Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/755a8dc3-3cd7-3e8c-82da-5405f1993ac1.roa
File: 755a8dc3-3cd7-3e8c-82da-5405f1993ac1.roa (raw, json)
Hash identifier: LLTYGGb2lexLsMogy6TBwc+NxMpZhhqWwePgCE3/das=
Subject key identifier: 13:A5:58:39:50:97:ED:42:F1:4C:FE:DB:B3:DE:EE:FB:4F:AD:57:2E
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AFAF0B1EA8FEFD3CA7BB30
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/755a8dc3-3cd7-3e8c-82da-5405f1993ac1.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 20115
IP address blocks: 172.221.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:af:0b:1e:a8:fe:fd:3c:a7:bb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=72befd20-5fd3-4031-b938-2d7716c3f809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5c:0c:72:be:fb:59:f1:50:8e:1c:53:39:1d:
b0:99:96:34:49:f6:84:bc:91:64:94:f0:a3:c0:08:
8e:e5:b5:4c:40:60:12:bb:bf:16:bd:c6:a8:b0:f3:
5f:9a:18:f9:47:cf:89:51:44:d9:a9:e4:d3:4e:36:
3d:d5:74:59:c6:da:35:26:f9:3e:ae:a4:6e:a9:32:
08:c7:6c:ef:02:d4:4a:a1:55:67:d9:37:91:8e:4b:
b4:08:a5:78:90:c2:bc:53:a6:b1:76:1c:b3:ec:8d:
36:04:dc:10:de:f7:41:28:aa:ec:56:70:c0:9e:a4:
3f:d3:32:21:15:51:7e:b0:3c:d9:62:1b:c7:01:7a:
ab:3e:a9:78:75:0c:83:3c:79:dc:67:3b:68:e1:ad:
93:e3:ae:43:d7:4b:1b:09:06:f5:93:5d:90:49:01:
b8:01:fd:6e:d9:0d:65:78:83:c1:61:55:a4:32:20:
75:4e:60:47:17:85:ee:bc:6f:62:da:df:f0:47:1a:
0c:73:76:b2:98:ae:a3:57:0b:9f:94:23:a6:c7:60:
16:30:83:fa:82:3b:e3:8c:28:cf:27:06:69:43:83:
3b:da:82:28:c6:f2:53:54:bc:d8:10:ce:2f:41:5b:
f9:06:1f:8b:57:21:26:76:30:cb:71:20:96:0e:81:
d8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A5:58:39:50:97:ED:42:F1:4C:FE:DB:B3:DE:EE:FB:4F:AD:57:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/755a8dc3-3cd7-3e8c-82da-5405f1993ac1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
172.221.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:20:9c:49:7d:c5:4e:eb:93:2d:92:4a:7b:47:97:b0:1b:d2:
3c:41:0f:5c:78:23:da:c4:a9:c7:df:ea:40:90:13:dc:0f:d3:
12:05:42:c3:47:d5:03:44:b0:0f:70:17:63:01:2f:4d:4f:13:
03:19:b7:5a:86:6f:29:67:87:13:67:b4:14:e5:f2:40:6b:12:
16:39:e3:be:43:41:38:48:d9:26:71:b6:9d:8e:f4:d3:55:d9:
e0:53:b4:85:9e:e5:4b:b2:1b:32:f8:b7:f4:14:d9:32:03:22:
b2:81:63:69:81:29:56:5d:36:4b:73:1c:b4:03:43:86:29:52:
7a:41:40:90:18:bd:b2:e7:e9:eb:92:f3:01:e5:28:a3:87:23:
7b:d6:f7:31:e7:d4:f4:ae:24:d9:72:c7:4b:39:26:e3:97:d0:
75:76:07:00:61:ab:58:bb:cd:ea:6a:bd:aa:e7:8f:36:94:bb:
73:fa:8f:18:6a:dd:2a:f5:5e:91:4a:ca:1b:34:90:0c:71:9e:
d9:b7:df:2b:bb:14:35:4c:ef:89:49:e7:d6:b6:5c:46:39:2b:
c1:13:54:16:ff:0f:ef:01:fc:49:ca:a1:42:5e:7e:76:0e:bd:
bf:0a:c2:c0:67:4d:eb:1d:02:c1:38:a5:fc:bf:83:9f:45:c5:
45:e0:da:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:15:40 2025 by rpki-client