Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/367cf1ae-ec57-3522-ac6f-831949d6aba4.roa
File: 367cf1ae-ec57-3522-ac6f-831949d6aba4.roa (raw, json)
Hash identifier: dOIK4pzZf4+/cVIubeHXE1wQoR96Lz+IIB9rTnqMIVo=
Subject key identifier: 70:53:65:7F:77:11:5D:71:F7:A0:E5:51:1D:17:31:FE:96:AA:96:A0
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1C69203E2B6F6DABB8D80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/367cf1ae-ec57-3522-ac6f-831949d6aba4.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 11427
IP address blocks: 192.198.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:c6:92:03:e2:b6:f6:da:bb:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=6fb5a20a-607f-40fb-8f17-3f1093760b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2a:d8:6d:ec:c8:4f:88:2b:ea:62:ff:dd:14:
d8:8e:f2:a0:c9:53:ca:ed:ce:36:a8:8f:be:0f:21:
c5:4d:79:2f:d3:c5:70:98:84:9b:84:a5:0a:3b:dc:
ad:89:60:8a:7a:67:37:c2:a5:88:cd:1f:ee:fd:f1:
5b:f8:bc:96:ce:33:16:a0:ac:d6:ba:f0:92:7f:95:
b3:a8:df:25:d4:25:60:7f:12:69:6b:f8:21:30:e0:
02:6a:de:ee:d3:6f:33:f3:d0:16:5d:2e:ac:95:89:
ca:a1:52:a3:55:fb:d0:a7:ce:7a:b8:ee:90:bf:db:
5c:87:01:7a:ce:ac:6c:f2:13:96:02:44:a7:fa:60:
9d:99:f8:a8:0f:86:94:c4:72:b2:a2:c5:df:28:2f:
b0:54:7b:cb:90:9d:71:7c:4b:31:2a:19:61:de:ab:
50:18:87:3e:bc:39:74:10:3c:fc:f4:cd:3e:39:19:
90:74:a4:a2:a2:b1:ce:2b:c6:38:dc:37:cd:93:b5:
4f:e7:22:79:2e:8f:ae:7a:87:da:43:fc:71:d4:e6:
71:f7:85:05:9d:61:33:84:be:98:26:a2:1d:1e:a1:
ca:7c:23:5a:f2:da:31:57:75:6c:3b:a4:2e:fc:bd:
70:75:71:d9:01:b5:c7:2a:32:87:82:f8:5f:9f:14:
a0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:53:65:7F:77:11:5D:71:F7:A0:E5:51:1D:17:31:FE:96:AA:96:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/367cf1ae-ec57-3522-ac6f-831949d6aba4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
192.198.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:73:3e:ee:57:38:a8:e4:a0:35:90:6e:17:74:17:1c:67:91:
e1:4d:11:ad:ec:c8:f0:20:51:f9:33:8a:86:b8:24:18:4f:db:
26:d9:76:1e:a4:b6:34:07:2c:2f:a0:60:48:8b:53:88:1b:59:
11:b8:3e:bf:55:8c:eb:17:fb:55:49:22:71:0c:f1:6a:26:1c:
88:41:77:f9:e5:32:9d:5d:d4:b2:64:db:23:c8:53:a9:c0:cb:
2f:ec:2a:6f:f2:f6:02:f8:b4:67:49:43:93:09:c4:ef:1e:80:
8b:d9:b0:99:2a:9b:c9:49:83:59:99:d1:39:3f:f6:ec:fc:c9:
7f:03:fe:ab:2e:dd:92:ed:67:3d:72:4a:03:b7:33:c6:22:33:
50:4e:f8:df:63:28:f5:5c:96:4e:f8:af:45:87:02:ee:d0:0b:
e7:18:88:c5:b3:39:bb:c5:b5:00:59:35:42:3e:19:09:b7:f3:
77:90:7e:ae:c9:27:b1:f6:92:db:d8:b5:21:bd:ac:f3:5f:17:
16:8c:f2:7a:0e:42:5f:6e:a1:fb:52:60:46:62:62:ac:eb:ef:
6c:e2:2c:0c:b8:32:bc:90:3b:07:dd:62:1c:3e:73:09:02:10:
e6:69:a9:da:fb:ad:d3:ff:cd:a8:c4:2b:1b:32:a5:e7:b6:f5:
da:b2:8c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:56:56 2025 by rpki-client