Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/32ebaf41-839e-313a-b91c-c265e204cb37.roa
File: 32ebaf41-839e-313a-b91c-c265e204cb37.roa (raw, json)
Hash identifier: 8EyK8Jh/U7kRM1FWhHkFC0JqEu+mK/dJhTAFQnk777Q=
Subject key identifier: 91:51:D5:D8:14:F1:01:B4:ED:9E:B6:AD:C2:18:97:10:4E:F0:6F:84
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D15C4519E97CAFA5DD2A00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/32ebaf41-839e-313a-b91c-c265e204cb37.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 46483
IP address blocks: 208.125.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:5c:45:19:e9:7c:af:a5:dd:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=d76eba4e-1c9b-4202-961f-97c90f35085f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:69:8e:c1:3f:c0:86:96:9a:c0:f1:ab:d1:04:
4e:dc:06:f4:23:90:8b:67:43:33:eb:ce:cd:49:c8:
c1:0a:e9:9f:47:d2:73:2f:be:79:4c:c6:1e:8f:e1:
4d:3f:7c:b0:f4:6c:86:dc:82:72:09:bd:f4:75:c6:
c2:bc:49:10:bf:e7:ef:4d:99:58:8f:3b:60:de:3e:
75:98:e2:93:26:a5:f7:60:05:26:26:7d:46:f7:bf:
9d:73:f3:3a:e6:02:d9:0b:d1:13:d1:bd:de:3a:e1:
fa:95:e1:57:97:52:88:f4:86:3b:de:cd:1c:07:4d:
b6:79:fb:26:6c:90:d2:2e:c0:ac:e2:02:9d:7c:61:
0b:68:e3:17:a9:22:08:da:e1:17:a1:53:cd:ca:48:
1b:43:c1:1a:29:1c:12:20:5c:0a:40:cb:81:f2:ea:
5e:6b:b7:c2:13:4a:60:cb:6f:d0:4e:b7:61:5a:a6:
87:8b:4c:76:bb:35:e9:33:42:b9:a5:37:8a:08:77:
50:5f:45:70:21:d2:38:3a:1b:25:39:14:1f:6f:97:
33:0b:e5:dc:41:b0:02:37:51:f7:9a:75:87:71:7c:
cd:a4:ff:a8:cd:a6:b4:fe:be:18:12:3c:a4:db:bd:
17:40:aa:3c:e3:88:f2:13:16:3f:90:17:fc:71:1e:
8d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:51:D5:D8:14:F1:01:B4:ED:9E:B6:AD:C2:18:97:10:4E:F0:6F:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/32ebaf41-839e-313a-b91c-c265e204cb37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
208.125.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:54:5c:0c:95:69:3b:dc:9a:25:dd:16:0d:6a:f8:98:c1:9a:
10:9a:85:0f:c5:4d:2d:d9:5f:18:6d:16:99:8e:a2:25:d7:0b:
08:9c:c0:7d:50:17:8a:ea:29:ee:74:39:31:7b:ea:c1:cb:b5:
da:6e:ed:cf:d3:2b:8d:45:08:a4:74:4e:6f:ee:80:64:27:26:
cc:5a:3f:b5:cc:19:70:42:02:a8:3f:1c:0c:7c:03:59:d8:5d:
40:76:0b:ae:7a:b0:81:c6:f5:40:82:d3:1a:f2:8e:59:6b:e7:
bc:e5:87:65:1c:60:40:02:58:69:8d:e3:46:0c:8a:94:49:1b:
53:26:e8:7c:f6:fb:1f:1b:11:1d:06:d4:e7:a2:5e:d4:8c:fd:
01:bc:84:d7:ac:32:6b:3a:f0:14:1f:55:89:42:bf:f1:aa:4e:
c4:56:33:8d:cc:94:e5:b6:bc:63:68:71:98:08:9a:c4:a8:eb:
2a:12:b4:2a:93:cd:d1:e8:31:31:59:52:20:ad:fb:15:00:ff:
d7:d7:4c:ca:49:98:bd:dc:99:72:10:ff:b2:81:6a:60:98:0a:
d5:aa:22:72:1c:20:e6:ed:b2:9b:6a:90:1b:a6:19:15:e8:2b:
41:6c:5c:18:6a:bc:e7:cc:97:b7:ae:4e:24:d9:3d:16:d3:45:
fe:cf:0a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:28:15 2025 by rpki-client