Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/20daa57e-6e7f-3026-95b0-e7896bc91c38.roa
File: 20daa57e-6e7f-3026-95b0-e7896bc91c38.roa (raw, json)
Hash identifier: EecDjsDb6nfw9VTtvbBMAVSqP9dgaToU/z6Al17yXBY=
Subject key identifier: AA:22:97:05:6F:69:A1:37:E2:AC:8E:18:3C:49:3B:84:24:4F:E4:8B
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AFAED57B00944F5B637D80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/20daa57e-6e7f-3026-95b0-e7896bc91c38.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 20115
IP address blocks: 172.220.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:ae:d5:7b:00:94:4f:5b:63:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=54057406-bac4-4dbd-86b1-7a3a8cfaa067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4c:3a:aa:15:2c:df:0d:d7:45:cc:c3:01:44:
20:5b:14:34:a6:79:e4:7e:16:dd:57:6c:88:c1:c7:
d7:45:bf:c7:db:e5:93:f3:2b:66:da:ea:84:85:73:
4b:a3:57:87:a0:0d:44:c0:5b:1a:a0:b2:f7:f3:b2:
64:3a:82:2b:0a:7a:48:8c:91:ef:1b:cc:a8:3b:15:
47:0c:44:19:c3:2a:e9:a3:f8:6f:06:86:2f:74:e4:
ff:45:a0:2c:6d:9f:f0:2d:38:26:e5:d1:c1:44:23:
a7:7c:dd:e6:b3:1e:b0:e2:a0:aa:00:6d:ec:0d:f6:
d8:32:f4:44:cd:cc:e4:b0:2a:99:82:45:07:10:ae:
94:7e:b3:ab:8f:85:c0:6d:2d:d4:d9:0b:c8:21:96:
1e:d0:b5:3a:4e:60:88:87:38:b4:2f:c9:9d:3b:3d:
52:20:f4:d1:6a:31:f5:67:76:29:b6:55:0b:ad:a9:
81:8f:4b:c2:eb:6d:d4:6f:a3:5f:6e:5a:21:95:b1:
03:5f:9a:ab:21:fd:b6:76:7e:c9:d1:9c:a9:0f:2c:
10:30:fd:6d:85:1f:db:ea:1e:3d:2e:25:aa:4b:e6:
61:e1:70:98:10:28:d0:95:a2:cf:47:a3:38:7f:4d:
f9:39:c6:76:12:c7:d7:3d:ad:0e:2d:ff:c9:3b:ef:
6a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:22:97:05:6F:69:A1:37:E2:AC:8E:18:3C:49:3B:84:24:4F:E4:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/20daa57e-6e7f-3026-95b0-e7896bc91c38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
172.220.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:16:cc:3c:d0:14:b3:ca:6f:c6:b0:4f:66:a5:ca:66:98:8c:
df:a0:8e:55:3e:b7:b2:39:ad:ce:67:b8:0e:03:f0:d6:a9:41:
d6:18:f1:ae:9c:d6:34:83:d8:48:56:29:50:df:e6:50:a5:c7:
86:74:7f:67:4a:a2:df:af:58:17:58:f5:6b:59:d1:cb:d3:23:
d4:81:9c:3e:54:6e:73:60:f0:51:ed:ed:6a:c8:b8:67:2e:f8:
a5:85:92:76:b9:35:88:89:2f:08:9a:a7:aa:f0:c1:11:09:f1:
ad:77:01:85:4b:1a:41:20:d6:87:ad:8c:62:d8:82:22:51:db:
f6:67:bd:8a:08:d9:fe:2d:49:32:41:f1:f9:ae:67:ef:e7:64:
1d:bc:90:06:1c:7e:20:ec:85:4c:c8:82:97:97:ba:c0:a2:94:
57:ea:d9:79:6a:f9:30:bd:f6:c5:75:39:69:bc:4d:16:dd:1a:
6b:87:84:ff:5e:bf:09:0f:1c:a4:17:04:c2:7f:55:cb:36:3e:
6c:2e:a7:2c:de:6a:0d:ab:02:18:b5:94:2b:4a:05:19:15:90:
c3:c5:7a:ff:1f:3e:25:e7:72:46:c6:f3:67:77:53:ce:8a:02:
dd:93:d4:3b:cd:5b:d6:09:53:04:06:01:33:05:b8:09:0b:f7:
c3:2a:f5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:15:36 2025 by rpki-client