Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bbf73244-bc3a-3aa9-9626-ccc8a0b277b5.roa
File: bbf73244-bc3a-3aa9-9626-ccc8a0b277b5.roa (raw, json)
Hash identifier: RdJbcU31SmcFYt1DSk4rTokfGp3+8h8tBibZwCoJSoY=
Subject key identifier: BA:A6:0A:6D:CF:FF:91:9F:8B:A6:E8:21:E8:26:B8:81:D9:9E:83:30
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AFB1D14ED4854188DFF600
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bbf73244-bc3a-3aa9-9626-ccc8a0b277b5.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 33363
IP address blocks: 97.71.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:b1:d1:4e:d4:85:41:88:df:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=82f45fed-377b-47cf-aff3-da4ab6294c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a7:b5:ac:c6:cc:db:6a:44:3c:fc:bc:6e:5c:
d4:25:b4:d7:86:a4:f0:08:16:b4:18:27:a3:c5:22:
00:ad:6c:0b:01:d2:2a:78:9b:da:f5:14:1f:fc:b5:
19:d3:b5:cb:62:26:81:15:0c:1d:5c:dd:65:5d:1e:
d8:96:2d:1a:b6:6f:6c:cf:2a:75:85:39:b8:8b:4b:
37:76:ae:13:9c:bf:2c:c5:ee:14:e4:6e:82:ff:31:
71:06:bc:d6:9e:41:bb:7c:7f:6b:f6:4e:b9:52:18:
10:6a:e0:2a:fc:05:31:49:a3:37:6c:c9:6f:a8:27:
5c:b8:ed:50:fd:f7:4b:f6:5e:02:ce:da:13:39:76:
c1:58:c4:27:c0:d0:6b:28:10:12:c4:cc:32:b9:ac:
e5:40:f4:77:9c:0e:d9:16:b3:3f:c4:9a:9c:e1:47:
ae:f3:0d:67:fa:24:5e:47:51:05:80:71:d7:2e:8f:
73:bc:cb:55:27:61:f3:91:87:ca:9a:0c:7f:54:42:
f0:e7:2e:55:39:f6:90:fc:d8:86:c3:24:3a:af:b2:
98:ac:7f:2d:2b:d5:d9:f8:a1:dc:61:24:58:3f:95:
ef:58:2b:51:90:3d:2f:7d:3d:73:a6:2d:c8:33:70:
7c:5b:23:34:6a:02:0b:9e:c4:de:a3:c4:79:f5:0a:
ae:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A6:0A:6D:CF:FF:91:9F:8B:A6:E8:21:E8:26:B8:81:D9:9E:83:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bbf73244-bc3a-3aa9-9626-ccc8a0b277b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
97.71.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:bf:e8:7e:9d:88:82:1d:e5:ae:a6:1a:ab:41:0e:f5:cb:e5:
c8:b4:a1:19:21:f8:e2:f6:16:fa:a9:f5:62:2a:78:12:90:66:
2f:8b:cd:39:71:43:b9:64:98:ad:69:d6:be:45:0f:4e:51:44:
7e:9f:c5:99:6d:53:75:48:88:44:05:ca:27:29:8c:80:32:e7:
05:fb:a8:6c:2b:57:bd:7c:31:86:7f:91:65:19:60:bc:2e:cd:
64:da:e7:96:3b:a0:68:3f:34:8a:b0:8e:5d:4e:92:dd:25:f3:
77:25:a3:a9:84:ce:22:3f:9e:a1:01:c5:88:01:5a:40:46:b5:
e5:c1:ef:42:9c:87:4f:be:05:b0:b3:6d:91:57:90:5b:65:cb:
56:71:96:ad:5c:e4:48:f4:c6:65:d9:a5:55:3f:4d:54:e1:32:
bc:bc:5c:6f:65:e5:8a:27:f1:9d:d1:e1:af:4f:bf:d7:76:75:
b5:fc:06:06:8d:a8:0d:ff:31:f2:49:e6:78:18:39:fb:81:bd:
f8:a0:91:9a:fc:21:e8:1d:8e:d1:c5:3c:a6:b3:98:0d:90:0b:
11:3b:e6:50:06:4e:4a:9e:fa:99:96:7b:c7:64:56:81:9e:a3:
5c:3b:26:33:81:6d:bf:4e:3e:93:2e:3e:77:57:7f:a0:2c:d4:
73:b6:05:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:24 2025 by rpki-client