Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3f729655-bb10-362b-aa4e-800a672cc9bb.roa
File: 3f729655-bb10-362b-aa4e-800a672cc9bb.roa (raw, json)
Hash identifier: NxN3l06gy3qXn6OjshB/o+H8QF19fX/oLI1n4yvcB00=
Subject key identifier: DD:28:07:72:32:20:18:29:6D:39:1B:51:19:A3:AD:6F:CC:99:FE:16
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1C5EFF54077CF4989B480
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3f729655-bb10-362b-aa4e-800a672cc9bb.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 11427
IP address blocks: 76.85.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:c5:ef:f5:40:77:cf:49:89:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=33feec38-b0e0-4774-897f-7b412e27287b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:39:c6:3a:45:26:d7:f6:0f:47:63:31:92:4f:
aa:1b:ec:5a:2a:8a:5e:40:8c:56:f7:26:ad:36:27:
47:4f:e6:4b:c5:01:d7:da:3f:f5:44:60:bd:e1:06:
81:c1:81:fb:13:28:12:f1:8f:bc:e0:5a:33:1b:77:
83:e2:6e:5a:d8:af:ed:bd:70:68:14:f6:7f:e0:22:
59:a7:89:c7:2f:4f:aa:bf:fc:b5:db:7b:45:a0:e8:
97:06:a8:4d:0f:a4:9a:35:e8:27:cc:85:77:14:cd:
0b:81:1c:cf:8c:83:de:25:ab:1d:80:60:7e:e0:b1:
26:b7:8a:d1:09:02:74:fc:5d:2a:af:94:bb:0f:e0:
a4:64:cd:12:fc:fa:9a:96:9a:90:3c:aa:8e:83:bd:
d3:37:e1:32:bc:93:40:b0:92:8a:34:71:ed:2d:d2:
00:ac:7e:29:e0:f7:5c:07:bf:aa:23:a4:a7:38:30:
4b:df:db:6c:34:38:f1:2e:46:76:3e:c1:7a:ca:41:
3c:c9:36:a5:6e:b3:8c:b0:c7:ac:6a:77:54:c0:4a:
60:f6:43:4d:33:62:fe:bb:69:e9:3f:65:ba:6a:be:
bb:f7:0f:bc:b9:1c:ae:80:5a:9a:69:fb:26:8e:8b:
03:14:b1:17:05:b2:67:fb:f2:9a:f5:02:48:27:57:
bd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:28:07:72:32:20:18:29:6D:39:1B:51:19:A3:AD:6F:CC:99:FE:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3f729655-bb10-362b-aa4e-800a672cc9bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
76.85.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:b0:61:a7:72:51:ee:f6:0d:8f:c8:f8:f8:bc:75:f9:c0:bb:
e2:76:85:99:08:07:f3:ad:32:6e:3a:67:30:4f:96:61:ee:b1:
3b:2f:ee:99:a8:9b:8d:52:7a:55:90:df:8f:ef:87:96:f8:79:
6a:61:bd:3b:4b:99:8a:ea:5d:47:2b:a7:ad:7a:c2:80:d5:98:
9a:20:12:18:68:65:5a:a5:94:ad:8a:ea:da:6f:2f:fa:e1:31:
7f:a4:a6:8c:01:a1:6a:90:79:05:da:10:e8:10:63:28:90:35:
87:62:61:2b:3b:cc:f0:24:dc:07:58:bc:26:2e:f1:aa:bd:c6:
bf:25:65:98:2b:28:8d:58:93:f4:ae:29:ba:fc:fa:4f:3c:e3:
bc:bf:17:c2:79:c6:8d:7e:f6:d8:ff:a6:0f:49:a1:18:13:da:
cb:97:d8:da:f6:70:a8:34:80:2c:5c:af:04:7c:28:9e:35:db:
d1:7f:2e:ce:fd:28:cf:ad:c9:de:43:87:16:15:66:1b:54:65:
1d:47:09:ba:82:c3:09:f0:11:8a:4f:e9:85:cc:d6:54:48:39:
af:36:b6:9e:d1:ec:7d:c8:a1:4d:6c:18:19:10:65:69:c8:39:
41:69:f2:b9:52:55:ec:af:58:0d:fb:60:f9:83:27:56:32:9f:
fc:28:57:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:47:22 2025 by rpki-client