Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/39ffd4a5-ffba-3b24-8e4f-f8e2d344c0c8.roa
File: 39ffd4a5-ffba-3b24-8e4f-f8e2d344c0c8.roa (raw, json)
Hash identifier: xrXZhxTOw9Riy4g3BFocSc80poX0ui3Buf1jXGWXk+c=
Subject key identifier: E7:F0:95:49:3E:E8:60:D5:C5:93:70:56:8E:60:73:BB:76:39:4F:8E
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1A7B116F1FD018F9F8680
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/39ffd4a5-ffba-3b24-8e4f-f8e2d344c0c8.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 3456
IP address blocks: 204.235.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:a7:b1:16:f1:fd:01:8f:9f:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=b2aea5a8-a29f-4008-a353-b9c8ba6b8fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:02:a4:a1:4d:4b:22:13:1f:b7:62:54:a3:
2c:62:91:15:30:84:e1:9e:d3:7b:23:2b:a9:c6:91:
17:1e:a1:0b:3f:17:60:5b:b8:11:e5:aa:4d:0d:7c:
1d:78:4f:fe:3f:0b:dc:51:c1:40:29:06:18:34:20:
14:bf:f3:ee:53:c8:9a:8c:35:0f:63:75:29:2a:8c:
5f:15:47:cc:31:17:f0:d0:74:4a:ad:b9:4d:9d:f6:
67:05:ac:52:29:47:23:5e:79:a9:ce:05:9d:41:88:
4b:09:46:d3:71:bd:52:62:59:a6:95:44:55:c7:d0:
93:55:d6:09:0f:61:c6:d9:78:60:88:57:e7:b6:5c:
41:a1:02:11:81:ad:32:07:7a:ab:ca:48:ad:04:41:
34:6f:ef:f8:da:08:f2:23:33:6c:66:86:08:90:5b:
29:56:7d:3e:17:ae:a6:d5:41:d6:89:df:54:c3:6c:
2f:e7:37:c7:fc:8f:72:24:82:c1:47:8c:3d:58:cf:
94:1d:74:fb:b7:e1:39:6b:c7:80:7d:a8:62:fc:77:
c3:d2:d3:a1:b7:de:b9:32:d0:70:8c:54:d7:61:4d:
de:30:e8:64:3a:aa:0d:c6:3e:fd:b9:f3:86:05:8b:
7e:44:16:25:cc:2c:19:7d:a3:dd:92:ef:06:40:d5:
96:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F0:95:49:3E:E8:60:D5:C5:93:70:56:8E:60:73:BB:76:39:4F:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/39ffd4a5-ffba-3b24-8e4f-f8e2d344c0c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
204.235.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:65:43:d9:de:a7:fc:b8:52:a5:e8:64:78:54:a7:a5:b0:7c:
b1:7b:3d:7a:54:ef:f0:4e:77:e9:17:e9:32:3b:ad:96:b2:41:
ca:b6:48:6b:0f:58:06:0c:1e:9e:e8:15:a0:73:68:9e:fc:28:
ae:d2:4d:96:05:9d:07:c7:8a:38:58:40:71:51:a1:76:a7:43:
cc:1d:f4:1c:93:3c:ef:d4:b2:d8:89:f3:76:05:3c:dd:06:4f:
00:a8:4b:ec:91:28:dc:6a:b1:bd:1e:d2:33:db:3c:cf:05:ac:
c6:c8:5f:0a:59:b3:4f:ec:0d:38:49:4d:d5:cc:a8:8c:aa:d5:
d1:d8:e6:11:65:68:1d:d5:ac:fc:f1:c7:02:11:99:8a:61:b3:
e8:ee:c0:4e:ca:5e:9f:da:e2:4c:41:99:a0:45:e7:a7:54:d0:
ea:20:cb:36:7d:63:67:03:3a:e9:e0:57:f6:8b:69:fc:2b:7b:
a9:59:c9:ea:0d:c9:e0:a8:22:f5:86:b0:f3:ac:25:92:f7:91:
6a:f1:c1:19:a3:75:1c:c5:2f:58:b7:4d:92:8b:8e:8b:12:dc:
e7:7f:f8:7e:55:0d:23:5a:13:54:c4:a5:0d:09:4b:d0:9d:ae:
b1:f4:b1:bf:67:f7:3c:e7:15:e1:22:e4:a2:27:6e:69:83:7c:
15:07:32:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:29:33 2025 by rpki-client