Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1ee550a1-2c22-3833-a465-35796372753a.roa
File: 1ee550a1-2c22-3833-a465-35796372753a.roa (raw, json)
Hash identifier: qq0QqElh+JmszmPjA3VbhkeFq2kosFDnmsb5OSrkBvY=
Subject key identifier: 40:7C:7B:09:48:A9:E0:C1:04:01:84:CA:D9:D9:8A:2C:10:90:4E:85
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D14D4708FD067209187480
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1ee550a1-2c22-3833-a465-35796372753a.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20001
IP address blocks: 76.89.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:4d:47:08:fd:06:72:09:18:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=dbd627f1-05ec-4e50-80cd-ea07b0845c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9c:b4:4b:36:93:49:be:8a:58:b9:b1:bf:77:
58:aa:32:5c:c3:69:a6:0f:d6:ac:4f:45:1d:f5:bb:
07:74:25:52:d5:ca:6a:8e:be:a5:82:7e:f0:6c:93:
f8:f6:a3:17:ec:0e:5c:c6:93:c0:12:06:ee:30:48:
4d:db:d0:dd:9f:5d:62:e6:ff:1d:2e:4e:bd:a4:16:
55:71:a4:5d:45:76:bf:8a:33:df:9a:86:be:b5:88:
26:3d:58:31:2e:85:52:d4:79:37:b1:a8:45:b1:ee:
a0:6c:c8:e8:72:e7:70:a7:31:e3:03:15:2b:da:ce:
86:4a:79:78:c8:fc:e3:00:f8:dd:c0:71:75:97:93:
62:10:2b:a2:eb:da:28:6e:ea:24:fd:da:cb:fe:ed:
df:7c:64:8d:07:bc:5a:7f:35:9e:c8:75:32:86:82:
51:4f:ee:50:4c:23:f7:85:e2:10:32:79:44:21:7c:
d9:80:bd:58:5a:c2:97:2a:99:e2:64:1a:a1:01:68:
49:b5:b1:e2:89:3b:d1:b9:02:91:c0:ab:5c:2c:5c:
1d:23:c2:6b:86:6f:bb:4c:72:c6:81:bf:49:df:93:
3f:d9:18:44:fe:a5:51:46:81:3f:2a:ef:c9:fe:38:
3a:c8:35:ce:59:da:e3:53:45:a4:45:31:4b:cb:2a:
ee:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7C:7B:09:48:A9:E0:C1:04:01:84:CA:D9:D9:8A:2C:10:90:4E:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1ee550a1-2c22-3833-a465-35796372753a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
76.89.48.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:c5:c6:8c:09:ff:31:84:01:6c:2b:63:3f:d0:9e:ac:03:38:
a1:9c:a6:95:ed:09:3a:28:a8:b7:39:f8:51:e3:78:ce:10:32:
e4:55:14:c5:f5:85:90:6b:9f:c1:79:4c:21:66:e4:4c:dc:a7:
66:46:16:52:b7:6c:ab:3a:ff:e5:30:4a:9d:76:38:23:47:37:
4c:d3:1a:6a:55:09:98:a5:ea:a8:84:3d:ac:30:3c:9d:ac:b7:
80:9e:89:42:be:66:5f:26:95:00:af:68:0f:1a:8f:16:aa:89:
b3:ce:6b:f8:7a:5a:be:a8:b0:88:55:7a:e0:bb:94:70:ea:4b:
55:2f:4a:e8:aa:6a:b7:2d:49:2f:2c:05:5f:bc:e7:3e:6f:54:
63:35:a8:c9:1a:1f:9f:e9:59:05:5c:6e:e7:7f:8c:9c:b7:75:
a9:49:6b:02:5f:c6:48:13:54:4f:fc:b2:7f:6c:74:75:12:b6:
e8:da:e8:f8:2d:c7:f9:f7:b0:fb:ed:5f:69:a4:f0:2d:f8:20:
a7:38:8e:10:30:90:16:01:cb:93:11:67:61:7d:cf:2a:08:45:
39:63:2c:f2:bb:66:48:48:e2:90:82:bb:d1:d4:3c:b3:60:c9:
2c:a0:42:d4:20:40:ae:ef:36:34:75:ed:46:35:99:ec:99:30:
32:6f:e8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:26:42 2025 by rpki-client