Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1d59ac74-169d-3798-b5ba-9ebacf2122fe.roa
File: 1d59ac74-169d-3798-b5ba-9ebacf2122fe.roa (raw, json)
Hash identifier: 1YWGl/AHmMBmc2M93JYxyv1oc33EtN8Rpi6PFpNzSBo=
Subject key identifier: 84:89:78:45:A7:8F:0C:53:E4:9C:25:04:8D:C5:FC:29:29:77:8D:25
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D15E23373DB0E2B20DBCC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1d59ac74-169d-3798-b5ba-9ebacf2122fe.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 396066
IP address blocks: 24.129.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:5e:23:37:3d:b0:e2:b2:0d:bc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=3634becb-fbea-43ac-8a0f-8f34bfd287be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cc:c3:60:f6:19:ef:68:ff:65:90:5b:84:7b:
01:c0:12:c7:71:e6:af:68:3b:c9:fc:7e:25:31:86:
49:a4:da:24:f6:46:6d:29:3a:0c:01:90:77:ce:1f:
90:4b:fe:3c:cb:2c:35:cf:1f:0b:86:d2:40:a6:89:
81:0e:18:52:67:27:8b:ca:20:22:db:65:34:87:ef:
49:29:c2:82:31:8c:83:17:c5:8d:cb:b9:7d:9d:62:
3b:09:e5:0d:15:9c:7d:76:d4:71:18:10:d6:2d:d7:
32:a7:74:cc:96:9d:dc:9b:11:a8:59:6e:fe:1a:a4:
a7:d0:a3:0d:81:00:84:a8:2d:dc:25:94:59:72:1f:
f6:92:82:af:a9:b8:84:4a:ab:44:44:fb:2b:96:27:
46:f3:66:3b:0a:9b:79:c8:be:0f:d8:a4:b5:6b:79:
85:f7:8a:19:11:9b:e7:93:f5:1e:1d:83:10:bb:da:
c1:0c:16:86:e4:b8:ff:dc:0b:94:72:88:da:e0:24:
f0:da:89:c1:fd:f4:6d:46:7f:a3:81:72:a7:7d:9d:
8c:1a:cd:c3:13:30:52:f5:2d:af:25:fe:cb:3a:90:
a3:02:90:18:2e:a4:4f:83:64:2a:f7:b9:cb:d2:5b:
77:8c:e4:6a:51:61:91:8d:75:aa:39:ac:e1:ef:a9:
58:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:89:78:45:A7:8F:0C:53:E4:9C:25:04:8D:C5:FC:29:29:77:8D:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1d59ac74-169d-3798-b5ba-9ebacf2122fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.129.174.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:d5:d7:46:c8:57:fd:92:5e:81:49:e6:13:53:b0:78:72:3e:
49:19:55:8a:19:37:4e:ec:36:05:9c:0b:fc:94:41:8c:bd:bf:
a2:8a:48:91:97:e3:41:8b:eb:ba:5b:5e:9a:3d:7a:ed:51:c8:
f4:f6:b1:0b:c4:e4:1b:70:47:2f:87:ba:dd:4c:01:53:b6:58:
bd:bb:3f:4d:3b:91:24:ba:df:31:3e:cc:59:9b:64:a5:04:c9:
f7:c3:70:aa:26:a3:44:50:1a:5d:1d:d9:15:c0:35:e6:1a:15:
fd:1d:47:2a:33:48:fe:44:4a:59:2e:0b:df:59:af:bd:00:28:
27:00:2f:cd:e4:50:23:b2:e7:80:4a:4f:91:8b:76:8a:30:4e:
10:d6:ba:ab:1c:b4:a4:77:e9:7a:fa:2a:8f:4c:3e:09:90:57:
d4:85:d2:b0:78:35:73:80:49:f9:79:27:87:60:72:a6:02:f9:
43:52:4d:13:a3:44:f3:33:55:8d:61:7c:33:93:87:8a:4a:7f:
92:0b:09:bb:c1:2c:e7:74:eb:64:6d:fc:f6:1f:f4:01:e3:e7:
08:65:66:a0:46:17:d2:1b:71:4c:a5:a8:22:8b:06:76:6a:74:
e1:da:c2:eb:4d:90:1a:0c:20:3e:e4:b5:96:0d:0d:ea:36:0b:
88:05:7f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:11:06 2025 by rpki-client