Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/347da0d9-0d5f-3b5f-a987-36c477084fb7.roa
File: 347da0d9-0d5f-3b5f-a987-36c477084fb7.roa (raw, json)
Hash identifier: SIbXm+WwtZABBX6ThqpTiKF49WbrhNcKKtwcRA6rU08=
Subject key identifier: EF:79:B0:74:A5:1C:71:8D:B8:4D:A1:DE:BC:69:42:1B:DC:80:DE:20
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1D54F99F5E3D846CEFD80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/347da0d9-0d5f-3b5f-a987-36c477084fb7.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 33363
IP address blocks: 24.173.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:d5:4f:99:f5:e3:d8:46:ce:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=68ed93f3-ba2f-484e-9ec7-722aa696dc2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0b:e3:af:8a:24:a1:ba:76:25:32:d0:fb:f0:
10:8b:ca:e6:bd:69:7c:04:f3:f9:81:af:dd:00:23:
0b:67:a5:a6:88:14:08:50:10:28:90:93:67:94:7a:
8a:9d:b3:ce:d5:8d:8e:6c:cc:d8:92:7e:3d:2e:21:
57:de:00:b9:04:41:0b:b7:af:9d:03:ae:8d:04:c1:
a2:0d:7d:61:8e:67:3a:21:25:1a:cb:37:63:0f:2d:
fd:ea:95:d7:ba:78:8c:be:8e:15:3d:5e:c9:fe:23:
8d:1c:a4:61:96:d6:89:81:5a:98:f3:b8:17:75:4f:
de:2a:91:75:29:ac:3c:0a:c3:cc:ef:22:08:eb:ae:
69:30:d3:06:76:25:fc:ba:bf:f1:e2:e5:c6:eb:38:
ad:af:43:3b:12:7b:2a:3d:e7:db:45:c1:8b:d5:3b:
2e:18:c6:b7:cc:3d:93:98:dc:ec:f3:76:f9:7b:71:
b0:a2:ec:5b:be:24:bf:30:2a:65:53:e8:64:1c:82:
e3:a6:93:12:3b:ef:97:98:bc:9a:ab:a2:27:3f:50:
9e:ba:43:c7:4c:fa:84:12:26:6a:7c:81:43:4f:0f:
01:ac:a0:9c:94:8f:0f:e4:92:8f:ee:41:2e:93:69:
44:34:34:c0:59:9a:10:4a:03:a6:0e:ba:bf:cd:5f:
ea:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:79:B0:74:A5:1C:71:8D:B8:4D:A1:DE:BC:69:42:1B:DC:80:DE:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/347da0d9-0d5f-3b5f-a987-36c477084fb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.173.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:3a:46:b2:36:bd:7e:c1:92:58:a7:64:2a:87:27:79:2f:b8:
71:a0:24:80:e7:62:ad:5d:c4:ab:79:6e:18:ca:11:86:c0:06:
82:3d:f7:dc:f2:0a:6c:4f:99:1e:c0:74:05:49:d8:56:0e:41:
6e:49:ee:c0:4a:56:51:d3:20:83:a1:9f:c8:31:56:1b:d8:2e:
b0:be:c0:eb:a7:ed:c1:9d:29:32:ff:a9:d7:c9:79:9c:b7:12:
e4:2e:ab:3d:fa:a7:14:3f:8b:dc:94:ec:5c:d4:17:cd:64:1e:
36:b2:27:63:02:60:f4:91:21:b1:17:c2:da:dc:1e:b1:4f:6d:
43:7d:58:6b:53:36:8f:fe:4e:0e:6a:98:0c:68:35:af:53:82:
a6:0f:22:1e:d4:32:b9:8e:68:a4:16:37:13:c3:c5:7d:76:bc:
c8:c5:9a:3b:ff:2d:c3:28:f2:25:a9:be:14:4d:9f:02:db:73:
84:e2:c0:8f:db:c3:14:74:11:e1:38:1e:de:34:d6:b8:48:62:
08:7d:56:7a:24:fc:2d:a7:68:91:e8:09:65:f7:ec:32:15:82:
ee:01:71:5e:5a:1f:5b:c9:6f:c0:46:bc:d5:70:ab:95:8b:4a:
8c:d4:a3:f8:f9:6a:d5:8e:d8:1b:ee:2a:6c:df:08:7f:e2:2d:
d7:a6:c0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:41:46 2025 by rpki-client