Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3c14bf1e-f46e-38cd-9d06-8e2b77fb1c06.roa
File: 3c14bf1e-f46e-38cd-9d06-8e2b77fb1c06.roa (raw, json)
Hash identifier: yWpbGquEQrxRomNFAh+dfFaC9vzV8u+eukPPq1fFs+A=
Subject key identifier: 68:08:B5:BC:0C:49:AE:26:E5:2A:BA:F6:2A:22:2A:C2:FF:2F:DF:DC
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AFB373CB590485AA3BD8C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3c14bf1e-f46e-38cd-9d06-8e2b77fb1c06.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 33363
IP address blocks: 71.44.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:b3:73:cb:59:04:85:aa:3b:d8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=aaebeefd-3c4f-4d59-902e-bad0365c51c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:45:96:2c:6e:04:fa:ac:1b:1b:2a:a1:4a:59:
c5:59:c9:77:d6:44:16:51:f9:4c:f0:62:06:6d:9a:
8d:76:0d:49:4e:8b:4c:b9:b6:8a:5c:4b:2f:02:4b:
f4:6d:55:02:f0:db:fc:e0:02:73:c5:1e:05:78:50:
c7:15:65:66:16:06:f4:7c:3e:62:3e:e5:99:1b:e3:
9e:65:c7:02:d0:61:98:28:06:65:4a:01:c8:3f:7c:
36:7b:a5:25:c1:21:97:c1:d4:db:e6:ee:dc:12:b9:
28:a2:c1:9e:ca:cb:12:b7:37:c8:09:97:34:fe:4f:
76:92:31:b1:40:4b:af:f3:87:37:15:93:c9:e3:d6:
96:aa:39:0e:cc:bf:a6:dd:2e:0d:f1:a5:7a:9a:ea:
8f:63:ac:74:f4:ef:f9:82:65:4e:85:60:c9:f3:b5:
11:c0:64:65:46:95:5f:16:1d:51:07:73:c3:b7:b4:
ab:53:5b:9f:81:b1:7c:50:2e:9a:6d:3a:6b:50:3d:
e8:6c:64:31:2c:84:cc:56:01:46:8e:c6:ed:79:4a:
28:f7:40:f0:01:9a:31:95:1f:57:55:f0:3d:0a:1e:
75:89:f0:7c:5d:ea:bc:fe:bc:3d:03:d3:12:32:52:
80:a9:d1:94:84:30:7c:e7:6f:f1:6f:2b:17:32:56:
ed:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:08:B5:BC:0C:49:AE:26:E5:2A:BA:F6:2A:22:2A:C2:FF:2F:DF:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3c14bf1e-f46e-38cd-9d06-8e2b77fb1c06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
71.44.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:dc:dd:95:cc:05:6d:d1:4d:a3:8c:3a:48:96:8f:e7:60:db:
a4:2e:1c:80:8a:5a:d5:9c:e2:31:73:30:0b:10:f8:5e:44:c3:
2a:46:3f:08:d0:c8:6f:40:d4:33:8b:50:06:76:31:16:53:c1:
a3:90:e0:a5:fc:6f:be:3f:f8:fd:28:e8:4a:10:a8:88:b2:a8:
50:8e:5f:1c:e9:4c:23:85:c0:f1:42:8d:cf:e3:b9:17:07:b7:
7a:52:26:cd:79:34:7b:ca:cb:9f:bc:d1:e7:97:5d:a3:32:c3:
80:ce:bf:13:7f:6b:dc:1d:e7:d9:0e:73:48:4f:2e:18:6f:cd:
90:59:4c:a4:d6:9e:e5:a7:04:18:11:e1:ef:e8:3c:d6:67:7f:
35:c1:46:93:3c:2d:d8:9d:86:fb:2a:99:28:2d:44:88:eb:36:
50:e7:5c:18:a6:bb:6c:b4:7f:75:c1:42:f4:16:64:61:2c:38:
4e:92:2b:f7:57:08:ce:1c:79:78:4a:7c:f9:83:38:d0:c1:ef:
43:2f:b9:7d:15:7a:f2:6f:81:f7:43:1a:2e:de:c1:aa:3b:21:
d3:95:03:2a:8d:4c:d2:33:07:12:9a:51:e3:24:68:0c:63:2d:
3e:44:60:37:c7:8f:1f:a8:de:34:74:66:46:01:8b:cd:1f:b9:
90:77:cc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:26:10 2025 by rpki-client