Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/38bc4375-a7c1-32a9-a2ec-3aaaeb2b50ba.roa
File: 38bc4375-a7c1-32a9-a2ec-3aaaeb2b50ba.roa (raw, json)
Hash identifier: puBosP07e8/mwccqfwt3z+ZM9heE6qKoiZEPyGBjyig=
Subject key identifier: 0A:18:EF:44:D3:2B:46:9D:78:67:76:F2:0D:C9:18:F7:4E:4E:6F:EE
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D14B659E3C350777982F40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/38bc4375-a7c1-32a9-a2ec-3aaaeb2b50ba.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 16787
IP address blocks: 107.14.176.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:4b:65:9e:3c:35:07:77:98:2f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=f347c58e-e669-424d-b2df-460b8dab48aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:94:2f:90:73:e6:50:73:5f:52:26:cd:40:f1:
60:97:5f:3c:14:82:c5:42:ec:37:b9:a7:43:54:c3:
31:2e:43:66:24:0f:d9:36:67:a2:2f:fb:42:84:eb:
c0:f8:d7:ff:49:61:e1:c9:0b:8d:e2:c4:60:02:6e:
f8:19:dd:13:54:88:3e:72:5d:a8:6b:ad:20:b1:fe:
fc:3a:86:54:1d:9b:1b:c5:35:db:6d:7d:a8:da:05:
7a:f9:5a:50:36:86:81:5e:27:04:f5:44:a7:53:6e:
6c:a4:0e:31:0b:6e:0d:ae:b8:f2:85:e5:68:95:bf:
58:f7:86:96:5f:e7:40:70:a0:c3:f1:6d:b8:9d:b4:
68:44:b4:13:77:84:20:e0:c7:4e:46:0b:78:c4:f0:
23:1d:4b:51:e8:1d:ac:44:46:00:e8:62:e3:34:81:
b3:06:bb:87:ef:29:0c:49:3f:11:3e:21:c7:8d:2f:
73:9f:a0:bf:09:81:5a:e8:be:89:25:3d:e1:ce:05:
fa:64:18:45:ff:a7:21:43:40:ae:aa:ca:70:73:08:
3c:50:dc:64:b6:3e:a5:27:5c:5d:b3:88:67:cc:9d:
31:36:96:c0:18:eb:4d:68:9c:06:c9:91:ea:6f:e9:
74:03:a1:32:44:8c:77:20:41:38:26:33:ba:3b:a8:
8c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:18:EF:44:D3:2B:46:9D:78:67:76:F2:0D:C9:18:F7:4E:4E:6F:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/38bc4375-a7c1-32a9-a2ec-3aaaeb2b50ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.14.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:ec:8c:51:e7:4c:27:7d:7d:c4:4c:6d:23:ec:be:f9:21:d4:
03:a7:56:08:e8:02:84:4c:5b:06:02:5d:37:6e:fb:bc:82:0a:
51:6f:ef:51:95:b8:d4:ea:f5:be:c3:36:11:8d:07:30:98:54:
5f:13:23:84:e2:3e:75:24:c5:1e:a7:f8:8c:f8:7b:3d:c0:06:
9a:89:46:ca:df:aa:71:59:e6:cd:33:f8:38:42:37:55:0c:4e:
60:31:16:7d:9f:0c:10:60:ab:d1:de:02:0f:c6:61:9f:0a:41:
cc:c4:ba:15:cd:33:61:88:45:c9:69:61:55:cf:72:eb:fb:ef:
35:17:5d:db:2f:57:26:7a:57:2c:95:41:d3:32:f9:f7:3d:bc:
41:74:d7:80:5d:75:1d:53:76:76:2b:2c:21:51:00:7a:fc:81:
ac:bc:6c:e9:d5:fe:10:40:7a:ba:30:cf:30:a1:fc:4d:49:33:
6e:68:fe:9a:d7:7f:d0:4a:9b:5c:7b:88:2f:44:d9:8b:1a:26:
60:f5:22:de:e0:19:d9:fe:17:7d:8c:84:b2:e9:42:b8:ff:3a:
59:6e:a6:bc:a6:f9:18:9b:65:7f:e5:df:8c:81:f5:26:5a:a8:
b1:da:bf:c9:16:4b:30:fd:54:ec:fb:a8:93:52:70:b9:af:68:
8e:ea:2d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:21:10 2025 by rpki-client