Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/320a9fea-7e88-3b05-ae40-6e221a08da6a.roa
File: 320a9fea-7e88-3b05-ae40-6e221a08da6a.roa (raw, json)
Hash identifier: uOp5sgTCC3oBx3568M6ZEQVgObab1Zhbhv2yCv7/b64=
Subject key identifier: F1:C7:98:7F:65:94:ED:06:BB:ED:EB:49:0C:3A:7A:3B:80:71:00:8C
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D13B9B2A1A2896D2342180
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/320a9fea-7e88-3b05-ae40-6e221a08da6a.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 11351
IP address blocks: 208.105.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:3b:9b:2a:1a:28:96:d2:34:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=a9cc5821-3bd1-497c-bb8a-f4a51e2b62cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:07:90:3d:17:d5:34:e0:6b:fd:9e:de:10:
e2:9b:cc:09:19:89:ae:7c:dc:79:02:bf:0a:7d:29:
f1:01:33:64:6a:dc:82:a3:42:12:1a:5c:56:46:bb:
89:27:74:d1:0d:3e:b9:04:22:eb:48:54:ff:45:34:
0e:dd:d8:49:da:65:53:c2:f3:df:52:5d:55:17:cb:
7e:b5:f2:eb:90:dd:9a:cb:58:72:89:c9:e3:19:d8:
12:3e:29:03:c3:dc:60:c4:0b:cf:71:d0:b6:fe:0a:
2f:ee:ae:dd:16:c3:59:83:78:d9:25:d6:bc:6a:2d:
52:69:f5:15:38:1b:76:2d:85:8b:bb:62:bd:81:fc:
ce:13:71:77:af:00:88:2b:b6:72:33:53:ed:2e:d1:
3b:9a:0b:77:c7:23:50:da:5f:c3:ad:9e:25:7a:bb:
c3:a7:ec:26:76:b9:76:02:a5:77:cb:fe:68:3e:83:
e5:2e:c1:75:8f:d2:bc:79:16:5e:a8:63:10:c2:74:
ec:8f:ae:f8:28:2a:ee:56:8d:53:72:b2:4e:95:9d:
e7:e3:06:4c:cf:a9:24:f3:59:26:0d:74:f9:86:9c:
d0:21:65:08:6b:ac:78:ce:87:91:1a:00:de:b8:fe:
52:c1:ea:e9:d7:32:2f:82:90:bf:a5:ef:3a:66:b5:
41:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C7:98:7F:65:94:ED:06:BB:ED:EB:49:0C:3A:7A:3B:80:71:00:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/320a9fea-7e88-3b05-ae40-6e221a08da6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
208.105.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:bd:2e:a0:c0:67:98:14:9a:a6:80:c6:1e:c3:52:e3:38:f6:
8f:2c:19:45:2a:78:08:c0:4e:fc:00:05:d3:88:fc:df:0b:f2:
2b:64:dd:52:dc:7c:ba:35:8b:f5:b1:c3:d5:64:ec:f1:b8:85:
27:4f:7a:bc:3a:a3:76:a3:f9:1e:02:f6:b4:94:8a:8d:99:9e:
4e:ba:ff:ae:cd:ab:39:8b:18:d0:c3:a2:62:f7:eb:64:59:7e:
eb:47:6f:a6:68:d6:bc:f9:04:e2:5a:33:bd:2c:d2:2d:c8:3a:
e2:72:58:0b:7a:0d:59:cf:93:15:d5:f5:64:cb:50:9c:56:1d:
48:6e:8d:30:4e:4e:12:c9:aa:57:1d:dc:9d:18:cb:ab:2c:bc:
30:f5:4c:0b:7b:a0:6f:d8:55:ab:ce:9f:2d:ab:85:0e:62:8b:
5d:25:c8:0d:50:39:03:ee:58:75:8b:66:b4:02:74:83:23:bb:
0e:37:ac:40:35:a4:72:69:dc:1d:dd:b3:57:d9:8d:29:90:35:
43:b1:0f:9f:51:02:c8:00:8d:03:34:5a:7f:f6:8f:bd:e5:c2:
b5:98:42:88:92:99:ec:a6:ca:39:67:94:92:d5:01:94:92:c2:
45:a9:75:3b:18:ee:8f:49:02:e5:4f:8b:36:26:42:8f:25:5c:
43:59:df:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:48:38 2025 by rpki-client