Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b8e7b7b8-3ccf-3db8-8b83-1993b0dc718b.roa
File: b8e7b7b8-3ccf-3db8-8b83-1993b0dc718b.roa (raw, json)
Hash identifier: o1HkAvIeGhBvdlgcaR0jEZbdg+9ljmZxSU1NyB6ihNk=
Subject key identifier: 68:4B:47:96:0F:8F:98:0E:26:ED:CD:D1:90:3D:D3:7C:C3:A9:35:66
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F43285848E006898DF9496AAD23ACB6C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b8e7b7b8-3ccf-3db8-8b83-1993b0dc718b.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 172.221.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:89:8d:f9:49:6a:ad:23:ac:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=d89a53b7-5e71-4ad1-b6df-0ca34a7e8655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2f:1f:14:2f:b9:04:3f:09:22:d9:8b:50:09:
c0:a8:4b:52:24:1e:92:b1:ac:93:4f:33:cf:e9:21:
4c:4e:da:c9:6d:b1:14:b2:a2:dc:14:47:cb:96:a8:
77:f0:13:35:1f:72:4a:76:b7:03:ba:23:c0:4e:25:
e9:8e:6f:e8:97:30:aa:55:92:95:d7:b3:2a:d6:98:
a6:fc:d7:1e:4b:67:a8:84:bb:f3:49:10:eb:cb:ff:
c8:50:4b:69:d3:13:ee:3b:36:36:64:96:33:d1:43:
e4:43:90:05:1a:87:ef:de:e6:64:a4:3e:06:98:b3:
01:e5:08:0e:34:c7:f8:e3:6d:af:26:2b:22:88:c8:
88:4e:1b:e8:fd:6e:0c:5b:a9:b2:fc:81:ba:af:4c:
44:26:06:8f:8e:0e:1b:40:e8:6b:07:71:bf:23:53:
b7:01:54:60:53:04:a7:40:f2:ab:a9:39:9f:36:dc:
94:2d:de:4e:04:fd:31:ba:79:d1:b0:7d:88:87:73:
15:2a:a9:c6:8b:38:2e:1a:66:a8:1e:35:d3:cf:8c:
de:2f:6f:9e:de:17:fe:b5:ab:c0:9f:e1:f5:d4:5f:
11:3b:e8:6a:13:8d:e4:b7:66:27:6b:60:bf:89:4b:
b4:fb:64:3a:6e:aa:e9:e3:2f:c7:3e:db:bf:36:b4:
d3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4B:47:96:0F:8F:98:0E:26:ED:CD:D1:90:3D:D3:7C:C3:A9:35:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b8e7b7b8-3ccf-3db8-8b83-1993b0dc718b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
172.221.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:47:fc:f0:fc:7a:63:e2:2b:55:22:ca:df:5d:25:b3:7e:db:
c6:59:c8:ed:17:ed:a9:61:be:03:af:bd:49:18:13:62:56:87:
d5:ad:57:9c:1d:88:0d:1b:52:83:97:36:b3:fe:80:4f:e8:38:
85:9f:8c:f5:38:d4:3b:91:a4:c9:61:fc:69:b2:95:ce:ed:b9:
26:97:19:21:7f:d5:8d:d3:00:52:73:7d:4e:02:65:7d:a5:2c:
c4:7e:50:37:97:b0:16:fa:99:ba:c5:b4:9a:8f:2d:52:50:2a:
ae:4a:31:4d:2d:cc:55:53:ff:98:60:11:b7:f0:8e:6f:37:54:
df:06:a3:ec:58:d9:80:3b:4b:3f:94:b7:f7:6b:38:12:f2:ab:
62:8d:be:f4:2b:87:3c:e8:52:b9:9a:93:db:93:cb:f6:fd:f5:
3e:b6:d0:fd:ba:31:26:19:fb:2a:30:ca:d2:2b:7e:ac:b5:07:
26:99:17:cc:64:67:89:90:6a:d3:67:9d:53:12:de:54:f9:a8:
a4:bc:b6:7b:86:0b:aa:2c:d7:8c:5e:ce:e5:46:c5:b5:d2:1a:
7f:6c:6d:0c:e6:45:d2:73:4f:0a:36:83:00:72:65:a9:42:0a:
7a:a2:9f:b7:07:9d:5f:be:28:ef:88:59:45:9c:11:c1:c4:65:
83:aa:aa:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:40 2025 by rpki-client