Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/21f37a4b-d87d-3412-8e57-cb0733b04a03.roa
File: 21f37a4b-d87d-3412-8e57-cb0733b04a03.roa (raw, json)
Hash identifier: tsmkkfhEmBHC84qAekk96W+k9ts+9Bz51PUCopmeJBE=
Subject key identifier: FD:0B:1E:B8:28:93:F1:B7:62:5B:40:D9:7C:9D:F3:70:46:A4:78:7B
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D126F52B8E4D17B3DA0780
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/21f37a4b-d87d-3412-8e57-cb0733b04a03.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 10796
IP address blocks: 76.57.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:26:f5:2b:8e:4d:17:b3:da:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=aa86921d-fb95-494a-b424-7e63e244b13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:18:62:06:85:f5:51:48:a4:25:9d:6e:d7:
37:3e:cd:27:e7:9e:46:95:70:57:ee:00:b2:58:5c:
6a:cc:05:7a:53:86:42:29:99:23:4d:1c:1b:5b:0d:
eb:0d:10:57:82:0f:76:86:3e:73:44:15:1a:ba:29:
9f:fa:2a:21:2d:ce:31:d3:74:05:b2:7d:f8:30:41:
ab:10:82:f1:d2:b8:09:41:df:b1:bd:0c:08:2a:0b:
c2:97:17:1d:0f:9c:6e:17:a0:9b:9a:38:35:af:6b:
ce:da:ac:2d:2d:8d:ae:18:77:ce:e3:c9:a9:a0:f3:
41:81:fb:1f:4d:86:65:60:ad:42:58:e1:e0:45:95:
e3:f5:ed:3c:1c:8d:a1:77:c6:5b:17:5b:17:38:63:
96:a0:cd:10:87:72:f3:5a:68:4a:71:13:8c:d3:3d:
f8:7a:29:e3:5a:78:f0:e3:4d:6d:6f:23:90:b0:45:
b2:96:aa:29:5d:03:3b:2e:70:5d:77:44:6a:f2:56:
16:91:de:75:48:32:15:dd:2b:83:84:d3:79:a4:9c:
b0:e2:f0:fb:8e:bc:32:02:7f:67:a7:15:28:90:84:
15:cb:b5:1f:13:89:2a:7a:e5:a4:12:54:e7:55:cf:
50:21:c3:86:06:a8:18:ad:a4:e6:e5:d9:96:4e:dc:
fe:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0B:1E:B8:28:93:F1:B7:62:5B:40:D9:7C:9D:F3:70:46:A4:78:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/21f37a4b-d87d-3412-8e57-cb0733b04a03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
76.57.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:4a:89:bc:eb:f0:1d:ea:5d:e8:31:a5:31:7f:7e:0b:37:1d:
32:6c:54:fe:b6:31:d3:27:bc:a8:91:b1:fb:99:d8:c4:03:cc:
da:0a:16:e7:78:77:0f:23:72:73:6f:b1:22:f9:a6:1e:fe:b3:
8e:45:fa:8f:c5:17:8b:2f:28:cd:57:71:f2:2f:c0:6d:1d:0d:
7a:e0:d9:d1:84:71:94:ed:9e:6e:99:fb:c9:1c:bb:1f:e7:5b:
2f:06:e3:d9:4c:48:25:7c:38:85:d3:7d:df:07:bb:8c:86:bc:
ca:9d:31:94:06:1c:b1:03:15:68:26:db:9f:44:05:3c:d6:d1:
4a:ab:85:bb:88:18:3c:8a:61:20:54:79:c8:cc:02:78:f7:a9:
81:f6:79:d1:9d:3d:38:38:eb:89:64:7a:b8:71:64:c9:b8:75:
c0:7e:b1:bc:55:c2:b2:72:56:c4:8e:5b:65:e9:1e:50:52:f4:
72:f9:bd:2f:9a:b7:d2:36:c8:d9:58:f1:6e:d5:98:d1:5b:eb:
7f:3a:73:12:8b:48:74:83:c6:82:6a:4e:62:9b:bc:ca:e9:b8:
50:14:21:3c:f9:ad:be:60:43:f5:b2:73:01:f6:d3:a3:5e:9b:
60:23:9b:bf:29:1f:99:20:be:e3:52:9d:8e:74:c1:35:74:28:
f8:bd:88:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:24:50 2025 by rpki-client