Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8538c793-bd16-37c7-8622-c91b6aa0e8db.roa
File: 8538c793-bd16-37c7-8622-c91b6aa0e8db.roa (raw, json)
Hash identifier: tOWKv8c/DXEPlw1U84xVZ0PuWr7aWOn9iGnz7sVEJXk=
Subject key identifier: E3:A4:A3:80:5F:6B:54:8B:F7:65:1F:AA:F8:55:F2:86:A4:11:A0:0C
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1D3048094B3AEB70E3C00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8538c793-bd16-37c7-8622-c91b6aa0e8db.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 23525
IP address blocks: 72.43.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:d3:04:80:94:b3:ae:b7:0e:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=225c96a4-6c09-4449-af22-6e8ccc1c5319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:55:58:62:90:e5:53:a5:1e:0d:b4:f4:26:ae:
22:56:93:3d:f8:40:5d:88:3c:95:ed:81:ad:70:0f:
fd:49:71:10:f4:33:bc:92:bb:3c:90:bc:d2:48:c4:
6f:a7:76:3f:bd:b9:7f:ec:32:f5:69:83:63:d0:41:
ac:27:1d:d4:9e:c6:f3:52:36:59:7e:ad:b8:3e:3c:
e5:88:08:fb:85:bf:53:e3:37:df:7f:a5:ef:6f:28:
9d:66:68:19:8e:ea:c2:3d:3a:a9:12:aa:37:69:3f:
0b:e4:c8:b6:19:83:50:09:c4:47:ab:00:64:7e:71:
0e:2d:ba:dc:6e:db:a8:4f:cd:c8:0a:06:b3:32:1c:
9a:b3:7d:63:4f:42:1d:9b:9f:8d:f8:76:21:c2:c2:
06:db:53:6d:f7:d0:68:50:96:b5:31:63:5c:ae:27:
0c:d3:3f:b6:77:4a:79:d1:75:05:61:b7:4d:b4:ca:
e7:a9:aa:82:7c:76:80:b0:e1:45:a6:94:0a:43:1c:
88:63:4f:ad:87:40:d0:33:db:25:1f:d1:b6:3d:af:
46:2e:98:ca:1d:da:fd:24:3d:bb:58:12:97:c5:f8:
00:97:4c:d1:db:e4:56:f8:de:ae:5e:7d:23:de:c9:
5c:36:97:e7:59:9c:3f:41:03:bf:ee:15:c2:ef:ae:
84:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A4:A3:80:5F:6B:54:8B:F7:65:1F:AA:F8:55:F2:86:A4:11:A0:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8538c793-bd16-37c7-8622-c91b6aa0e8db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.43.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:e8:36:a6:cd:ab:5f:45:2d:64:3d:86:91:ae:9c:a5:a5:98:
63:ad:96:e9:f6:74:b5:34:e1:f8:88:ff:8c:d0:74:8b:94:2f:
e9:0d:49:61:cb:9a:cf:61:33:96:bc:56:cc:89:29:a9:2f:7e:
82:ec:4a:61:8a:51:35:c8:2c:ec:5f:ed:1c:ef:64:81:b4:fb:
ee:ff:3d:c3:01:c1:e0:dc:67:ad:4c:d9:71:c4:c7:de:b6:65:
eb:fd:fc:11:79:9c:7e:b2:04:07:16:64:98:1e:b9:ad:ea:46:
5b:a3:2a:d8:94:aa:e3:63:c4:91:38:6b:ed:84:6e:8d:3d:09:
20:99:a6:6e:37:2d:55:63:c5:76:50:98:7b:40:c1:a8:9e:3c:
53:92:f2:a6:18:41:51:55:ec:9c:3e:51:d0:ec:57:3e:48:60:
45:45:92:e3:df:93:e9:c2:03:6e:ef:d0:be:f0:f2:81:9a:ac:
ee:1f:95:bd:97:36:e0:35:f3:d9:ad:68:50:be:c4:56:25:82:
f9:1b:79:c0:93:4a:01:c5:c6:12:d9:fb:be:35:60:e5:26:64:
14:d6:3a:0a:f5:7a:12:05:dc:e0:02:02:ca:ed:28:29:2c:b0:
bc:39:b2:ff:86:3f:16:0d:63:f7:14:36:ed:44:d5:38:77:8b:
cc:47:75:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:06:42 2025 by rpki-client