Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3dc7f112-dca5-3bfe-a344-6bf0bec4e50b.roa
File: 3dc7f112-dca5-3bfe-a344-6bf0bec4e50b.roa (raw, json)
Hash identifier: SZwYEf4EycHfqz5DWW42O/OA5wNAPVl29hoEfzeNlSc=
Subject key identifier: 7B:64:87:A9:8A:2E:7E:98:A5:5F:04:DB:BE:6A:BA:D6:30:7B:36:50
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1B5129DD3ACBA79335CA0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3dc7f112-dca5-3bfe-a344-6bf0bec4e50b.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 10796
IP address blocks: 71.72.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:b5:12:9d:d3:ac:ba:79:33:5c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=4ac422fc-31bc-4d1e-9d1b-813c51c7894c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a4:3b:17:03:f5:3d:d6:2e:b5:a0:65:89:e2:
33:f6:7f:b8:21:ff:78:91:19:66:a9:4e:7e:46:c4:
53:05:41:e3:0f:33:8d:8c:3f:8f:f0:e9:4c:76:d9:
00:53:fa:85:05:30:7c:dc:71:4b:9a:48:db:a1:f6:
33:1f:60:96:f8:e8:e8:6c:5e:2b:42:09:26:22:a2:
46:55:74:fb:20:b3:72:b7:d9:a4:f8:47:68:df:09:
1a:8e:cb:2d:51:f5:23:06:2c:5b:e8:70:c2:6a:7e:
84:f4:87:34:1d:28:73:84:72:14:25:ff:e9:0c:5f:
92:47:22:0d:f8:86:26:85:e3:21:63:fe:a8:5d:a6:
7e:97:a4:44:f1:60:36:12:14:60:4c:80:34:51:fa:
48:9d:e5:d7:c2:61:0b:ef:c2:27:88:ab:03:e8:e0:
e9:f1:58:b8:f4:03:6c:df:1e:b8:01:bd:e5:e9:06:
c0:2a:60:20:5a:46:4f:1e:12:81:ef:60:ed:e5:e9:
c8:2f:96:b1:b0:af:08:39:46:60:8b:38:3b:e1:7f:
3d:e5:d4:1e:f8:b0:91:af:d8:26:2d:d9:24:d9:38:
5c:f0:7b:7b:d1:3a:50:99:16:ff:45:6b:77:f4:89:
75:f4:86:01:fb:02:6a:91:ff:54:26:76:d3:fb:12:
b6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:64:87:A9:8A:2E:7E:98:A5:5F:04:DB:BE:6A:BA:D6:30:7B:36:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3dc7f112-dca5-3bfe-a344-6bf0bec4e50b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
71.72.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:c7:42:6a:67:7e:e5:7c:bf:02:f8:9d:54:0d:de:c9:73:41:
26:23:80:b4:9c:21:f5:57:6c:9d:16:5e:60:bc:aa:c2:94:a6:
b3:88:d6:8b:ed:db:d4:ff:3d:7e:02:dc:2a:95:2a:c3:8f:3c:
f7:5a:0e:ec:e5:73:6f:84:90:22:bd:e2:dc:35:ea:43:0d:e8:
35:c8:fd:e6:de:7d:10:2d:9f:8c:3b:a7:00:19:2e:55:f9:64:
1c:44:21:5b:3d:23:95:33:e7:d5:54:1c:7b:53:f9:3e:7f:9a:
0c:57:01:e4:7e:6a:c6:e8:6e:00:13:7e:08:0d:28:ca:df:4b:
9c:d3:63:6c:f7:27:58:ff:31:01:06:57:59:a8:91:69:8d:be:
fe:ed:f5:e3:bd:b7:aa:52:92:0a:be:b5:a7:7b:ba:bf:62:14:
5d:4f:43:40:4b:a2:e7:95:27:1a:92:3b:5d:3d:54:60:e0:f3:
74:c9:e6:da:c6:b8:97:dd:63:80:36:d6:fe:37:b7:6c:be:db:
a8:25:83:f1:63:cc:8b:6a:59:7a:0c:d4:14:4f:bd:36:2e:68:
1b:a6:57:08:b3:3b:35:3d:2a:bf:bd:ab:7b:27:bf:61:ce:28:
09:57:4c:36:ad:a8:26:98:cc:5d:9f:ca:44:8f:67:1a:21:e0:
fd:77:f4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:21:06 2025 by rpki-client