Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fae63bb1-9f56-3692-8efd-d1a8bdd550d5.roa
File: fae63bb1-9f56-3692-8efd-d1a8bdd550d5.roa (raw, json)
Hash identifier: 9MlVaKToU3kfQ734gA9mZgE9FmYlcYDBqpx4b5CTqVQ=
Subject key identifier: 09:3C:85:D0:C8:6E:7B:F2:90:F5:87:9F:5C:BA:31:5C:E5:EA:F5:97
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F43285848E00666D6CA29B6FD71A76180
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fae63bb1-9f56-3692-8efd-d1a8bdd550d5.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 33363
IP address blocks: 71.46.184.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:66:d6:ca:29:b6:fd:71:a7:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=9230be31-a9b6-46dc-ab9b-25ffe588e493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d9:4a:42:31:2e:8a:70:35:7a:f3:9d:7a:7e:
42:01:45:17:ff:fd:f8:cb:1a:15:8f:9c:13:41:15:
4b:59:bf:d4:40:83:4d:3d:53:40:d7:35:58:be:d9:
31:75:1d:5b:33:19:25:71:2a:b7:ed:f2:51:f6:d8:
4c:5d:33:be:8b:f4:f5:62:80:6c:ca:69:32:88:c1:
a7:22:a6:85:8e:0c:55:65:1b:a0:9c:29:f8:41:65:
90:65:3c:74:78:c7:79:4d:97:7c:10:ae:6b:e0:50:
21:02:17:28:b7:84:dd:e9:43:a2:66:53:78:34:03:
a1:a3:74:77:49:5d:b4:9d:4f:c2:bd:7b:88:95:44:
6e:1d:f3:f5:3c:db:4c:3e:65:c3:68:36:a7:23:f1:
fe:da:f0:86:0d:6f:96:81:d6:b4:14:dd:2c:55:38:
52:2d:8a:be:b9:67:45:f5:1f:58:05:af:74:66:28:
32:da:1d:e7:db:66:c9:c3:3a:39:86:49:41:a7:2c:
e7:3b:4e:0b:77:27:27:47:24:a8:f3:fd:73:2d:2b:
39:c9:40:86:2d:ef:ed:87:83:8a:88:99:17:77:1c:
b3:d4:40:f2:ec:a8:f0:4c:88:09:ba:93:ba:ba:0d:
8c:a6:10:04:0e:ec:2f:71:56:c8:47:df:44:84:32:
ad:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3C:85:D0:C8:6E:7B:F2:90:F5:87:9F:5C:BA:31:5C:E5:EA:F5:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fae63bb1-9f56-3692-8efd-d1a8bdd550d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
71.46.184.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:3f:c7:2d:bf:d6:8d:8a:74:66:b6:82:1d:82:3d:b0:c6:90:
d5:93:01:f8:2d:f2:f4:d9:17:18:4e:ca:3a:85:8a:33:cb:89:
3b:01:a2:d5:3e:39:d2:01:df:70:bc:3c:a7:84:5a:63:93:15:
d8:fd:3c:57:a0:56:67:bc:e3:97:d3:02:70:90:4c:5d:17:6f:
ac:6b:3d:7e:e9:20:bb:dc:d7:79:51:74:c0:cc:2b:30:28:2d:
ea:3e:93:df:a5:61:d5:9a:dc:34:e3:92:07:2d:87:eb:d7:14:
10:99:b8:29:b4:77:37:03:8d:f4:09:fa:7c:90:ff:26:8c:55:
c5:19:a6:90:6e:4b:03:33:dc:52:0a:ab:f3:9f:18:76:82:79:
69:c9:82:2f:e1:51:f2:c0:cb:8b:18:92:71:9e:a4:b7:59:2a:
19:e5:6b:37:21:3b:60:33:be:0c:a1:42:0d:07:9b:f1:35:e1:
c1:e0:b6:95:f9:eb:a6:aa:ad:25:ab:d1:2f:c3:e1:07:93:7d:
28:8d:a9:34:bb:9a:72:17:6b:b1:53:cc:5c:c3:c2:3e:ae:f7:
a0:15:62:0b:bf:fb:a3:1f:60:b1:b3:bb:94:f3:70:66:b7:65:
d5:de:9a:a7:15:99:c1:b6:6f:fb:0c:c0:f2:75:f6:2f:aa:d1:
6a:d9:ca:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:45:52 2025 by rpki-client