Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bbf73244-bc3a-3aa9-9626-ccc8a0b277b5.roa
File: bbf73244-bc3a-3aa9-9626-ccc8a0b277b5.roa (raw, json)
Hash identifier: ta2X096dM2hEINfkR7CtFzKKQx6PvfiZLNvo+VEoYTk=
Subject key identifier: 16:FC:31:45:6E:21:1F:D2:17:D0:78:A6:91:99:E9:E5:6F:8C:21:BE
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F43285848E0068C1F85D4FF3197B1A610
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bbf73244-bc3a-3aa9-9626-ccc8a0b277b5.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 33363
IP address blocks: 97.71.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:8c:1f:85:d4:ff:31:97:b1:a6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=252e0d8a-5c99-4509-8290-c6f1873655de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:15:bc:ca:9b:35:0d:c9:df:2d:8e:f5:3c:1e:
fb:71:40:b2:9d:2a:07:f1:08:d1:56:f0:13:22:ce:
0f:29:93:94:c5:45:87:9b:0f:6f:17:26:54:ef:e3:
22:60:36:fd:de:a6:2f:41:0c:88:09:da:e7:d0:5d:
d6:83:91:c6:38:28:33:42:a3:3f:a2:ec:2f:4b:81:
48:ba:22:d6:4f:62:8f:97:57:1f:a3:d8:0f:33:0a:
dc:0e:52:20:30:77:c4:db:62:35:ad:23:1c:99:19:
20:73:14:4b:1b:9d:90:05:c2:de:06:2e:e2:bb:3c:
63:ed:39:f5:8c:24:9d:78:49:f4:17:f0:25:35:a5:
81:be:b6:bc:ce:e7:a1:98:b3:08:e3:12:62:02:72:
b1:cc:6f:96:da:bf:c4:38:84:5c:20:a8:97:55:98:
7b:18:5a:3a:25:6d:1d:8d:bb:f3:2e:7a:9e:1c:92:
98:f3:75:99:f1:c0:5d:37:3f:fd:9f:51:67:b7:2b:
22:08:f6:91:ef:9d:64:91:d1:69:82:e9:10:8c:d7:
56:7b:c8:11:1d:4c:74:65:42:b1:46:3f:e5:58:e3:
97:fd:8d:a8:67:95:5f:2f:86:31:67:e6:de:06:a4:
3f:6c:e1:54:eb:9a:66:28:4d:ce:db:88:80:73:e7:
cc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FC:31:45:6E:21:1F:D2:17:D0:78:A6:91:99:E9:E5:6F:8C:21:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bbf73244-bc3a-3aa9-9626-ccc8a0b277b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
97.71.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:e1:49:51:3e:96:bf:45:61:b6:3f:83:99:25:8f:ba:9b:a8:
ef:f0:a2:c8:28:6d:67:63:19:bc:41:df:05:d0:ca:e5:cb:8c:
77:d0:f9:3a:68:81:20:b5:ce:e8:6f:92:32:fc:db:d6:26:4c:
3b:4c:3c:b8:27:46:27:cc:a5:e7:c8:32:a8:b1:e4:bc:6f:6e:
58:5c:de:1a:a8:d0:1d:57:e1:8e:e0:0a:55:19:8b:91:ea:29:
96:1c:69:c1:28:1b:6d:ff:c3:59:3c:26:00:0b:c3:9b:3a:ea:
05:76:ea:02:1b:4f:99:cc:11:bd:c9:96:5b:f5:be:4b:55:13:
e0:63:a5:cf:ef:ba:e4:8e:bf:87:6f:29:cf:44:29:a3:8c:ec:
b3:cf:8d:3a:ff:fe:0c:81:60:49:ea:fa:84:6a:ab:67:1d:29:
54:b1:bf:f3:ea:59:c4:dc:ec:38:8e:91:00:13:73:29:60:dc:
e1:08:0b:8c:c3:d0:a4:e3:2b:dd:ab:ac:cd:1c:2e:9a:31:e4:
0d:8c:e3:3c:37:b2:6f:e7:f2:5e:42:97:49:b6:2a:41:ba:0f:
90:f1:76:0b:22:71:26:53:31:43:a7:6e:d7:a6:1f:06:34:66:
2a:f6:2e:1d:d2:5e:a6:33:52:ac:59:21:4c:84:cc:e0:e5:69:
42:12:f9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:12:42 2025 by rpki-client