Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3b8e67ea-8b3a-3e31-b352-24420ae916ec.roa
File: 3b8e67ea-8b3a-3e31-b352-24420ae916ec.roa (raw, json)
Hash identifier: IphWS158VolHKCvNi+f7FwHKfNTHiKsbXDx9OUVga0E=
Subject key identifier: E2:1B:9B:BA:B2:D5:58:2A:93:14:C1:84:8D:15:A3:0E:6B:2D:2E:04
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D14A50A38A1222DF16EB00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3b8e67ea-8b3a-3e31-b352-24420ae916ec.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 12271
IP address blocks: 24.213.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Apr 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:4a:50:a3:8a:12:22:df:16:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=3f142bb9-b35d-44cd-863e-09fe94ddef77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:16:60:ca:89:a7:ba:22:31:b7:b5:cf:e6:f6:
32:ae:da:76:72:1c:ce:a6:7f:87:b3:7d:af:a5:47:
cf:e0:21:c2:0c:14:6d:5d:07:b3:8b:56:9b:f0:13:
84:8c:b4:91:10:44:9d:12:2c:a3:4f:c3:b9:83:9b:
ec:c6:26:a6:b5:1f:ea:12:84:1c:48:15:e4:18:87:
ff:40:23:1e:b2:50:19:7f:c4:83:64:6c:e6:e8:29:
27:45:c2:c6:1c:47:66:df:fa:4a:02:d7:e4:f2:0a:
bf:25:74:b3:59:00:0e:2e:3b:0f:30:e7:cf:ed:d9:
12:0e:f0:ce:98:54:a3:09:c5:a6:7b:e5:b3:08:b4:
2f:6c:22:b6:91:c8:ab:3e:27:49:e4:b1:0e:58:46:
2d:be:5f:d8:f7:62:a9:0b:5f:83:22:11:b0:03:80:
84:06:ac:51:ff:76:0c:91:4a:9a:17:9f:30:a9:15:
e7:0e:35:69:9f:cf:44:b6:b1:04:73:67:6f:f2:5e:
58:80:a2:52:d0:32:da:12:ca:ee:45:1d:46:de:d4:
57:81:76:4d:56:9e:b2:13:c3:9a:7d:8a:0b:cd:c7:
a0:b1:a0:39:a3:f5:eb:ac:f0:8b:16:b2:a5:e7:35:
c4:eb:8e:cc:83:e0:22:10:d6:e7:94:c3:79:db:32:
7c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1B:9B:BA:B2:D5:58:2A:93:14:C1:84:8D:15:A3:0E:6B:2D:2E:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3b8e67ea-8b3a-3e31-b352-24420ae916ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.213.174.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:b7:73:d2:37:65:75:85:2f:42:8c:48:3a:9e:b2:2f:51:37:
9e:5a:23:dc:72:51:09:5d:31:46:e7:ff:dd:84:56:e6:1f:8e:
aa:e0:82:59:22:2b:3b:7b:05:a9:b2:8c:e2:14:15:c8:e9:b2:
64:8b:ed:1c:09:72:a4:87:e3:bd:60:66:6d:c8:7b:90:11:66:
58:a7:57:34:6c:b8:43:3a:79:8c:f3:c2:70:b4:d9:1b:3a:0e:
77:e7:64:ac:5e:41:d4:a3:45:7b:96:1b:74:da:f7:cb:ca:70:
5c:b7:4f:41:c7:08:db:4b:60:86:2a:c4:53:4e:86:13:8e:f4:
a5:42:6f:34:78:ea:b5:25:a1:cd:ff:b6:f9:25:b6:9f:04:8e:
66:16:25:c0:cf:fd:69:37:24:d2:b6:03:c5:5e:02:e9:87:43:
d9:b8:cd:05:55:ce:17:1b:60:3b:44:76:dd:37:25:56:00:b1:
21:b8:31:2d:a3:01:45:0a:64:a7:ba:f0:22:77:ac:1f:cc:47:
2a:3e:a4:1a:67:58:e7:8d:76:c6:d4:cd:ae:2b:22:8f:23:e2:
60:58:ab:5f:ce:95:ce:fc:7b:db:93:af:d2:23:94:34:38:45:
77:90:1f:a9:66:d5:1b:bf:12:01:e7:64:ee:b8:33:2d:b3:a4:
e3:81:43:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:37:59 2025 by rpki-client