Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4d0ee263-72d7-3551-b175-d1110f1d196e.roa
File: 4d0ee263-72d7-3551-b175-d1110f1d196e.roa (raw, json)
Hash identifier: 9e3QRq+a+2oJg1DeFTPQWHrBAzU3cElb12V72niuReQ=
Subject key identifier: 42:5B:77:7A:63:BB:C7:A6:AE:37:74:13:87:EB:20:A0:3D:A5:78:27
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285838FFCEECB3AF8127D9D49AF780
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4d0ee263-72d7-3551-b175-d1110f1d196e.roa
Signing time: Fri 19 Feb 2021 05:00:00 +0000
ROA not before: Fri 19 Feb 2021 05:00:00 +0000
ROA not after: Fri 12 Feb 2027 05:00:00 +0000
asID: 10796
IP address blocks: 24.123.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:ff:ce:ec:b3:af:81:27:d9:d4:9a:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 19 05:00:00 2021 GMT
Not After : Feb 12 05:00:00 2027 GMT
Subject: CN=2fb17245-b488-4647-bd07-1a8d0906f179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2c:23:bd:ea:dd:57:47:8b:8d:ab:c8:2b:59:
a3:4d:a2:51:11:59:43:8f:ef:54:39:cb:22:b1:d5:
78:c4:b1:0d:f5:0b:79:4c:65:01:54:42:43:a4:d7:
82:51:24:74:3b:bd:13:27:05:0b:95:1c:3b:eb:43:
da:49:f0:8d:e4:5d:c4:53:27:49:87:f5:25:b2:37:
f8:d3:af:29:5a:9f:fa:35:2a:71:3b:d8:79:b2:bf:
db:cf:7e:58:cd:2c:d6:cb:69:15:a5:df:2c:13:ff:
b2:33:98:09:cc:86:ce:91:dd:55:85:53:30:d6:ec:
ea:b9:5f:7c:7d:ce:7f:13:d5:cb:65:5e:4b:a3:50:
6a:db:1a:45:35:cc:f6:81:dd:0f:6e:40:92:8e:bf:
25:08:72:db:33:66:ec:e6:cc:fc:cf:1d:9e:81:e3:
4a:25:4a:68:7b:86:0d:f8:4e:4c:68:ba:5f:37:e3:
35:2f:ff:fe:0b:6a:86:7e:06:15:af:c3:ed:e0:7c:
82:40:94:01:2b:0f:96:52:5d:8e:69:d8:c1:63:30:
66:71:2a:d6:2a:69:ce:c8:bb:d5:6c:e1:d0:bb:4d:
56:6a:82:dc:ad:93:d4:f7:d4:36:c9:3a:f1:94:0f:
3c:29:4f:15:e2:b6:06:05:b9:e7:a1:f9:3d:74:32:
59:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5B:77:7A:63:BB:C7:A6:AE:37:74:13:87:EB:20:A0:3D:A5:78:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4d0ee263-72d7-3551-b175-d1110f1d196e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.123.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:87:ed:e2:6b:ad:40:91:d3:07:1d:fb:55:18:3a:82:51:0d:
d3:cf:b2:26:2d:1c:a0:5b:f4:23:e8:0d:d6:aa:98:fc:d7:79:
5a:0e:ad:87:76:bf:25:54:4f:7d:a7:b7:68:91:db:a2:f2:51:
8f:5a:c4:77:47:7d:a1:b9:7c:e3:18:c3:c8:de:89:13:43:0f:
98:bb:61:bc:22:28:53:a2:f5:a6:6b:46:6d:f1:53:14:5f:75:
13:58:9f:a6:96:66:5c:d6:57:fc:3c:e7:c1:a1:16:48:bb:60:
06:5a:6f:c6:97:b6:ff:af:c0:2e:32:43:88:3a:95:17:c4:71:
c9:c6:52:70:00:c1:4c:41:1c:54:f5:75:db:04:b7:fa:43:e1:
83:3f:f3:c5:9b:c3:79:04:04:0d:46:68:9c:dd:cd:43:e9:7f:
4f:26:19:c8:c9:89:18:55:41:b3:32:cb:85:39:e3:68:15:ed:
35:72:5f:fb:ab:70:fc:81:c5:7e:b0:9a:85:31:07:c1:0a:84:
4d:ef:7d:95:75:3c:25:be:92:34:5b:c0:da:a6:43:fd:66:57:
51:33:31:0f:d5:97:db:be:3f:c7:09:89:b9:a2:a1:0f:6f:da:
90:da:50:00:1e:de:9b:99:a9:fe:ec:d9:9c:e5:5d:57:51:5f:
4d:11:7e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:00:08 2025 by rpki-client