Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6c8fd131-0bd9-3680-beb7-adc633cba0af.roa
File: 6c8fd131-0bd9-3680-beb7-adc633cba0af.roa (raw, json)
Hash identifier: 5JuXOka17geSWGYI2PBpja782rlvf8mpnltuwPK5Drs=
Subject key identifier: 22:49:A7:AD:40:70:72:F4:31:1A:57:10:D5:FD:95:4E:18:D5:49:21
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1500A6DE2E5EB3CF120B0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6c8fd131-0bd9-3680-beb7-adc633cba0af.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20001
IP address blocks: 173.197.210.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:50:0a:6d:e2:e5:eb:3c:f1:20:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=f8478d5b-8da8-4c7c-839b-976d442f350a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:33:70:aa:75:41:16:f4:ae:73:c1:03:93:07:
bc:ce:e3:9f:bb:3d:74:ce:f5:27:19:1c:27:e2:9d:
b0:22:4b:4a:a5:2c:66:de:07:2e:ad:f5:be:38:8e:
3c:98:62:7a:0c:a8:d4:5b:ed:9a:11:aa:7f:fc:e3:
38:1b:e9:25:28:75:26:3c:4e:5d:5e:ba:13:be:bc:
2b:b5:33:a5:9f:60:cc:96:80:cb:db:ae:cc:b1:6b:
a5:05:fc:f7:21:c0:f0:c7:f1:73:d4:82:2c:5b:12:
21:37:53:61:73:72:eb:30:0a:ab:32:d3:9b:c3:e5:
08:b9:1b:92:df:60:ef:9a:c9:bb:b3:22:95:74:e2:
5a:47:e5:86:fa:d6:2d:67:57:10:97:62:75:56:d8:
81:e2:31:61:a3:4b:5b:a4:a2:85:f8:56:b3:e9:97:
3e:cb:b9:ee:f9:24:3f:56:74:0d:d9:ab:da:ff:b5:
b7:9b:dd:08:d6:78:95:1c:f2:c2:96:c2:1d:49:95:
36:e0:eb:d5:b6:e1:f6:69:f0:e4:d0:df:a3:fd:41:
64:4b:0c:8e:6e:36:69:a0:9b:5e:a2:a6:56:13:ec:
21:38:d7:9a:1b:5c:6b:d8:45:4c:8b:23:be:b9:35:
d3:89:84:06:24:e5:0d:cc:1e:18:1b:b8:0e:10:a4:
5f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:49:A7:AD:40:70:72:F4:31:1A:57:10:D5:FD:95:4E:18:D5:49:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6c8fd131-0bd9-3680-beb7-adc633cba0af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
173.197.210.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:9d:59:83:9b:76:26:6a:d0:ba:18:8f:45:20:93:bc:cf:d2:
c4:27:1b:3c:36:56:d6:7c:5a:e8:ac:74:db:84:9b:91:a9:d5:
e4:45:82:76:41:3a:92:69:f0:aa:8a:92:60:47:06:e9:46:cb:
32:dc:e1:fd:b8:b3:7a:25:30:56:60:47:02:ca:01:04:7b:04:
81:1b:b4:a8:e0:f5:6b:40:16:7c:99:14:bb:3f:10:39:d5:31:
99:85:c8:12:55:d2:4d:32:26:2c:bc:97:13:05:51:49:b1:dd:
5f:93:5a:b7:eb:b4:44:9e:77:39:72:33:a5:ad:cb:d2:0e:74:
52:1c:f7:ac:5c:5b:a9:37:37:16:b2:86:a7:e5:9d:05:b8:7a:
ad:92:8e:35:ee:e6:57:1f:a6:de:a8:02:8e:70:80:55:98:c3:
cb:bc:c2:11:a4:52:92:aa:0d:4b:4c:6e:c7:b8:39:e1:16:07:
2d:10:ab:75:dc:7c:c2:6b:1c:fe:db:b4:e1:f3:53:00:c8:b1:
64:47:21:f1:e5:d0:0f:53:16:df:27:95:9f:39:d0:c5:29:8f:
32:03:97:70:33:ce:82:be:6b:9a:bb:44:b1:4c:ff:98:a8:f6:
a7:92:f7:39:c3:60:2a:ed:c8:62:9d:f1:bf:ef:b6:93:4e:02:
44:de:56:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:45:20 2025 by rpki-client