Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dd5b6d5f-6fd5-32ed-bc55-4c3041f57853.roa
File: dd5b6d5f-6fd5-32ed-bc55-4c3041f57853.roa (raw, json)
Hash identifier: c1AdJGevZ4f0ko6JPeIg9L+Q/Vbrf9ZnlVflXMsCIbY=
Subject key identifier: C7:DA:72:5B:7A:CB:DE:9F:64:76:82:5F:98:3E:83:7C:04:F2:91:46
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F43285838398CA41783F6C00F6E42C580
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dd5b6d5f-6fd5-32ed-bc55-4c3041f57853.roa
Signing time: Thu 10 Dec 2020 05:00:00 +0000
ROA not before: Thu 10 Dec 2020 05:00:00 +0000
ROA not after: Thu 03 Dec 2026 05:00:00 +0000
asID: 20115
IP address blocks: 172.221.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:39:8c:a4:17:83:f6:c0:0f:6e:42:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Dec 10 05:00:00 2020 GMT
Not After : Dec 3 05:00:00 2026 GMT
Subject: CN=b373e569-63cd-4cfa-ac14-a04511f0700c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:98:46:74:a8:4c:2c:da:0f:a6:aa:bc:88:
98:36:08:a7:95:44:09:db:48:ab:df:c2:57:dd:f8:
75:61:26:fd:5c:3a:34:b1:28:92:cc:6b:d7:b5:a4:
5d:ff:a2:f8:3b:e1:df:31:b1:a3:bb:58:86:76:fb:
77:4d:e9:bd:9d:61:5a:12:fc:40:3e:80:10:70:b6:
a9:a3:69:d5:86:45:55:ab:25:bb:16:33:89:56:73:
e1:7f:e1:9f:19:d6:b7:50:79:3f:60:be:c0:12:9f:
52:4a:10:6e:7a:b2:0d:22:9e:96:a9:b3:59:1d:8a:
fd:f4:e5:4b:cf:59:37:fe:60:71:54:4c:46:78:6c:
53:d8:15:73:50:2a:b8:80:11:11:61:32:8d:dc:8a:
27:18:34:10:70:1d:66:28:67:ee:1f:d4:41:a4:b1:
1d:8b:6e:32:56:6d:d4:09:bb:08:49:bb:11:df:8f:
90:ec:a6:2e:09:5b:0b:c5:e4:0c:f4:92:1f:93:b2:
89:c8:f6:1c:25:d7:6c:08:62:61:eb:61:4b:b9:0e:
12:11:8f:19:4a:4a:83:06:05:df:a1:8e:96:dc:53:
12:a8:6a:0e:27:ca:4e:07:47:52:30:9b:61:5a:7b:
d0:1a:ad:d7:ab:b4:b9:ac:68:40:88:3e:f3:79:35:
84:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DA:72:5B:7A:CB:DE:9F:64:76:82:5F:98:3E:83:7C:04:F2:91:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dd5b6d5f-6fd5-32ed-bc55-4c3041f57853.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
172.221.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:44:c0:3b:5d:e2:7f:3e:6b:83:7d:e5:60:92:be:7d:a4:78:
ab:69:d6:0c:51:36:bb:d2:52:0f:8a:60:b6:3e:4f:b2:7f:d6:
de:74:74:e9:97:40:61:94:ef:30:c1:a7:fa:38:ed:c3:ad:89:
b7:1d:35:82:c7:4a:e5:87:f4:f8:14:5d:06:af:66:15:e5:78:
2a:32:18:4e:31:b5:f2:6f:f8:78:69:e0:71:70:5f:ea:f2:14:
1e:f8:9b:bb:2c:13:9d:10:92:4f:b3:43:b7:a7:5b:fe:fc:b4:
1d:d4:1d:b1:bc:6e:90:59:23:9f:fe:a4:1b:eb:d0:aa:5d:29:
1a:f8:8f:8f:db:a2:67:49:d8:9f:e9:95:14:0c:19:49:44:3f:
cb:f4:27:55:12:ba:80:e0:1d:ce:9c:ca:e2:0c:a0:2b:79:9d:
90:f1:9f:7a:bd:e8:35:e4:5a:22:9a:bd:cd:e1:aa:3d:8e:ce:
5f:67:79:9a:ed:e1:b2:45:af:f8:25:72:89:1d:75:26:0d:97:
87:f5:49:d1:dd:29:62:aa:b4:3d:b4:79:7f:e7:34:36:a3:89:
bf:36:9f:0d:50:0a:10:75:b5:1f:80:88:fa:e9:e4:c3:c6:01:
e8:b9:a8:50:65:ef:ec:38:6e:1c:3d:68:ef:b0:c0:37:8d:37:
d1:c0:bd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:44:10 2025 by rpki-client