Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a404a367-1961-38e2-ab65-7b03fb8f9dac.roa
File: a404a367-1961-38e2-ab65-7b03fb8f9dac.roa (raw, json)
Hash identifier: bcf7TBqq2JenfA/0nKUQ/K7HwFV8klLhCp45SmLvgjo=
Subject key identifier: BE:7B:FA:21:50:C3:B6:AD:49:B2:91:12:68:0B:02:73:E6:69:3F:0D
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1AC8A85C5223C01033880
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a404a367-1961-38e2-ab65-7b03fb8f9dac.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 10796
IP address blocks: 69.23.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:ac:8a:85:c5:22:3c:01:03:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=c34b3573-4a75-452e-aee8-29df49604295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:03:e1:be:30:15:8b:e5:4c:19:7d:a2:c3:e3:
13:79:d2:a1:4b:04:91:cf:52:da:2d:bb:0d:06:e0:
35:11:ab:ac:74:1d:92:5d:0a:6d:15:6a:ac:45:6c:
2b:23:75:9a:7a:e6:64:33:76:04:eb:45:5b:17:59:
8a:10:b0:9f:cc:ed:97:6e:75:15:a4:27:b5:ab:43:
b2:8f:05:49:57:7a:d1:bc:f2:27:36:9e:26:5e:c2:
f2:84:6f:4e:0c:8d:23:f2:97:a1:31:64:e0:f4:49:
e7:59:89:57:ce:c6:08:b4:36:49:0b:a9:7a:b4:73:
62:a2:8c:0c:1a:b8:ab:fe:91:d9:af:34:6a:da:b2:
21:62:f0:08:ef:29:94:64:3a:b6:3c:55:f5:19:e7:
41:89:63:ed:b0:23:6d:ee:df:12:23:65:10:59:b5:
38:d8:06:c8:d0:48:73:ec:35:4b:2f:ad:5c:af:69:
31:99:8e:1e:92:ff:2a:10:a6:c5:a6:89:d5:1f:d0:
06:3a:1b:07:a3:48:34:91:87:96:4c:40:99:ea:f7:
9b:1d:3f:54:44:50:69:df:fd:1e:80:35:72:c4:ac:
1c:2a:53:34:99:db:e5:e2:dd:42:25:c9:26:15:bd:
e2:89:01:0c:11:0f:11:92:9e:02:a1:40:55:1e:fc:
84:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7B:FA:21:50:C3:B6:AD:49:B2:91:12:68:0B:02:73:E6:69:3F:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a404a367-1961-38e2-ab65-7b03fb8f9dac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
69.23.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:38:e3:47:ce:6e:92:8e:09:ee:a3:82:9d:11:0d:46:8a:53:
c1:8f:85:0d:63:50:9c:4f:fe:dc:75:74:95:f4:7e:fb:bf:0f:
b3:4a:ac:70:a3:c9:ff:8f:70:74:61:92:d0:a1:dc:8b:75:1d:
1a:65:c5:cb:99:71:bc:71:04:26:18:f7:ce:4e:f3:a5:98:14:
68:c5:f6:6b:e1:77:40:7d:05:f2:bc:bb:44:eb:09:be:27:fc:
89:7d:98:33:9a:da:39:c7:ff:ac:31:c0:05:0d:98:bd:a1:e8:
3b:3a:a7:55:ad:be:e2:76:0b:d8:18:25:06:39:06:f1:89:c0:
b2:96:4b:dc:65:fe:e5:2c:7d:a3:ae:29:ee:9a:17:ab:04:0b:
5b:53:78:47:74:24:46:81:d5:4a:30:4f:d0:80:58:d2:2b:5f:
ae:0f:9a:f2:90:5f:0e:52:45:e6:10:1a:22:0d:ae:22:d7:b9:
f9:8d:91:09:e8:9a:d6:ee:40:41:55:c2:e9:54:b9:1c:c0:24:
3a:e6:14:aa:68:46:10:7b:e7:8e:58:f7:1d:96:1c:c7:19:84:
c5:6e:aa:08:f6:5f:e5:9e:b4:8d:68:b0:b5:fa:00:b7:44:1c:
38:91:fb:2e:8c:e1:8e:64:cd:6d:76:ba:78:f9:bf:78:ff:dc:
58:5c:87:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:47 2025 by rpki-client