Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0be57ac9-0753-309d-873a-5e64c1912854.roa
File: 0be57ac9-0753-309d-873a-5e64c1912854.roa (raw, json)
Hash identifier: F4kkAf5oZYG5LWIjnGvxIlJZxWFifwa1ZKhpSabDcVU=
Subject key identifier: E0:50:32:A4:1A:18:46:C1:B0:E0:82:CD:00:C0:9F:27:DF:0E:54:5A
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285839321898EB5DC32A392790EB00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0be57ac9-0753-309d-873a-5e64c1912854.roa
Signing time: Tue 09 Mar 2021 05:00:00 +0000
ROA not before: Tue 09 Mar 2021 05:00:00 +0000
ROA not after: Tue 02 Mar 2027 05:00:00 +0000
asID: 10796
IP address blocks: 70.62.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:39:32:18:98:eb:5d:c3:2a:39:27:90:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Mar 9 05:00:00 2021 GMT
Not After : Mar 2 05:00:00 2027 GMT
Subject: CN=8ab3df49-f720-4f35-921b-138abc078538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0d:61:82:bd:9b:b3:ac:18:49:b7:1c:22:16:
9f:b4:aa:5e:1c:42:41:d0:2c:67:68:29:4e:34:e3:
cd:1f:94:af:75:79:3a:07:81:76:5d:8b:00:db:fd:
48:6e:c1:aa:b4:a1:22:c0:b8:38:df:53:b7:5f:53:
5a:44:ab:4d:cf:ba:ca:7d:e2:79:31:ae:0e:51:a2:
bd:06:8e:ec:e0:9e:9f:af:26:85:0c:f2:ab:a2:8f:
25:ab:d5:85:3d:67:b0:0c:06:b7:6f:5e:eb:3c:08:
7b:c4:73:e6:cc:34:82:f8:4b:c5:39:e6:a1:f8:14:
84:8a:3f:ae:61:cd:29:7f:6a:41:f5:37:01:72:c8:
16:8f:8f:63:15:8f:ba:aa:23:e7:64:8b:26:dc:d7:
d4:d6:5c:6e:61:2c:f6:96:18:0a:1c:3a:27:7f:a1:
89:1f:29:8d:57:05:39:39:51:2c:6b:92:8c:74:81:
d9:e1:57:44:53:ea:93:d8:19:c2:71:b7:e8:b6:91:
84:4c:75:7c:21:f0:8f:70:28:69:ef:0b:ce:55:2f:
46:00:f6:e0:aa:f0:ff:ff:c6:29:6d:d6:a2:c5:11:
86:2a:6e:3c:b0:c6:05:ab:3d:ee:a0:81:c9:54:f8:
9b:6a:f6:e9:a8:44:7b:95:9e:ee:a4:73:88:7d:39:
7e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:50:32:A4:1A:18:46:C1:B0:E0:82:CD:00:C0:9F:27:DF:0E:54:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0be57ac9-0753-309d-873a-5e64c1912854.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
70.62.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:63:3b:1d:2e:ba:04:13:04:ea:c0:42:e6:38:d9:3f:ec:3c:
96:f5:7b:fc:22:5e:bc:1e:69:53:a5:59:f3:c5:5d:c9:a8:96:
61:0d:21:1c:fd:bc:8c:54:29:28:0f:2e:c1:7f:85:76:fb:06:
2a:0c:91:52:d2:be:e5:86:02:24:6f:91:0e:74:2a:6c:f5:12:
b5:50:49:b3:bd:ae:0a:11:ff:92:e9:bb:51:18:6d:d9:c8:75:
26:ae:e9:16:79:e1:23:8c:c8:f8:8e:11:73:ef:c3:7c:c1:65:
df:bf:04:18:4b:4f:b2:95:e6:7f:2d:b7:8b:01:97:ef:af:23:
b4:33:ef:b7:7c:b0:70:1d:10:96:f4:b8:70:57:68:60:ab:42:
29:87:55:6d:87:29:18:95:16:13:0a:a4:8f:7a:15:67:90:0e:
c3:38:df:fb:5e:eb:91:f4:a2:34:f8:93:77:65:c2:38:68:36:
90:61:f9:fa:1a:1e:03:15:f1:74:af:76:af:bb:ae:da:b2:53:
f9:24:29:75:e9:de:49:22:fa:ee:a3:7a:fe:fd:31:8f:86:10:
32:b8:3c:51:9c:e9:9d:65:fc:1d:93:18:87:88:42:6c:58:93:
8f:ba:38:56:2c:1f:4e:4d:b6:f9:a4:b6:ae:db:8f:16:d9:e1:
ad:8e:aa:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:43:08 2025 by rpki-client