Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/97efd957-6d5d-3863-804d-dcc9e1f8077c.roa
File: 97efd957-6d5d-3863-804d-dcc9e1f8077c.roa (raw, json)
Hash identifier: k/n42zqR0hzIyvDm0yQsNw29HaCzM41b3D8uZkWyl/o=
Subject key identifier: BA:61:D3:F2:08:65:A6:1E:A5:22:40:C3:1F:E1:38:23:C4:44:FD:23
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D137998381841AC069B8C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/97efd957-6d5d-3863-804d-dcc9e1f8077c.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 10838
IP address blocks: 67.52.218.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:37:99:83:81:84:1a:c0:69:b8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=605199e1-e2c6-4a92-b7af-9ad6b2def9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0d:2b:9b:20:b3:eb:a5:6f:a9:3c:75:5a:8a:
fb:b5:62:be:99:09:05:54:88:c0:17:d3:91:3f:9a:
ea:a3:09:59:30:67:ec:eb:e1:e7:53:0e:8a:88:e9:
bd:c4:38:80:0c:7f:5e:c0:ce:f6:16:5a:fc:21:ce:
2b:7b:ca:3d:13:91:b7:07:f0:eb:cc:72:30:0e:5f:
93:dd:70:87:d6:60:46:81:9e:ff:31:f5:5e:d7:a9:
8a:d2:b1:9a:7b:98:f8:57:93:91:bc:0a:ca:61:a8:
6a:0f:51:86:f9:0f:0e:42:36:34:9f:f9:78:51:03:
a6:33:e1:15:87:e3:11:f1:b8:20:cb:64:e7:84:3a:
9b:b5:ec:c2:76:b1:d0:39:e2:b4:11:3c:d3:31:21:
b3:cc:ac:c5:33:e8:6c:6f:58:36:03:ff:c7:63:cf:
3e:d5:01:6c:0b:7d:8e:66:45:fc:d6:aa:f4:3b:b6:
1e:34:74:f1:68:fc:c5:75:e1:38:cb:37:f6:72:ac:
40:32:b0:9e:d0:f0:7c:29:77:91:44:2c:c9:0f:bc:
67:10:8e:ed:d2:bb:a2:71:20:a0:99:17:77:3f:7c:
68:c9:7e:d1:1d:87:17:f7:cb:33:5d:bb:58:3b:90:
f8:d5:cc:60:72:0b:48:8e:1f:db:e9:85:16:5a:38:
8a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:61:D3:F2:08:65:A6:1E:A5:22:40:C3:1F:E1:38:23:C4:44:FD:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/97efd957-6d5d-3863-804d-dcc9e1f8077c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
67.52.218.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:d2:a1:aa:80:5c:74:ec:3b:a7:41:a3:0f:b6:d5:f3:21:cd:
29:90:83:95:0c:67:59:b3:82:f8:01:5b:13:93:c2:d3:b1:97:
e5:c1:0d:96:6c:c9:c5:a1:43:37:fc:14:f0:ff:0b:1b:66:02:
df:da:a1:d9:4a:65:10:63:7a:17:01:0e:91:ee:15:a3:c5:dc:
1d:d0:59:a9:0a:f9:25:d1:ca:2d:b4:4d:82:69:1b:0c:a6:4e:
7f:79:9f:02:54:75:98:09:86:76:bb:f5:4a:86:20:2b:52:c2:
9f:80:45:9a:8f:cb:a1:be:7b:f5:91:d0:78:fc:0c:58:44:2e:
e6:7d:54:d0:e0:43:f6:fc:35:4e:49:0c:9d:9c:77:30:26:a1:
ec:30:e6:e1:26:c0:ed:6e:bf:60:5d:94:48:f9:29:3a:f2:0f:
6c:08:3d:8f:c6:48:16:fd:dc:8e:83:5b:2a:a2:1c:70:6b:b8:
85:5a:a9:73:88:af:90:9c:13:43:d2:7e:ea:7e:a4:51:7d:2a:
4d:1e:c2:ff:43:f2:cf:90:b8:6c:f7:a8:53:d5:5e:04:a0:ea:
82:eb:8f:7a:75:83:d2:9d:18:fb:bd:f5:e3:92:8e:88:91:37:
21:17:df:6d:8e:3c:d6:71:37:aa:c3:2f:f6:07:65:18:6b:01:
87:3f:97:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:12:07 2025 by rpki-client