Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/305e4f34-fd4b-39de-8f70-d7503ff8f6c9.roa
File: 305e4f34-fd4b-39de-8f70-d7503ff8f6c9.roa (raw, json)
Hash identifier: vS+IOFMk7xq1FAhkFL+NkAYpa8iazqWFM4eo7llqg9k=
Subject key identifier: 09:C0:EF:2C:49:3E:B7:BF:0C:54:8B:07:96:4E:08:F7:09:53:8F:CF
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AF8607B4B84B84E55CB620
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/305e4f34-fd4b-39de-8f70-d7503ff8f6c9.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 20115
IP address blocks: 174.85.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:86:07:b4:b8:4b:84:e5:5c:b6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=939e7267-5406-4772-af70-51f8e03fde55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bc:88:e4:af:a0:f6:c1:71:56:b4:be:a4:4b:
49:7d:15:f4:20:18:57:24:d3:81:ac:75:a2:4f:e4:
30:e2:3a:44:cc:da:49:d5:04:42:b1:a7:59:ad:ce:
c7:99:8e:00:74:34:6f:ff:15:a3:b5:53:d2:5f:2d:
a5:fb:4c:e8:24:52:e9:eb:65:a5:e8:b6:64:32:51:
83:75:4e:75:b0:fc:c1:88:d2:1d:88:80:dd:63:60:
0d:14:51:da:2f:3e:17:92:3f:eb:6e:8e:fe:93:55:
58:d0:d3:4b:9f:7b:2f:4f:73:26:ad:0f:0b:0e:8e:
3b:6f:43:46:68:bd:41:d9:f1:70:5f:0f:0f:bc:ad:
6b:00:a7:2e:87:4e:26:a8:47:fd:bc:52:4e:88:80:
4f:5d:d7:6d:10:42:b7:c7:c4:37:4b:5d:41:a7:6c:
c3:de:09:89:33:77:f1:d1:b3:90:79:24:a6:ee:ff:
01:e5:be:d3:da:5d:40:55:29:08:23:16:1a:59:c1:
33:83:a0:ed:6a:f4:7d:2f:02:8d:7e:c1:a8:7a:1d:
9c:8e:6e:e4:82:29:ba:60:c1:4f:75:1c:c9:57:a1:
47:5b:00:f2:ae:df:48:18:65:fc:fb:56:6c:0c:e9:
3e:e6:f7:c0:3a:91:7a:c6:56:bc:07:1a:dd:42:02:
88:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C0:EF:2C:49:3E:B7:BF:0C:54:8B:07:96:4E:08:F7:09:53:8F:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/305e4f34-fd4b-39de-8f70-d7503ff8f6c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
174.85.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:7f:27:16:14:41:0e:85:ee:f6:7c:45:86:18:aa:98:b0:fb:
17:b7:d8:13:10:45:94:3f:ea:d2:cd:07:c0:ce:00:13:1c:aa:
8a:35:1e:a3:2e:b1:4f:86:98:23:14:8a:3a:34:9d:4b:22:ac:
f9:0b:51:34:62:fc:62:19:d4:b3:14:b1:dc:e7:b0:97:42:38:
61:32:10:05:62:b7:9e:bf:4c:75:03:5d:04:53:e1:6a:aa:eb:
72:a0:46:9a:e2:c4:77:67:af:bf:11:28:f2:3b:85:25:89:5c:
ee:62:df:0c:31:07:cb:0b:94:48:58:ca:d8:6c:a1:ac:16:fe:
8e:53:f0:b5:3c:98:b7:a7:d6:a9:1a:90:dc:49:49:bc:3e:da:
4c:cc:c5:f1:34:db:e8:b9:cc:d1:0c:b6:2f:9a:c9:b5:57:bf:
ad:77:2b:b4:14:ea:be:c7:33:c3:bc:cc:d9:04:e2:2a:de:9a:
0d:be:ac:5b:3b:f5:06:5d:78:9a:2a:bc:b6:eb:ef:66:31:04:
8a:89:8f:47:f2:2f:11:a0:fe:ad:f2:34:19:15:f5:21:a0:8c:
60:3c:52:0f:8e:b9:b0:19:e4:16:ab:5f:01:ea:02:84:ea:b0:
fb:47:49:d5:f3:e0:3d:60:a2:bc:88:d2:18:ed:01:b1:26:8b:
82:de:8a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:18:31 2025 by rpki-client