:69:34:
a0:6b:96:e6:31:b0:4a:15:3d:61:4c:b1:70:58:27:
02:cb:6d:f3:fe:ac:f0:77:dc:92:3e:36:12:9c:bb:
7f:12:6f:81:a1:fe:11:97:39:10:ed:11:aa:40:f2:
f1:33:1c:af:c8:4e:96:2a:26:fc:a2:04:69:0e:8d:
c3:40:65:c9:73:8f:90:4b:fe:76:8d:56:6b:8d:4b:
b2:6b:8a:7d:df:a3:89:59:01:96:48:df:ab:13:23:
b0:f4:c2:d4:c8:04:b8:75:96:0b:64:11:e2:1b:c7:
d3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A0:2B:EC:71:EC:35:7B:12:C7:B9:75:B0:5C:18:11:F0:63:A0:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/755a8dc3-3cd7-3e8c-82da-5405f1993ac1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
172.221.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:da:80:a6:f3:0f:82:a2:04:62:61:ca:34:5e:41:63:49:41:
51:2e:fb:c2:8f:e0:df:4a:db:d7:17:db:b1:a8:f9:e2:a7:de:
38:be:f6:0c:64:ed:e5:81:14:6e:fa:85:a5:67:fd:76:6e:86:
90:15:ed:32:01:b8:b9:d8:84:2a:60:3a:6b:23:0b:23:67:e1:
d0:10:88:69:f3:7f:b0:45:59:e1:0a:ff:98:21:9f:c6:9c:98:
f4:a5:87:19:ab:46:57:51:69:dd:59:8d:3e:19:ae:53:08:b2:
58:8c:d2:ad:ba:77:e4:d7:17:bc:c8:95:57:e2:f1:40:61:09:
29:ff:a2:e4:6a:75:2a:98:e8:bf:08:71:83:bb:70:03:86:03:
e4:47:dc:88:33:f5:18:c3:6e:62:2a:9d:d3:9e:e7:11:2a:97:
0e:79:db:06:73:aa:40:af:26:e2:c0:37:a2:4c:85:ed:c5:b9:
4a:9b:4e:17:b0:d5:c1:0f:c7:60:3e:60:dd:83:71:b1:20:7c:
6d:f7:7d:a3:32:e6:a8:98:26:6e:0b:63:64:ae:38:9c:85:a8:
41:13:98:9e:e2:da:0a:fc:eb:9d:b5:c9:e5:7a:da:b9:da:8e:
cc:33:6a:44:fb:5d:31:3b:9f:0d:dc:59:3b:98:58:cd:0e:92:
00:00:39:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:42:41 2025 by rpki-client