Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/023688c4-e5e3-3186-be21-d0d0b6d54be9.roa
File: 023688c4-e5e3-3186-be21-d0d0b6d54be9.roa (raw, json)
Hash identifier: gXjZI/L1PqIz///LcZEzpIncE6TCo5iAJaqrD56fKwk=
Subject key identifier: 7A:23:B5:A7:EA:D8:98:CE:5D:13:E5:80:6A:51:33:A2:F1:62:7B:08
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D158259A030E49AECBAA00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/023688c4-e5e3-3186-be21-d0d0b6d54be9.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 33363
IP address blocks: 24.106.156.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:58:25:9a:03:0e:49:ae:cb:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=63adafb8-a587-4358-96bb-c23699d54345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:df:c6:02:26:49:a7:01:43:4b:d0:45:e2:37:
74:fb:ab:2c:a0:2f:96:cb:8f:cc:5d:c7:ea:cc:76:
91:44:50:dd:dd:4c:f3:4b:7d:b4:62:c6:a2:1a:ba:
40:c0:82:af:1c:63:d2:02:25:d0:ce:ff:17:02:1a:
9b:05:8d:1d:09:9d:8a:99:a0:d3:96:fe:d5:79:fc:
28:d7:a5:58:07:cb:61:bd:e4:24:ca:8c:18:f7:b2:
99:8d:bb:07:11:71:cc:e5:3b:a3:ca:f6:b9:39:36:
25:9e:da:21:ad:e7:fe:0a:36:1e:18:93:ea:2c:9b:
3d:33:d6:e2:d7:58:dd:d4:cd:60:1a:0f:f0:8a:06:
d5:69:90:e7:10:e4:93:3d:1a:ca:01:cf:3a:f7:bb:
d5:6d:28:f9:59:c3:f6:f5:7a:b6:a5:b7:99:fe:c9:
d0:be:f6:27:21:9e:d3:0f:6c:c1:1b:b2:61:e9:15:
66:d4:21:58:6f:e4:c1:64:85:30:e1:ce:a8:28:af:
40:ee:9f:99:f0:95:e5:e5:3d:db:c3:6d:cc:78:8b:
0a:37:63:3c:1a:df:82:fb:bc:4e:b8:cc:d3:80:08:
74:06:35:85:9c:dd:64:3d:15:04:eb:21:af:a2:6e:
b6:ff:a1:00:9e:19:f4:17:f5:73:e5:06:3c:23:f0:
e1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:23:B5:A7:EA:D8:98:CE:5D:13:E5:80:6A:51:33:A2:F1:62:7B:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/023688c4-e5e3-3186-be21-d0d0b6d54be9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.106.156.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:42:a2:2d:bb:f5:1a:fd:d8:65:b3:15:2c:81:52:50:c0:06:
90:ba:6e:5a:03:23:39:87:5a:9c:db:e4:09:bd:aa:79:5c:1a:
1f:f6:ca:56:17:ef:32:55:6c:05:03:83:64:2e:1b:cd:c2:9e:
9e:36:62:3f:75:61:73:3a:9c:60:78:7c:17:a8:1a:2a:0e:14:
d6:d6:fd:75:da:8b:fe:6a:9d:69:fb:dd:ac:ef:51:be:88:c4:
e6:93:d8:81:cf:af:63:69:ee:36:5c:52:d9:4b:4b:f9:4f:bf:
11:ac:93:e6:49:8a:00:68:a6:4c:9f:34:db:7b:10:14:ca:ae:
90:9f:59:73:6d:71:87:e2:20:fc:8c:78:67:57:06:77:44:16:
27:41:6c:b7:3d:83:11:f0:11:0c:b9:53:24:ac:e3:e6:6e:21:
f9:28:02:eb:a5:10:a7:2f:8b:1f:27:b7:7b:35:ba:47:4a:a9:
65:b7:0a:82:96:81:d7:48:5f:02:fa:ab:7d:31:89:6c:b8:ed:
2e:8b:18:e2:d7:3c:67:c7:b7:99:e5:62:4b:ed:6e:e1:b3:ab:
3d:18:a5:bc:0e:e5:23:83:f6:fe:8b:3e:be:18:89:9a:84:f2:
11:6d:2c:f2:ef:c7:c8:7e:64:d7:72:d0:23:17:ed:27:3a:73:
5d:55:00:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:38:39 2025 by rpki-client