Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b8e7b7b8-3ccf-3db8-8b83-1993b0dc718b.roa
File: b8e7b7b8-3ccf-3db8-8b83-1993b0dc718b.roa (raw, json)
Hash identifier: +U67f5ggR6MiLQN07+9OHGXHWiDKDnWpiUZgJP98MRQ=
Subject key identifier: FC:3F:4B:53:6F:19:1C:46:F3:C8:14:D5:2D:FA:6D:31:09:A7:2E:8D
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AFAF2DD612538FED98A840
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b8e7b7b8-3ccf-3db8-8b83-1993b0dc718b.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 20115
IP address blocks: 172.221.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:af:2d:d6:12:53:8f:ed:98:a8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=9bb2368d-28de-4e93-a770-8fda27085af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:03:38:37:28:14:31:4c:11:24:25:3b:1c:a9:
a1:50:95:1a:31:10:a0:ac:0c:e2:3e:36:12:fa:7d:
76:de:10:5c:0e:77:95:43:52:b1:f6:3f:e1:56:c6:
fa:38:02:0a:7c:3f:95:6b:1f:ff:f9:96:ee:0d:a6:
9f:be:27:6e:ba:5c:53:e8:d0:a7:c3:08:44:65:fb:
7d:0e:2f:46:36:0a:c1:d3:0c:7e:f2:44:b4:d7:5d:
1b:0a:1d:93:e7:dd:0d:1c:58:00:96:a9:ff:89:2b:
7f:89:ba:78:50:27:4c:a7:86:fd:ee:9a:e5:e4:f1:
96:22:77:d5:d2:82:5b:15:de:70:28:fc:17:b2:db:
2a:07:b1:c4:1a:04:07:02:1d:10:f0:3c:dd:06:82:
36:d3:29:53:5e:dc:6e:69:aa:0d:73:8f:e1:65:89:
51:13:f7:b6:58:cf:c1:ea:fb:11:82:ae:d3:27:84:
20:f8:6c:05:5f:ad:16:76:f7:db:b6:3d:e3:8b:5a:
d8:0a:eb:0a:06:99:6c:1e:95:40:a8:12:2f:54:5e:
52:96:46:90:9a:b1:ad:83:9f:50:c8:37:d1:b6:aa:
6a:79:54:94:87:9c:28:db:cb:45:7c:54:f0:32:dc:
7e:35:13:02:0c:30:0e:3e:8b:2a:6a:55:85:53:fb:
a5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3F:4B:53:6F:19:1C:46:F3:C8:14:D5:2D:FA:6D:31:09:A7:2E:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b8e7b7b8-3ccf-3db8-8b83-1993b0dc718b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
172.221.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:95:e7:5f:0a:c5:fe:31:49:db:fe:76:c2:d2:29:72:91:4c:
73:92:1a:40:db:78:5e:70:fd:ec:57:fb:64:cb:b3:a8:83:e1:
36:bf:73:66:26:f5:b6:0f:bf:4e:96:fe:4b:cf:d6:ac:d9:ae:
8b:52:02:a9:71:b6:3c:31:6c:18:28:12:80:14:02:61:cd:5a:
77:04:ba:d9:bc:66:43:eb:66:fb:71:3e:59:0b:db:b7:af:3f:
f4:dc:f7:3e:4b:01:64:8b:40:e4:52:f3:4a:89:94:35:3d:b9:
76:4d:cc:57:b3:90:00:87:57:f4:0e:26:5a:8e:b3:f6:59:54:
80:f1:fb:31:2c:2f:2c:19:b6:74:a1:b8:82:ae:94:b8:2b:b7:
c4:ba:a7:c1:f6:2f:1c:1f:e5:8c:fb:31:af:67:8d:62:37:d4:
2e:32:42:e0:8a:22:af:75:db:18:94:ba:be:76:c0:ed:1e:7d:
00:50:ec:2a:0a:e5:02:ee:96:2d:b3:c7:79:f7:f4:31:90:83:
6a:8c:ad:02:92:f0:81:c1:4c:e9:08:07:16:19:d2:58:85:f4:
a7:61:fd:66:8e:77:cf:f6:56:9c:28:2e:a9:52:b1:5f:e5:c7:
03:2b:2b:71:07:5a:0b:9a:17:17:81:5f:dd:fd:e7:8a:8b:73:
e1:70:07:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:13:10 2025 by rpki-client