Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/68d06cb4-4542-302a-aa0c-a5a2268c6e9f.roa
File: 68d06cb4-4542-302a-aa0c-a5a2268c6e9f.roa (raw, json)
Hash identifier: i2KXP2tZnfdwbuHlaOAfSFGhd+xbeKufoutiWj4uMbc=
Subject key identifier: C7:B3:75:70:F6:22:90:44:B9:A2:9B:08:B6:F7:29:9D:54:98:40:7B
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1AB557DAC764C5FE619F8
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/68d06cb4-4542-302a-aa0c-a5a2268c6e9f.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 8052
IP address blocks: 107.14.86.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:ab:55:7d:ac:76:4c:5f:e6:19:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=3b276701-04b9-4bba-ba33-03e3f1b01786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8f:95:42:fc:1e:b1:16:6c:ce:66:a7:0d:31:
85:05:5d:cf:bb:22:9d:ec:28:b1:93:47:13:1a:36:
a6:1f:42:d4:ac:65:20:26:79:c9:99:b0:d9:06:e5:
40:cd:8c:75:60:0c:d0:bb:8d:ac:b0:04:ca:c2:63:
1c:26:af:c5:d4:94:ed:5d:b4:bf:60:fb:17:fa:18:
e9:5e:60:9c:5d:81:fa:18:45:63:4e:54:3f:97:f7:
58:76:b8:97:6f:1c:2f:51:1c:b7:d5:b1:89:b2:23:
34:b6:15:74:95:08:7c:77:2d:3e:ad:25:f6:79:91:
6e:18:45:af:e1:bd:74:d1:1d:d4:11:91:c0:85:b2:
8f:10:5b:8f:e1:52:c0:c2:97:ed:39:14:4d:46:f7:
de:06:a0:25:44:e7:31:07:94:1f:8d:3c:c4:75:ce:
4e:a5:02:e4:52:eb:35:c1:fb:4c:66:f4:35:f1:10:
c9:4a:04:ad:7e:73:3d:2f:66:e5:a2:3d:ee:f1:c5:
6b:b9:c5:23:2a:62:50:cd:c0:46:15:e5:f1:c0:2f:
75:2e:76:80:0b:fe:f4:05:e8:29:93:49:b4:e1:03:
9a:1d:93:e1:7a:ec:3f:c2:d6:1e:7c:40:b9:97:98:
80:a2:00:cd:20:4a:68:09:5d:21:77:7a:14:c2:ac:
c5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B3:75:70:F6:22:90:44:B9:A2:9B:08:B6:F7:29:9D:54:98:40:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/68d06cb4-4542-302a-aa0c-a5a2268c6e9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.14.86.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:34:71:22:68:6e:46:91:a2:ee:ed:38:63:d2:db:fe:1f:58:
3e:d4:41:7a:bd:b1:db:f7:31:50:5f:cb:34:4c:a0:05:a6:86:
7b:5b:1c:c4:70:3f:4d:62:f0:7f:29:67:f3:0b:73:39:d0:ff:
d1:c7:b1:ab:e3:58:dc:25:43:49:d3:c8:78:76:97:90:65:46:
7f:f3:5c:a5:dd:96:98:dc:2d:27:fc:65:38:59:34:75:2a:1b:
24:19:1c:c5:45:90:ad:4d:53:22:b1:16:f5:90:0f:eb:6b:0e:
07:9d:84:1f:c2:4d:70:5d:c2:2c:26:c3:39:27:22:85:8a:82:
65:5a:db:ee:85:ee:59:50:b6:5e:c3:63:e3:73:3d:7c:77:4b:
bc:54:2a:d4:e2:66:1e:39:21:28:84:23:97:65:a6:f8:4a:09:
01:b9:39:40:21:6a:00:83:73:13:36:53:64:2c:30:c5:0b:bf:
fc:34:74:41:47:46:25:08:ae:88:01:22:2a:47:4b:d7:95:08:
54:63:a7:ca:4b:74:fe:75:60:e1:4e:c0:81:1b:08:97:7c:6e:
c2:36:72:67:12:53:3a:ae:3e:06:e4:49:e2:63:47:6d:0d:0c:
c6:e9:e6:6e:f6:1f:fe:67:f9:e3:f2:2f:fa:ac:a2:6f:d0:34:
fd:2b:cc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:29:23 2025 by rpki-client