Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/86cd5f9b-6152-3f24-973f-c04ae90eb6ea.roa
File: 86cd5f9b-6152-3f24-973f-c04ae90eb6ea.roa (raw, json)
Hash identifier: vQuVyuoJER5B1RhhWl1PUCpahOn51hoPlSrbwDOyJ8s=
Subject key identifier: 12:26:7C:CF:0D:4F:F5:A9:CA:3C:D1:B6:C1:14:F1:82:42:4C:54:F2
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848F22C737C4CAF7D4B85BAB140
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/86cd5f9b-6152-3f24-973f-c04ae90eb6ea.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 11030
IP address blocks: 67.52.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:73:7c:4c:af:7d:4b:85:ba:b1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=0f30494f-fd21-45ed-9653-b9f569932401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:15:4d:d6:1f:d5:3f:f4:5e:63:24:eb:80:56:
cc:c5:b6:ae:92:6f:65:22:be:b4:ba:c0:e4:ed:b8:
dd:dc:c8:8a:3f:0b:b6:4d:88:b2:88:9d:58:88:3d:
a9:42:44:89:35:7e:7d:c1:9e:c3:16:8c:20:49:fa:
f8:27:df:c6:c6:59:d1:15:cf:d3:5a:74:5b:5a:e8:
8f:c3:a3:78:86:9b:2c:45:93:0e:61:32:bf:49:92:
c5:bf:9e:8b:4c:b7:81:fa:42:a0:1b:5e:8d:7d:da:
28:2e:ae:d0:75:17:0b:fa:46:e8:a9:1d:6a:c4:27:
4c:1a:d3:8e:5b:43:7d:63:92:27:2c:ed:ad:33:64:
a5:a9:21:d3:67:60:f4:32:28:0e:8a:ac:91:18:52:
ed:ae:c8:90:a3:0b:ce:4f:d1:ba:14:52:da:e2:28:
98:28:6e:aa:96:fc:0a:fa:8a:df:23:b6:a5:26:50:
ee:9d:a5:0f:04:07:49:44:99:ab:73:ca:a1:b0:16:
8d:eb:39:a8:68:64:e3:3d:8f:2a:19:21:e9:35:e8:
fc:c9:87:49:44:5c:46:b9:cb:36:36:95:22:aa:1b:
b5:93:63:4e:25:80:1f:e6:86:74:9c:b1:06:d2:93:
66:e5:86:39:ae:4a:96:a7:fa:ac:33:a1:b9:26:cc:
b3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:26:7C:CF:0D:4F:F5:A9:CA:3C:D1:B6:C1:14:F1:82:42:4C:54:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/86cd5f9b-6152-3f24-973f-c04ae90eb6ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
67.52.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:84:cb:c8:2b:7f:78:ab:38:20:34:ae:82:3f:32:f2:23:eb:
fe:0f:57:17:36:84:94:2f:1e:4a:5a:ba:bf:df:12:b5:d5:3e:
06:75:0b:78:f9:8f:1d:9e:ff:a9:68:bf:a7:51:50:bd:7e:24:
98:3f:2a:4d:04:46:10:2b:33:e8:dd:fe:3f:5c:db:e3:4e:4b:
9e:45:f0:f7:70:a8:fc:21:b6:02:8b:b6:f7:ec:2f:26:8f:4f:
6c:9e:bc:f5:08:c1:61:cc:d1:db:a8:03:d9:a6:66:80:5b:26:
cb:73:29:b0:af:26:04:3d:f5:6a:cd:99:46:45:c5:ce:08:99:
e8:2e:b3:44:11:b7:c2:dd:b0:80:74:36:dc:d7:d8:94:22:d2:
e8:26:ff:a7:96:64:97:5c:ed:e9:5f:ee:48:53:f4:76:9c:52:
a6:de:25:18:62:35:99:f2:67:ff:1b:fe:4a:a0:44:5d:dc:aa:
01:e0:e0:9f:3b:01:26:73:fd:fc:79:b9:c4:4b:ec:32:26:e6:
8c:d2:b4:26:4f:34:82:d5:db:6a:06:12:a3:88:7b:36:55:d0:
62:91:8a:f4:5a:98:2c:4f:42:48:ca:46:4d:3b:f0:3a:7d:e8:
58:66:54:c4:af:03:e5:66:1f:45:7b:db:46:63:81:10:aa:a3:
c3:5d:c8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:29:20 2025 by rpki-client