Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a5e0fed5-af06-3fda-9888-efbccbcbd4b7.roa
File: a5e0fed5-af06-3fda-9888-efbccbcbd4b7.roa (raw, json)
Hash identifier: MdeMjN4gRnpEmU0DGqpi57Jed6XvxcwEIOGHzSGEyWw=
Subject key identifier: 20:BC:64:3F:7F:A6:9C:11:2D:0A:46:AF:37:26:05:FE:7F:93:AD:69
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F43285848E006895FE47EB2F54F67EC00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a5e0fed5-af06-3fda-9888-efbccbcbd4b7.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 172.220.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:89:5f:e4:7e:b2:f5:4f:67:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=e8c9509a-d860-45f5-bce9-27d785dd7849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:92:a7:0e:a7:40:bb:dd:5f:15:62:f9:4a:d3:
75:c7:67:01:6a:86:f5:7f:15:fe:95:35:b4:5b:2f:
74:c7:72:f8:12:e1:2b:16:9f:dd:d6:ad:f6:ce:99:
41:59:c0:e5:d8:a8:85:e8:11:4b:73:16:e3:86:ef:
2e:73:01:80:43:22:66:f0:14:a4:c7:d6:af:c5:69:
58:be:40:a3:0d:ca:46:fe:05:8a:7a:a6:ef:6c:80:
48:61:03:1a:71:b8:2c:6c:a4:f0:db:ba:48:a2:60:
55:98:19:b9:36:41:e1:f3:72:ca:8c:35:de:8f:e2:
d3:45:d4:ec:bb:84:e1:00:8b:b3:7b:fc:8a:d6:02:
65:a1:26:64:54:20:48:53:2f:00:a6:ac:e2:21:a0:
98:dd:f4:9f:b6:6c:67:47:6d:93:2f:db:1f:db:33:
2c:30:b6:fb:23:ae:22:f9:4c:c5:99:01:a9:c5:17:
71:64:5b:53:b9:da:2c:75:c7:1a:dd:ba:28:87:da:
0e:21:dc:e2:86:c8:44:78:8c:58:80:96:45:4e:06:
5d:ab:63:b4:5b:16:c5:41:27:cb:0a:bc:9c:97:a5:
ee:58:88:44:82:a4:c0:02:2a:74:3e:b0:4c:e3:71:
9f:49:32:89:00:38:71:f7:82:12:37:5a:47:fe:88:
54:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BC:64:3F:7F:A6:9C:11:2D:0A:46:AF:37:26:05:FE:7F:93:AD:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a5e0fed5-af06-3fda-9888-efbccbcbd4b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
172.220.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:30:53:2b:7d:a1:33:3e:c1:d7:86:b9:6b:bd:e9:c1:40:fc:
46:8c:fd:e0:12:72:e9:c4:23:67:43:d3:aa:18:41:2a:c3:9e:
d5:97:0f:bb:fd:b0:56:42:dc:4e:8e:aa:66:8b:ef:8a:04:16:
b9:2e:0e:84:a4:d9:1a:57:51:67:a1:33:36:5a:5b:1d:29:08:
c8:f1:26:8b:98:9a:68:7a:42:9b:e5:c9:a8:49:fd:5a:f3:86:
b2:72:94:7e:61:ae:18:ae:b9:b8:7d:43:a2:b5:dd:3d:d8:09:
9a:e4:b5:31:86:6d:7b:c6:9c:e0:92:14:94:c0:e8:45:00:ad:
7b:cd:dc:bf:6e:69:f6:7b:f2:89:4d:60:eb:88:f0:0f:3c:8c:
61:be:26:27:c0:28:3b:22:dd:bd:14:49:c4:a5:09:20:e9:20:
5d:b8:93:89:e1:a6:df:bb:4d:9f:32:af:b6:e9:f1:32:42:80:
06:f6:be:0a:03:fe:7f:4f:5f:7c:3c:e7:8d:1c:10:d4:ab:2f:
4b:73:86:8c:1c:fe:97:23:6f:3c:29:0c:70:43:dd:dd:65:cf:
fd:9c:0b:b0:4f:e1:2f:54:02:d8:e2:1a:cc:1e:38:32:fd:e3:
79:e6:3c:eb:57:c8:88:b1:82:43:17:c0:e6:1f:f5:d4:79:15:
00:61:d2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:47:53 2025 by rpki-client