Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e51d6345-d432-370c-9bcf-1a0a6bc53063.roa
File: e51d6345-d432-370c-9bcf-1a0a6bc53063.roa (raw, json)
Hash identifier: IpZ86g0PMMAerAbW0jDRWGwcZA2rxpcdAEyj5OUSrVg=
Subject key identifier: 25:6D:3B:D9:2C:1A:65:06:FF:D3:F9:03:5A:F9:FA:E2:E0:DC:AD:A8
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AFAEC5BB0E41A9B7F36860
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e51d6345-d432-370c-9bcf-1a0a6bc53063.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 20115
IP address blocks: 172.220.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:ae:c5:bb:0e:41:a9:b7:f3:68:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=e17bc5cf-9614-4843-b949-25d8d111f379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:94:e2:1c:00:c3:29:89:0c:7e:53:b3:3e:08:
2f:7b:01:6a:46:d0:9d:7c:26:3e:41:33:a0:9d:bd:
1e:a6:46:66:83:c4:f6:d5:33:b7:36:73:7f:c2:80:
42:05:7c:88:5c:87:19:40:bb:e8:bb:9f:ab:6b:c9:
2d:e3:b3:d2:a8:26:ed:38:38:06:26:d8:f5:6e:75:
2c:a7:bc:bc:00:3e:24:55:c8:35:4b:4b:53:62:03:
75:e6:41:d7:d1:4b:21:7a:fd:89:6c:4d:76:98:72:
55:f4:de:56:1a:07:99:21:a8:59:eb:79:94:f2:d0:
82:17:22:5e:ba:d4:11:a5:c1:86:b4:bd:25:bb:78:
8a:90:27:e5:95:9c:0f:e5:65:2b:98:49:21:94:61:
a1:20:24:a6:38:85:05:1e:7a:6d:e9:65:cc:b0:78:
bf:de:78:5f:e8:de:c8:15:d1:e2:26:21:9c:62:5a:
2e:1a:81:ab:8a:fb:d6:1a:04:61:54:e1:06:ae:64:
28:36:36:30:63:c5:41:11:bc:15:63:f2:9c:17:cb:
1e:b7:b3:c1:4f:98:95:8b:fa:9e:70:74:e9:6a:8f:
84:e6:10:c5:90:47:b9:30:d0:bc:52:6a:d6:ed:a5:
ff:bb:49:ca:08:53:d5:dc:a0:a4:30:e2:dd:42:24:
ab:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6D:3B:D9:2C:1A:65:06:FF:D3:F9:03:5A:F9:FA:E2:E0:DC:AD:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e51d6345-d432-370c-9bcf-1a0a6bc53063.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
172.220.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:ef:0f:68:66:dd:4c:a0:a8:58:bc:aa:f6:70:59:27:32:9a:
2a:a4:ba:5a:4f:b1:81:f9:19:20:93:d0:fb:5e:0e:12:ab:28:
cf:5d:da:53:40:b4:bf:45:01:16:74:44:94:ec:40:b5:68:bf:
4d:5e:76:26:a8:47:b6:ad:f4:fa:57:22:6a:84:fb:2f:50:da:
ff:c4:81:40:33:27:11:dd:2e:6b:d4:2f:a1:a3:87:cf:17:b9:
92:20:79:e1:67:2e:3b:75:92:63:c3:7e:26:56:3f:42:10:dd:
fc:e4:e3:fc:95:3e:31:ef:f8:73:05:8d:bc:ab:3c:92:d2:cf:
fc:9e:84:b7:10:16:1d:ad:70:b7:ae:25:99:05:3f:bf:19:2c:
b8:71:34:d7:5f:89:67:d7:fe:44:6a:d0:b1:28:f2:02:ee:60:
d1:5d:a2:fd:33:5a:53:1d:03:53:74:11:99:99:90:47:ae:bf:
f8:97:9c:bd:23:c2:d8:4f:fb:31:48:fc:9f:7b:1e:a7:ad:f4:
06:72:49:2f:1c:10:7e:00:04:c0:0d:ed:b4:6e:96:7f:96:3a:
5c:1f:95:6e:62:c1:a1:f4:92:ca:2c:56:32:69:07:ce:a4:b5:
93:c3:62:a5:8a:78:45:d7:c7:b4:7f:4e:fb:c8:83:7b:c1:6a:
ab:1d:91:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:18:03 2025 by rpki-client