Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/db27ee2f-5246-3216-9f6a-ff5fd108b580.roa
File: db27ee2f-5246-3216-9f6a-ff5fd108b580.roa (raw, json)
Hash identifier: rSj4UhNhyDtONgSAs4RVLY/ONMW81WprhrGx3wNErAE=
Subject key identifier: D8:53:4F:E8:04:CF:1B:C6:FC:00:4F:CF:E6:D1:10:3D:9E:E6:FF:6C
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F43285848E0068C9E6601BBF97EE04D00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/db27ee2f-5246-3216-9f6a-ff5fd108b580.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 33363
IP address blocks: 71.44.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:8c:9e:66:01:bb:f9:7e:e0:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=bb456c0b-e1f7-4725-887d-33f0227a6c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9f:21:00:70:fa:78:6b:7a:6e:41:0d:94:25:
53:7a:86:8c:fb:26:fe:7d:d9:74:17:ed:1d:fa:96:
c6:b7:5c:d0:00:8c:68:7d:58:87:68:fd:97:b6:ff:
ed:1f:aa:95:9f:10:3c:d7:ef:a8:78:7a:2b:aa:8c:
a4:0a:c0:00:8a:61:76:9f:5e:22:39:eb:9d:85:82:
29:39:96:23:f8:90:6f:d7:8f:96:80:bc:12:30:de:
ed:0d:6f:fa:e2:97:ec:e0:74:32:b5:2d:f0:b8:16:
c8:ff:b9:1f:3e:7c:30:36:7f:04:fb:3d:e9:5b:27:
73:18:66:6c:81:08:55:f2:3b:8f:b3:f1:bb:ec:8d:
71:c7:5f:82:45:3d:aa:a2:5e:21:12:3e:09:8b:9e:
ea:10:c8:7e:70:25:41:9b:84:85:87:ad:a8:d7:b5:
11:c3:49:98:5c:dc:c9:d8:5b:0f:24:df:f6:ab:42:
e8:83:5c:ee:99:c9:ef:61:56:af:b0:9f:d8:a2:7d:
88:cc:04:90:4b:46:8c:d2:3c:df:06:e7:f3:51:13:
2d:1d:a2:c9:50:ec:14:d8:ec:2a:12:cb:39:24:23:
5d:02:76:23:f4:1c:07:8c:26:9a:9c:eb:7c:9b:f8:
2b:a0:47:54:58:27:e9:49:46:d7:4f:17:45:04:f5:
25:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:53:4F:E8:04:CF:1B:C6:FC:00:4F:CF:E6:D1:10:3D:9E:E6:FF:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/db27ee2f-5246-3216-9f6a-ff5fd108b580.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
71.44.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:cd:0a:1a:a2:23:fd:3f:ae:a6:37:7a:3c:05:31:ce:49:35:
22:12:2c:4f:36:5d:3e:37:98:ef:c7:05:08:cb:67:0b:49:73:
24:c1:6b:7b:70:cc:ed:d7:f8:ff:7d:a8:c9:53:8e:26:85:94:
9b:9c:8a:4d:75:01:c9:41:59:b4:1d:19:c8:cc:8d:28:cf:9c:
b3:1a:11:ef:44:71:f7:ed:77:85:1d:27:03:35:2c:41:53:d1:
27:70:b3:6d:47:4b:5e:0e:8d:28:fd:aa:29:4e:04:64:35:e5:
09:1c:c9:43:49:5f:93:d3:07:1e:c3:78:eb:db:22:3d:7d:30:
46:29:ce:2a:f2:37:56:cc:eb:11:ba:62:30:ab:a1:6a:25:17:
25:ff:d4:2c:d4:67:59:49:7a:84:e2:77:89:49:15:e3:5b:73:
e5:65:29:87:63:41:0d:e8:c0:bf:39:21:91:6d:3a:99:52:cf:
cf:04:f8:8a:8f:89:52:ce:72:c0:69:56:27:4c:8c:5d:fc:2a:
ad:07:fc:ae:c8:ad:98:0a:09:5f:eb:b9:e3:a1:81:7e:3c:09:
ee:72:37:1c:09:db:fe:d1:db:73:8f:8f:52:f1:cd:e4:81:33:
71:36:31:32:69:e7:59:02:4b:5f:94:ee:e3:e4:7a:58:7c:7b:
ac:1b:13:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:49:58 2025 by rpki-client