Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a4f11fc9-3a63-3932-bf34-f7d6ef3c90b8.roa
File: a4f11fc9-3a63-3932-bf34-f7d6ef3c90b8.roa (raw, json)
Hash identifier: oLh3zgDJ/riyHor/w0vwdnABnSp6fTAQ/bGNSey0YQs=
Subject key identifier: 4E:29:08:68:D7:4B:4F:22:22:47:5E:DC:69:EC:C7:75:34:6E:AB:8D
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F43285848E006918BE1E6906BCA0C1000
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a4f11fc9-3a63-3932-bf34-f7d6ef3c90b8.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 33363
IP address blocks: 71.44.102.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:91:8b:e1:e6:90:6b:ca:0c:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=57225e2d-cb4c-45ac-9739-30154035f3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:1c:69:91:3a:6b:e2:50:e1:b0:a6:95:6a:
b4:96:6d:c8:a3:dd:c3:08:72:58:94:f2:34:e1:2c:
17:a7:ff:6d:52:6e:7e:06:7f:e4:a5:9d:b7:5d:29:
da:25:ce:cf:ca:8b:c2:b6:1c:28:df:7f:ca:f1:0c:
fc:7b:40:63:b4:72:30:f4:57:d8:f8:de:ce:7d:de:
b6:9b:32:ff:74:87:72:2e:22:a8:59:5e:25:a5:d0:
7f:ae:ad:68:b4:f8:18:99:50:53:f5:41:40:7c:db:
2d:da:22:27:fe:a4:59:44:16:d6:70:b2:4b:79:ce:
e1:8f:9a:86:97:c6:af:4e:67:df:2c:5a:ea:92:89:
3c:38:61:2f:44:3e:2b:ac:c5:66:32:f1:b3:15:94:
e4:9d:bb:6c:1e:d4:4c:b7:74:04:e5:26:f9:ea:25:
07:da:ca:88:30:3c:f1:ec:8f:10:75:43:5e:43:a1:
d5:87:58:44:07:42:41:d4:74:b1:de:55:c5:50:61:
93:e3:e0:92:d4:98:99:5c:f0:30:db:d2:08:06:21:
d9:fc:8f:9c:20:0d:53:8e:8f:b1:9c:05:7c:a1:91:
82:78:0b:75:b6:e4:59:9c:1c:a0:ad:1e:02:df:19:
c2:6d:7a:36:65:5e:48:4c:f4:48:fe:a9:20:85:b6:
b3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:29:08:68:D7:4B:4F:22:22:47:5E:DC:69:EC:C7:75:34:6E:AB:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a4f11fc9-3a63-3932-bf34-f7d6ef3c90b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
71.44.102.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:50:42:cc:65:70:31:96:33:9a:1f:eb:24:d1:fd:71:7f:f4:
a4:97:92:ed:59:9c:86:70:aa:24:05:6d:c1:20:64:62:85:fb:
dd:3a:5d:76:cc:8e:f2:72:b8:1c:95:88:5b:a4:fb:8b:bb:64:
21:45:1a:33:e0:6a:69:34:16:f9:7b:a2:f4:fd:6e:be:79:48:
3a:12:d6:ae:d9:69:d0:ee:3e:57:89:cd:a6:69:36:b1:db:86:
c6:6b:75:25:3e:2a:7a:3d:3d:c2:bb:09:fd:cf:48:06:4e:6d:
da:f7:34:ab:a6:83:67:22:31:5a:4a:8e:9f:75:4e:f8:b9:33:
db:29:41:3c:49:3c:d9:f8:c2:a6:b9:3d:04:76:7b:b9:6c:2b:
ed:1d:d9:a5:2a:01:5a:67:94:50:be:51:15:5d:65:84:41:33:
9b:33:f6:47:41:c0:ab:e5:67:3a:fd:8c:ac:55:0a:29:49:5f:
c8:a2:df:7f:e6:25:36:63:44:1d:71:72:ec:b4:77:cc:14:59:
ca:ab:49:ca:d8:0d:a6:3d:e8:36:75:f0:51:07:0f:d3:07:3a:
0b:3e:32:66:38:3f:ef:8a:9d:70:b1:02:43:b3:af:d2:c1:32:
c5:9c:c1:16:21:78:73:5d:8c:ae:a8:67:a7:fb:ae:51:1d:a5:
d8:4c:06:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:42:39 2025 by rpki-client