Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a9447624-76f2-37d2-b6b2-2c72886abc82.roa
File: a9447624-76f2-37d2-b6b2-2c72886abc82.roa (raw, json)
Hash identifier: IbZcpjP1b0tKBwSk5IRrC7+UFFMsVucfxjRR8RdjP3A=
Subject key identifier: A8:F7:93:9B:73:96:10:FA:77:AC:11:6C:6C:42:06:C8:22:8A:BB:0E
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1C570885385A679DA4C80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a9447624-76f2-37d2-b6b2-2c72886abc82.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 11427
IP address blocks: 65.28.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:c5:70:88:53:85:a6:79:da:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=3a4c8d20-42fd-4a82-a29f-8e366ee3c008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9e:dc:1f:89:1b:6f:5b:43:0f:b2:b6:58:ed:
60:38:66:8d:92:c3:64:36:5d:ba:b7:51:98:ee:fe:
d1:43:af:41:48:07:95:9a:00:7d:a9:4a:fa:08:7a:
95:19:26:df:37:4c:1e:d0:9e:23:6b:d1:4b:df:74:
1a:80:99:3a:c3:93:d4:c1:4d:fd:34:1a:c6:3d:b6:
ae:4e:59:6c:5f:45:09:a7:45:08:71:e7:84:e3:5c:
17:5b:31:93:4d:a8:1e:a5:17:97:c5:23:fd:64:5c:
0d:33:bc:27:b5:53:14:81:a9:b5:8e:1e:c5:7a:6e:
5a:96:67:41:05:64:d8:25:a2:83:a0:11:8c:51:9e:
3a:dd:46:43:c6:b9:f0:15:e8:0f:02:15:1c:5c:bf:
92:db:3d:2b:b3:d6:f1:ef:62:f3:74:ce:b2:ef:67:
62:3e:42:b7:cd:74:8a:c4:81:cd:74:01:7e:fd:85:
cc:e4:a4:59:40:8c:fb:0e:e0:6f:94:2f:bf:69:02:
c7:2f:7f:db:9f:2f:78:3a:21:7d:da:de:b9:c3:41:
35:67:54:dc:59:60:e6:ac:35:fb:5d:9c:f8:80:11:
a5:14:49:f8:07:b5:a0:eb:33:d5:13:da:46:5b:04:
15:89:fe:7d:da:e8:16:13:51:96:32:d0:ef:8b:fb:
33:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F7:93:9B:73:96:10:FA:77:AC:11:6C:6C:42:06:C8:22:8A:BB:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a9447624-76f2-37d2-b6b2-2c72886abc82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
65.28.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:f4:50:95:a4:19:26:8e:7a:b1:ab:8a:11:42:81:e6:b9:40:
68:40:8d:3c:30:97:b9:e6:31:8f:ad:d0:1b:b8:90:2b:ec:55:
12:e6:7c:d8:81:07:cf:4a:f6:00:1f:d4:6d:3f:b8:7e:29:22:
f3:ed:8d:cf:02:59:48:0f:d7:9c:a9:c2:ca:58:5c:ba:4f:ae:
b5:ad:81:8c:ee:e2:3c:ed:08:7f:11:f6:a9:44:5a:52:a8:5c:
9a:22:0d:b9:2f:84:72:3c:cf:95:22:c8:2e:f6:d0:17:de:b6:
12:25:34:e8:22:6e:b2:81:26:73:da:ab:e1:12:c8:37:fa:ee:
61:94:9c:89:93:c6:5d:3b:45:89:47:44:ca:a1:4a:4a:26:8b:
58:a2:2e:35:27:eb:0e:7b:e8:b6:fc:33:3c:54:63:d4:49:0a:
f9:95:21:d6:97:09:32:d6:a2:fa:74:13:02:35:c2:20:f5:ae:
58:8f:52:ca:23:b6:15:58:a2:1d:26:0a:78:32:b1:b4:6e:a2:
52:db:6f:b3:f5:94:73:5b:fa:ee:d9:47:92:9c:93:27:3b:71:
a6:49:57:f2:c5:e5:03:53:b7:55:01:29:8f:ce:52:f0:37:e4:
05:c0:4f:76:32:b4:a8:02:6d:ce:bf:cd:3d:3f:66:1f:47:4c:
6e:92:40:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:32:34 2025 by rpki-client