Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5badb481-5cb3-39ef-9663-7f77c4b6e0cf.roa
File: 5badb481-5cb3-39ef-9663-7f77c4b6e0cf.roa (raw, json)
Hash identifier: wKVzcg3O3oVgmJtbCendgtHR+bgVs3QYyDmcfZsk8oQ=
Subject key identifier: F3:06:88:17:74:BC:B1:5A:8A:2F:2B:19:11:F5:15:80:CF:0E:39:BA
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1CBAAE054467920D97700
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5badb481-5cb3-39ef-9663-7f77c4b6e0cf.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 13343
IP address blocks: 24.166.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:cb:aa:e0:54:46:79:20:d9:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=855c0609-e698-4873-a03c-77b13e742cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8d:95:26:77:d5:bc:a2:d1:0a:09:bc:c8:02:
39:6b:83:57:03:68:9c:ff:88:76:f2:ed:34:64:65:
44:ad:4a:f7:0c:c2:04:64:27:a2:da:63:d4:68:f3:
ea:98:b1:61:cd:b7:37:4a:58:fa:f7:a4:9d:ce:9e:
2e:c5:db:a4:62:f7:2a:5f:ea:07:9c:18:78:40:bc:
de:03:bc:97:85:81:9d:5e:19:2e:66:69:67:12:c3:
53:fc:90:ba:a7:a7:c0:3c:3c:9c:e8:1d:87:0e:30:
0e:2c:1c:68:8e:f0:01:f7:4a:8c:f2:3a:1c:12:02:
b8:10:a3:a6:2b:67:6d:da:62:dc:ce:99:d3:07:ab:
e8:1f:09:23:ca:39:3d:e3:63:94:e7:c7:bf:46:3d:
9a:37:56:4b:e3:be:5a:c2:6d:18:59:a3:81:dd:86:
fd:d6:af:f3:a7:90:00:a7:d9:b4:d0:a1:b8:76:0a:
16:04:c1:53:c2:a8:04:84:40:92:a1:e4:0e:14:3d:
31:52:0f:b5:06:32:90:9f:31:16:ef:5a:d5:a2:0a:
0d:9f:70:0f:c9:41:3d:f6:3d:69:64:3d:af:48:6f:
0b:ad:95:ba:80:a5:d9:f4:89:22:44:ad:6b:ea:60:
d2:a3:71:c4:77:cb:1a:20:08:80:bc:e3:b7:f1:ea:
f8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:06:88:17:74:BC:B1:5A:8A:2F:2B:19:11:F5:15:80:CF:0E:39:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5badb481-5cb3-39ef-9663-7f77c4b6e0cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.166.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:df:12:36:89:cc:51:86:f4:2a:fb:33:4a:84:5f:e0:84:e0:
c7:55:53:01:94:bb:c5:f5:0d:46:86:5a:a9:72:fd:98:e5:57:
32:df:f1:48:9a:8d:c8:86:17:11:71:8b:d1:1a:24:58:ee:66:
4a:7a:68:6c:0e:62:68:60:b6:cb:8f:25:b3:e2:71:33:c3:ce:
0c:3a:d3:79:4a:91:0e:0a:b9:c9:9a:bb:58:6e:a4:af:3d:01:
84:06:5d:02:77:b1:40:53:bc:42:71:9f:84:27:e9:5f:a8:aa:
22:6d:fa:76:d6:ec:78:51:4d:e1:bf:63:9b:7f:18:ee:f8:a0:
28:70:dd:3b:a4:b4:a5:68:91:9b:0f:6d:1d:48:08:3e:0b:76:
63:dd:83:57:5e:f9:08:03:dc:37:b6:33:91:f4:ab:05:e2:5a:
07:b0:79:7f:24:91:5e:6b:ea:4d:bf:fa:36:95:6e:32:03:68:
16:8b:4d:2b:08:f0:fa:d7:fa:21:d0:72:60:00:0e:1b:4e:f4:
30:eb:42:eb:09:24:87:d4:f3:f8:b6:f4:44:56:f0:db:55:33:
52:bd:02:59:f8:1b:7f:ea:df:9f:0e:d6:ba:03:4e:3c:f2:65:
ed:45:82:3a:a9:e9:0e:2f:f6:8e:e7:53:be:de:9c:15:e2:1a:
01:c6:f5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:47:13 2025 by rpki-client