Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3524bdda-e23e-31f6-81a7-e83ebf872749.roa
File: 3524bdda-e23e-31f6-81a7-e83ebf872749.roa (raw, json)
Hash identifier: DxHhW2uvxOZSktoyfPsKXMl79CEcTJCLx5CUxugSu34=
Subject key identifier: 27:B8:91:E7:58:0B:3C:B8:1E:AF:6F:97:23:3A:33:78:AB:C4:B8:47
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1D193DA436D45FA986600
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3524bdda-e23e-31f6-81a7-e83ebf872749.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20001
IP address blocks: 76.178.110.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:d1:93:da:43:6d:45:fa:98:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=6055b315-d7a8-4505-b9a2-40fa1d2f2b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:e4:27:ee:6a:ff:3d:b4:41:73:4c:a2:2d:
48:7f:50:88:d0:ea:3c:f0:31:42:39:c0:dc:8d:a0:
9f:27:35:57:a3:fd:04:2d:cd:e5:fe:e2:f9:24:f2:
4d:9c:da:7c:23:52:07:34:5a:9b:ef:ec:d6:44:a9:
e1:76:02:b3:29:ab:95:fc:64:8e:73:3c:13:90:d4:
9c:42:7b:7b:d9:e7:63:e4:02:13:a9:77:95:11:05:
40:3e:21:e6:50:5b:e5:46:eb:30:d4:dd:24:c2:49:
0e:db:5e:53:4b:da:e3:f8:96:6a:80:60:1f:93:f6:
5f:d7:ad:b5:89:ca:49:d7:ba:e1:ca:79:0b:46:28:
93:f7:40:d4:28:73:38:d3:3c:f3:f8:9f:10:10:71:
ff:0f:23:42:33:83:86:0e:f3:b6:8b:99:cd:ac:c1:
5a:a5:f3:8a:29:45:0e:9a:f2:1a:36:5a:87:44:65:
3d:83:0f:6b:7a:c2:dc:ac:ed:c3:b9:c5:5a:12:8e:
dc:cb:3a:74:d9:1a:44:87:42:34:49:70:ba:2d:43:
35:37:7b:20:b9:bc:91:32:10:92:1b:a7:37:67:99:
50:97:36:98:ec:b1:8d:7d:70:0c:c9:91:f4:83:e5:
5f:3c:fc:27:4b:3c:25:92:47:cd:42:9c:8a:e2:d9:
b6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B8:91:E7:58:0B:3C:B8:1E:AF:6F:97:23:3A:33:78:AB:C4:B8:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3524bdda-e23e-31f6-81a7-e83ebf872749.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
76.178.110.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:35:e7:03:39:12:a1:8f:bd:f1:0d:ec:a7:0f:f6:02:d1:79:
74:95:b3:b5:49:1e:50:ac:d8:62:37:80:41:0d:88:3e:45:69:
d0:8d:27:21:49:c0:0a:09:db:e8:82:af:61:2a:6e:ad:e9:99:
da:53:ac:6f:49:d6:d4:25:5d:41:48:a4:38:6e:fe:d9:25:4f:
c4:fc:6e:68:44:86:a0:13:a4:37:53:f0:5b:2e:b9:c0:36:5e:
25:49:13:be:a0:9b:ba:a6:31:a6:81:fe:9a:f5:07:6a:23:59:
ac:b5:77:a0:47:f9:b9:74:89:1a:04:de:5b:8c:95:55:04:1c:
32:f6:fb:81:79:3b:0a:1b:e2:e0:da:8d:1d:ba:3c:c0:30:b6:
c7:3b:1a:fe:65:18:f0:3e:2b:43:64:2a:8c:23:a2:fe:eb:82:
bd:b7:5a:6a:2f:e5:f7:9d:8a:cb:00:02:97:30:e2:8d:97:e1:
ff:73:00:10:36:d5:59:84:bd:30:d3:50:ed:9d:cc:63:bb:da:
f0:cb:be:5d:f7:63:9e:32:17:15:85:97:15:7b:39:56:f5:2a:
42:d2:65:86:71:fa:2b:b1:3b:cd:a5:92:70:aa:c0:da:6b:71:
e5:ff:a2:8a:6f:44:24:44:07:ef:2c:51:93:80:76:41:95:2a:
bb:6c:2d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:14:01 2025 by rpki-client