Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/554d3506-3128-3e6f-9879-458782e58ddc.roa
File: 554d3506-3128-3e6f-9879-458782e58ddc.roa (raw, json)
Hash identifier: j3gLejAVglCc+gS3FcK719+yH4JijbBUAt7YzojGbF8=
Subject key identifier: 91:00:B7:85:26:47:D5:B0:FC:90:E7:0A:DE:44:CE:AF:22:8F:D0:E0
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D150AE24A2DE9543D44D58
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/554d3506-3128-3e6f-9879-458782e58ddc.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20001
IP address blocks: 173.196.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:50:ae:24:a2:de:95:43:d4:4d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=86b5560a-1e24-43d1-9940-d23b7847e726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7e:9a:42:0a:20:6d:be:cb:10:a2:0f:be:0b:
c0:19:aa:77:52:8c:63:33:c6:9a:2a:7a:06:81:ba:
98:98:d9:ec:35:92:3e:5d:e5:cb:bb:84:83:c0:b0:
22:a9:56:8b:71:0b:34:89:b9:fc:07:91:7c:21:d7:
27:ff:ee:f1:3f:72:3c:0f:2c:cf:dd:84:fa:68:22:
ae:65:01:4a:aa:1c:ae:b1:d8:18:d4:d1:41:19:99:
4f:67:60:cc:a3:5f:24:7a:95:9d:bf:31:9e:49:b6:
0c:94:73:d6:33:8b:9b:cb:e1:7f:b5:e7:f3:a2:ff:
85:a8:fc:0b:36:ff:8c:ed:d9:7c:bf:40:ec:c6:bb:
b7:a3:91:b3:68:15:d0:8b:17:37:7e:c9:1b:73:8a:
b7:2a:9c:47:f3:40:9b:0d:97:3d:2a:51:9e:11:03:
84:d7:b0:2d:e0:5f:09:30:39:e3:5e:2a:9a:94:01:
8a:af:2b:72:4e:d4:9e:0d:0b:12:67:34:fd:2d:9f:
87:e6:f0:ec:73:71:05:90:e9:df:44:95:fb:4f:ce:
e6:c9:cf:9a:cd:dc:f9:8c:90:7d:20:37:24:b2:20:
f3:c1:b0:82:94:c1:37:1a:56:2c:10:e5:9a:11:03:
b9:e6:9c:c9:6d:d6:5e:e6:93:9e:84:d2:61:f1:26:
0f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:00:B7:85:26:47:D5:B0:FC:90:E7:0A:DE:44:CE:AF:22:8F:D0:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/554d3506-3128-3e6f-9879-458782e58ddc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
173.196.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:aa:eb:96:22:7a:64:93:90:fb:b2:7f:ae:ac:43:1a:e5:f0:
97:8e:07:ad:97:a1:32:63:a0:98:12:5a:cb:e1:9a:01:94:a2:
73:c5:c9:aa:22:18:9e:24:33:66:e8:8a:52:78:06:78:64:12:
d4:09:41:59:ea:81:f9:89:f5:41:06:ac:4b:00:6a:a3:1a:c3:
c3:c8:b4:1b:10:38:c3:44:5f:b0:e0:0a:1d:a6:86:fa:30:92:
4f:75:4e:ff:5a:9c:07:11:a6:3a:36:e9:f5:51:d8:38:5c:8f:
52:0c:5f:f7:bf:61:88:8b:fe:ce:c2:04:1f:e8:c6:d1:46:ea:
3d:2e:db:0a:60:d4:45:c4:d5:84:2d:d4:c2:c3:4f:97:3c:26:
84:c6:f9:90:f6:20:5b:46:50:0f:1f:f7:6b:72:50:75:31:24:
0b:bc:e6:c3:87:f1:8d:5a:42:3c:7d:b8:89:67:ea:2a:09:76:
30:45:8b:56:01:04:a3:a4:17:c8:e3:12:f2:d3:5f:4b:52:d5:
4b:5e:64:74:48:15:a9:e8:16:df:b0:f0:d5:fc:9c:5a:b8:ff:
db:09:08:a7:59:ed:5e:f9:78:be:46:44:63:bd:4f:5d:b4:d0:
8d:6f:6a:db:c4:48:d4:ab:f3:f2:32:37:c5:4c:e7:7d:e4:c8:
07:16:24:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:13 2025 by rpki-client