Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/428f1dee-67ac-3610-accb-b7bec291704d.roa
File: 428f1dee-67ac-3610-accb-b7bec291704d.roa (raw, json)
Hash identifier: LUbmrMr+uNq6KKKhaH561y0li8exwKv6APcF0wdUze0=
Subject key identifier: AB:BC:34:3B:43:9F:56:C7:77:DC:E9:B6:DC:BE:B2:97:42:6D:69:BD
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1CFD0DAA62175ABDD6D80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/428f1dee-67ac-3610-accb-b7bec291704d.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20001
IP address blocks: 108.178.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:cf:d0:da:a6:21:75:ab:dd:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=da9d9d3b-92fa-4b92-8642-ac5e58fcebb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:53:2c:2b:a5:0e:5d:e8:0f:d1:b7:d7:ac:07:
38:78:7e:52:b5:59:06:ea:53:35:21:a0:28:ff:20:
3e:0e:8e:f1:67:8e:25:c4:bf:99:fb:bb:cc:3b:33:
0b:c7:57:ea:9f:26:26:1d:29:ab:5b:ce:91:67:5a:
db:c8:e5:2c:d7:13:30:bd:04:db:8f:cd:81:6a:a4:
5c:f5:16:57:7c:71:d2:26:67:a2:7f:41:37:cd:73:
ac:56:7e:69:15:ed:89:bc:3a:bb:72:9b:dc:cb:3c:
e4:f7:fc:1a:ec:7b:04:d4:78:c2:d5:22:b3:75:bc:
b0:96:c5:8a:7a:f7:cc:19:72:b2:23:1a:40:03:25:
54:74:1b:8a:d1:5d:4f:fa:74:3f:13:ed:bf:d7:61:
c5:64:d4:52:f4:ba:55:20:e3:2e:28:02:b4:a8:ca:
47:f1:23:01:19:c0:2c:4c:36:e0:82:80:5c:ab:97:
d8:c6:9a:2f:59:ab:b0:63:1e:a4:f0:51:55:9c:b9:
c8:6c:55:63:a5:03:53:53:f8:7f:3d:d3:59:68:4f:
f1:ca:28:8c:b5:99:4b:0e:99:05:fc:3d:73:d0:67:
36:4d:b1:3a:54:40:8c:2c:aa:82:91:ab:3b:2e:61:
b4:e0:c7:c5:cb:b0:a8:9c:f2:67:c5:fd:6d:cc:42:
32:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BC:34:3B:43:9F:56:C7:77:DC:E9:B6:DC:BE:B2:97:42:6D:69:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/428f1dee-67ac-3610-accb-b7bec291704d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
108.178.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:57:f4:b7:bf:4a:a5:11:6a:b9:c1:21:2f:5c:e7:89:84:66:
72:3b:61:4a:74:73:18:88:2b:84:f7:87:ae:93:70:d9:a4:fe:
a0:41:da:f8:ca:8a:30:9a:8d:b3:ef:d7:32:f7:99:4a:04:05:
96:56:3b:d7:03:d7:cd:6a:27:de:bc:3e:6d:63:84:8f:b3:94:
ec:83:79:32:a1:33:08:af:39:b8:74:51:b7:f9:97:63:06:0d:
db:58:f1:57:cc:7c:c7:a8:df:89:54:c2:a1:4e:13:ac:b0:2d:
fa:b7:d8:28:91:30:10:f4:75:c6:b0:8c:40:4c:e3:26:5b:c1:
35:d7:e1:d5:b9:69:bb:e7:ba:b3:c2:98:51:30:d2:87:fb:6e:
d7:6f:a3:5f:85:c4:5f:97:c3:69:13:98:04:5d:b1:a2:67:73:
1f:96:59:e9:99:3d:f6:27:45:a3:25:66:0b:c3:4b:7f:6c:4d:
a3:4f:c8:c3:37:17:a3:f3:64:a0:f6:30:88:9f:cd:e4:be:aa:
c5:21:7a:07:2d:9a:30:84:fc:da:53:46:a7:0f:e3:17:dc:99:
d4:88:6c:da:c0:f0:0a:74:5b:0e:89:35:19:73:a5:4f:62:ab:
bf:02:00:4e:95:47:13:00:84:07:42:ba:77:87:93:91:ca:ae:
20:a0:a6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 01:50:51 2025 by rpki-client