Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5a2b800a-8d26-332c-9174-4832c674ddd8.roa
File: 5a2b800a-8d26-332c-9174-4832c674ddd8.roa (raw, json)
Hash identifier: TjOPs+rrhbImeBFuetAJqjzcWQdmL0ocIhJyjUGmwtE=
Subject key identifier: AE:6B:6C:A7:03:82:66:CA:98:E4:B7:DA:F2:BE:0E:1D:51:38:85:4B
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1BD6A80BEBB252BFCBF40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5a2b800a-8d26-332c-9174-4832c674ddd8.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 11351
IP address blocks: 67.247.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:bd:6a:80:be:bb:25:2b:fc:bf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=dd569531-f5d0-4113-bac1-18671bd95261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:79:23:18:bb:b2:e3:a3:3b:9d:86:b0:b8:f1:
07:24:8d:47:c6:4c:0b:95:9f:bd:ea:8b:7c:04:d0:
61:b4:d9:35:fb:d0:1a:92:a6:4d:b7:37:58:5f:d1:
f8:0e:44:5a:47:79:98:0c:2e:02:2c:98:5a:ed:e0:
d2:f5:4c:91:ea:be:25:55:04:45:a9:07:11:65:77:
0f:5e:bf:96:87:49:74:42:44:73:05:74:36:11:63:
91:c5:06:7e:50:f1:29:e6:c2:bc:e8:27:8d:05:86:
ef:c8:e8:5b:40:a6:eb:d3:f6:81:2c:fc:24:64:49:
da:a0:27:3f:9f:8b:74:18:b8:3e:75:3f:d0:78:fc:
80:e3:7f:0f:2d:87:1e:8f:34:68:f0:d2:b8:8a:6a:
a7:d2:f3:3e:be:c6:77:b1:4b:87:b6:39:69:df:d5:
40:de:35:16:87:e6:9c:af:b3:ef:fe:0e:e4:f6:39:
da:a1:4b:96:78:8c:04:81:58:6c:f3:c6:80:c5:58:
9d:d1:af:fb:3f:50:c3:3e:df:a0:03:34:8a:7b:b1:
49:54:10:b5:02:55:13:52:df:5b:b1:19:98:42:28:
4e:84:24:e6:5a:57:9c:8a:98:d1:c9:60:94:46:df:
c2:1e:25:56:4a:67:e6:6e:91:7a:95:1a:86:52:52:
5b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6B:6C:A7:03:82:66:CA:98:E4:B7:DA:F2:BE:0E:1D:51:38:85:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5a2b800a-8d26-332c-9174-4832c674ddd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
67.247.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:84:ff:2a:db:64:6b:a0:bb:93:af:3c:ab:c4:d8:c8:70:69:
64:16:29:56:f2:3b:4f:60:76:51:12:15:fe:8c:e4:eb:94:bd:
01:5e:f5:72:5a:48:7b:0f:72:fc:69:c1:04:d6:68:6e:4b:af:
e5:1c:57:0a:80:71:3d:c1:f7:03:a2:af:0a:0b:45:05:d4:c4:
39:39:a5:2f:09:01:e3:d8:92:aa:61:0f:83:26:b8:ea:20:b8:
56:4e:5e:fd:91:3f:f1:83:58:7e:cf:c0:f7:fe:b8:e6:1a:ae:
b0:57:4d:23:30:8b:57:94:e9:f1:bf:1e:e3:db:1d:8f:b1:54:
01:58:a3:3f:8e:a7:cc:1a:6e:ad:35:39:c4:e4:a2:f3:b3:75:
a8:89:a5:55:55:89:b5:58:5f:46:6d:7e:02:cb:3d:11:0b:7d:
d1:a4:a0:46:13:60:72:c5:89:76:f4:07:2a:ef:76:46:18:cc:
85:ba:02:81:69:ed:8c:15:93:53:df:a0:bc:73:4d:24:81:f2:
97:91:ec:dc:69:d7:59:f6:9d:1d:63:23:19:05:37:8f:95:9d:
bf:0c:6f:3d:3f:df:07:07:e2:26:c7:40:e6:f5:1c:83:fd:c9:
92:11:bd:70:ba:a5:65:f7:19:ab:9d:d8:a3:ee:ce:1b:86:fc:
8b:0a:33:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:09:49 2025 by rpki-client