Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0956c022-02e7-3057-9137-a1ce8a403d59.roa
File: 0956c022-02e7-3057-9137-a1ce8a403d59.roa (raw, json)
Hash identifier: 6HktkLqA4B5INzsJ3tk4rCSACeY91PWqX+vb3SnqF30=
Subject key identifier: 82:47:3A:35:D0:02:AA:F6:BD:C9:DA:F6:32:59:21:F1:99:9E:CE:98
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D13DF8B936DF05D737DA80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0956c022-02e7-3057-9137-a1ce8a403d59.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 11426
IP address blocks: 104.138.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:3d:f8:b9:36:df:05:d7:37:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=780e4bf1-be45-4312-9f53-29c693b0f788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2b:1b:aa:9e:a3:e3:36:3b:a7:6b:a7:94:89:
7e:65:9c:96:1d:1a:58:0e:6c:12:54:44:66:ea:8a:
26:b4:1f:72:2b:d7:a3:ad:a0:e5:cf:c4:01:8f:20:
80:b7:0b:f6:08:10:31:d6:0e:2a:35:cd:d1:38:25:
21:00:91:1b:4e:c1:a7:56:14:80:00:50:8d:89:4b:
de:20:c0:b2:db:9b:d6:f7:8d:43:02:ad:bd:f3:7f:
33:e1:cb:66:99:3c:c7:e5:9a:b4:15:02:98:47:95:
1e:f9:07:ea:0e:ad:0c:e3:c2:80:4a:c9:42:35:14:
c0:29:3e:2f:fa:32:70:6c:d6:85:8a:14:7f:bf:71:
75:39:55:a0:f2:0c:04:e8:d7:58:8c:ef:1b:e0:3d:
81:48:bf:70:de:a7:0e:aa:08:4e:f7:58:cd:01:3f:
d0:01:fa:30:b5:f6:c5:12:ed:07:38:9c:02:18:a8:
90:1b:5b:11:eb:7d:5e:9e:98:6d:41:ca:af:0c:c3:
2a:6e:08:18:ac:40:5f:86:26:f4:f6:0e:9f:78:da:
76:bc:bc:1e:16:a1:53:0c:af:d9:59:65:03:03:ff:
e2:9c:8c:55:28:9b:a6:cc:8f:33:cc:e1:91:f0:d2:
a8:0e:55:d5:96:6d:75:fa:72:ef:09:b9:5d:6a:01:
51:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:47:3A:35:D0:02:AA:F6:BD:C9:DA:F6:32:59:21:F1:99:9E:CE:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0956c022-02e7-3057-9137-a1ce8a403d59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
104.138.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:99:fa:63:1f:38:26:3c:13:80:43:6a:b1:3c:c8:1f:dc:9d:
7e:b6:03:76:7e:c1:c8:cb:92:27:19:0e:70:42:ea:5c:2b:58:
97:56:f5:bd:28:fb:e8:65:9a:e9:75:a6:97:d7:88:cb:0f:5c:
7d:c1:fe:52:9b:4a:4d:00:fe:d0:4a:82:78:ad:ef:57:00:1c:
ba:bd:03:45:2c:3b:9d:35:e6:3f:16:ed:82:fa:ec:92:e1:d1:
15:5d:d1:ce:09:9f:da:3c:64:3d:99:6b:62:0a:bc:42:d9:2b:
4f:22:d8:74:4d:20:6e:8e:47:f1:4d:94:d2:ed:37:b9:04:fe:
dc:d9:25:91:ab:15:2f:cc:4c:a9:c4:45:79:b0:21:91:f0:97:
62:79:88:1c:5f:67:b8:82:38:b4:e9:b6:c8:75:fe:65:b6:f2:
14:d2:99:59:64:ce:66:62:73:98:03:49:01:dc:ce:aa:d6:e7:
29:39:36:db:3a:81:d8:6b:06:89:fe:40:91:9b:4f:e6:8d:06:
0a:21:44:5d:d9:14:f5:a2:22:64:c8:03:64:8a:e1:71:da:bb:
11:fb:bc:75:68:69:19:f1:80:1c:96:24:b8:1a:1e:26:ef:8e:
b4:67:ab:44:fa:30:1c:f5:21:1d:41:9a:84:93:0b:aa:fb:38:
4f:01:e3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:27:02 2025 by rpki-client