Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4cd47b3f-5824-3c97-8e7d-8c525f6d3136.roa
File: 4cd47b3f-5824-3c97-8e7d-8c525f6d3136.roa (raw, json)
Hash identifier: 7P+iKNJ2WIA6QZPNzerUBPxUwBZlJbQUtKVNkDJBC6c=
Subject key identifier: AF:FB:A8:36:76:1E:30:8B:B6:5A:92:6E:A7:AD:2E:D0:90:29:E5:88
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D126058CA2AD29AADB6100
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4cd47b3f-5824-3c97-8e7d-8c525f6d3136.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 10796
IP address blocks: 24.29.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:26:05:8c:a2:ad:29:aa:db:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=a45ddf59-489a-4f36-837e-6c32597164fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:69:08:39:c1:a9:03:24:ae:00:f0:76:72:55:
a0:3f:3f:6c:62:b8:83:b1:57:5a:d9:7d:ac:c2:70:
ad:cf:5b:a2:32:8a:18:f2:ac:e2:58:96:5a:4b:23:
1e:e3:1f:d6:39:78:12:37:56:83:56:39:f9:7b:cf:
cb:9e:88:83:fb:d6:2d:6e:94:b5:fa:86:58:e2:58:
b1:59:1d:37:e4:3a:1f:b4:36:f4:3c:c0:39:56:5b:
1b:a7:f4:4e:07:b1:41:c3:82:4a:d5:8c:86:a2:f7:
97:3c:83:11:74:80:34:8f:de:07:df:d9:8e:7b:07:
fd:4b:ab:9c:73:63:00:db:7c:1f:d2:53:ab:2f:66:
62:17:a1:6b:53:69:bb:09:c6:4e:b7:40:af:de:51:
1d:03:e8:01:61:a2:b7:f4:28:5b:56:67:94:05:27:
6d:ca:ad:5c:c9:f5:f2:9d:4e:79:95:65:31:76:6d:
27:34:37:ed:a0:9d:a1:06:97:cd:f1:63:7c:3a:37:
df:a9:de:18:52:a5:8b:73:a9:c7:f6:06:25:6d:f2:
fa:59:6e:a7:da:61:4e:a0:57:8f:68:3e:88:08:c2:
32:dd:3b:c7:db:99:fb:4f:67:47:2e:a6:01:76:b3:
c2:8b:9e:39:18:51:bb:3b:58:70:54:e7:7a:a8:46:
ff:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FB:A8:36:76:1E:30:8B:B6:5A:92:6E:A7:AD:2E:D0:90:29:E5:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4cd47b3f-5824-3c97-8e7d-8c525f6d3136.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.29.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:a2:aa:96:dc:9c:f5:e8:39:68:4e:fc:04:14:87:05:a1:bb:
4d:b7:7b:b8:7b:f8:f3:0c:d4:1b:6e:30:b8:57:af:2e:9a:75:
1f:66:32:8a:0e:60:5e:8a:68:5c:6a:58:75:01:e3:ef:40:be:
20:57:c9:fc:d2:91:c8:07:fd:4a:51:1b:0f:01:fd:33:09:4c:
75:40:25:95:01:2f:07:4c:55:48:58:03:a3:fe:92:03:66:8e:
21:53:68:e1:54:48:3c:48:1d:da:d9:ad:0c:11:8f:bd:cc:e2:
94:f7:76:a1:8f:f6:fe:40:41:2e:56:c2:6c:1b:ac:a2:1d:41:
44:29:2e:1f:99:7a:66:55:9b:df:b0:c3:db:75:a2:af:4c:66:
bb:8e:21:2c:24:c7:74:44:04:2f:bb:db:0b:00:75:89:2f:42:
3e:12:00:08:7f:e0:24:00:5f:4d:41:a6:4e:3b:83:c2:0b:55:
fb:d6:bd:bc:95:13:b1:85:fb:66:6d:3a:ba:9d:cc:8e:97:12:
70:68:6f:c5:b7:75:c7:61:fb:bb:78:be:39:5c:d0:a9:2d:ed:
80:3f:d0:ff:72:dd:ab:e5:3f:07:b3:8c:b3:f9:a0:ea:9a:ce:
1e:a2:b2:b4:ff:18:cd:dc:ee:3b:67:38:9e:1a:67:4a:98:51:
7b:0b:d6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:07:32 2025 by rpki-client