Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d43aca5a-f9d8-3ca9-b4a8-a1bb07e85226.roa
File: d43aca5a-f9d8-3ca9-b4a8-a1bb07e85226.roa (raw, json)
Hash identifier: wZye3lYgF7cE9ZmYQaGfI2LRq+wi26LSGwv8wHoSGcA=
Subject key identifier: E5:38:E4:54:45:AC:0C:F2:07:71:B9:F8:4D:1D:44:66:93:B0:9D:F3
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AF858963FEC06C0BA4B732
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d43aca5a-f9d8-3ca9-b4a8-a1bb07e85226.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 20115
IP address blocks: 174.85.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:85:89:63:fe:c0:6c:0b:a4:b7:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=3c6c298a-c281-41e7-979c-efe56df5a908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fd:4b:82:48:c4:fb:c0:08:b8:13:6f:e2:af:
75:2f:96:de:a7:01:f7:19:e3:1f:61:1a:0e:db:6f:
cf:2a:af:da:c8:ea:c2:13:62:1b:94:7b:29:26:82:
01:ce:98:23:10:59:16:9f:ea:6c:f0:93:63:e7:4f:
e9:09:87:f0:ed:d0:28:f4:e5:9a:be:f5:cf:db:29:
1d:b3:90:e7:bd:b4:8b:f2:73:e7:32:67:92:55:13:
de:33:53:f1:30:ef:46:8b:1e:98:ed:b9:1d:2c:12:
af:7e:0d:8a:da:c7:a1:d3:ce:8f:86:04:0c:93:f1:
ea:65:d9:31:9f:91:e2:c5:3a:49:bf:65:8f:e1:f7:
c2:d1:07:03:73:a9:c6:f4:b5:c8:ef:c6:05:63:f6:
56:ef:10:9f:e8:fd:dc:cd:f5:68:17:a7:03:01:8e:
3a:af:20:09:c6:f7:6f:3b:77:45:7d:90:b2:37:a1:
40:eb:7f:3c:88:35:ec:6a:aa:97:58:08:9c:38:6d:
5b:ea:8b:43:d9:76:76:8d:09:2b:11:75:8c:6c:46:
01:6e:77:fc:dc:f3:c5:13:51:33:8e:0b:23:16:d9:
e7:1e:99:a9:f2:27:c3:8a:a8:f1:d6:f4:3a:c1:91:
29:ad:81:30:e7:2f:6d:cd:25:e6:c6:87:96:9b:1d:
85:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:38:E4:54:45:AC:0C:F2:07:71:B9:F8:4D:1D:44:66:93:B0:9D:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d43aca5a-f9d8-3ca9-b4a8-a1bb07e85226.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
174.85.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:b8:97:44:14:8b:98:f0:ef:75:9f:98:a8:c9:36:eb:69:5d:
ee:e7:e5:10:73:c5:ba:2a:98:a9:d2:4a:a3:26:8a:7b:a5:9c:
b4:f1:e0:fa:2c:1b:02:85:e3:93:6a:7e:72:8a:40:f3:01:28:
8f:1d:b6:d7:4e:5e:9f:ce:7c:eb:64:4f:da:79:e2:b8:4c:fc:
8a:80:52:bd:77:ab:bf:ca:97:d0:95:1c:52:65:99:f8:37:fd:
57:42:fe:a2:ed:67:5e:6e:74:59:db:dc:00:c1:9b:76:42:f4:
2d:1a:60:85:79:67:9b:fb:af:bb:f2:1f:7c:35:86:3c:f1:2c:
7e:a6:6f:fc:10:e8:93:1f:1f:28:89:03:1c:2b:3c:b7:6e:52:
b9:fb:e5:42:d6:c3:3a:20:5e:d7:ec:f6:fd:9d:9b:94:2a:83:
29:94:8b:8e:55:24:55:26:a8:c9:14:ab:5e:ff:84:ea:30:19:
3f:78:08:c5:30:35:8a:62:19:15:7c:0a:d4:9c:74:8e:e7:14:
d7:ef:6f:72:1e:04:07:dc:20:34:cf:6e:c7:f3:58:5d:4e:80:
cb:b7:18:b6:d9:54:b2:09:c3:19:83:59:c7:f2:06:21:6f:99:
0e:9d:cd:c6:a8:ec:6e:b3:fc:4a:42:81:aa:1d:b9:b8:ba:e8:
06:6e:bd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:15:42 2025 by rpki-client