Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aac22c6c-1b18-3b91-bc29-dd542daca70b.roa
File: aac22c6c-1b18-3b91-bc29-dd542daca70b.roa (raw, json)
Hash identifier: btnzlXQTw/JmyrD1l1LDl/+tPJ7JMSkv2Xn8oHzO3lc=
Subject key identifier: 9A:23:84:B3:8E:9F:81:60:E5:3F:99:0F:B2:88:0E:70:1D:B8:FA:B2
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D12DAB161882156E69C280
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aac22c6c-1b18-3b91-bc29-dd542daca70b.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 10796
IP address blocks: 24.123.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:2d:ab:16:18:82:15:6e:69:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=fc43510e-c294-4822-97c5-7a595d9b8647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b6:b3:95:ef:66:7b:91:05:63:23:d0:7f:0a:
fc:aa:d7:36:b4:17:3e:2d:be:b4:1f:2e:5e:f5:ec:
11:09:c3:3b:b0:fc:e8:87:50:e9:eb:fa:c7:2f:32:
14:25:46:f7:a2:46:87:a2:4d:d2:c6:af:f4:ff:fa:
e9:42:ed:59:5f:a4:4e:63:d0:23:14:ab:d5:20:43:
a7:89:71:f0:3b:a5:64:84:69:30:26:a4:38:9f:35:
9e:fe:5c:57:80:e5:20:a6:6c:00:4b:68:36:98:b0:
aa:b2:9e:0d:b8:70:a4:e9:86:bb:b1:9b:54:53:f8:
02:98:e0:7a:e6:3b:ba:67:52:88:3a:1f:ec:f9:a4:
9c:9b:86:74:07:ff:91:00:0c:a7:13:1a:15:0a:95:
b2:b8:81:0c:8c:5e:0d:4c:9b:64:6a:06:ab:80:50:
44:25:e6:4b:f1:03:ff:39:f2:87:c3:a5:2f:9d:68:
6a:fb:22:bf:a8:df:28:73:86:48:3a:4c:a8:68:0f:
6f:8b:98:86:68:2e:3b:56:01:ae:9e:14:26:ef:49:
31:85:df:2a:cd:e9:f5:fe:d1:0a:8b:67:5b:62:fb:
f1:a2:e3:f9:f3:ed:da:8b:ca:78:c4:d0:87:55:fa:
fa:da:9d:ca:94:d1:23:5f:b8:be:c3:30:7f:6e:d9:
eb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:23:84:B3:8E:9F:81:60:E5:3F:99:0F:B2:88:0E:70:1D:B8:FA:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aac22c6c-1b18-3b91-bc29-dd542daca70b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.123.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:c7:9c:47:4a:a8:32:02:70:fa:ae:73:2c:22:e9:3c:ef:74:
09:87:79:28:f2:58:43:18:c3:56:ab:cb:5b:85:01:6d:09:ae:
8c:4c:69:67:e7:3d:ff:54:0d:67:8f:2c:64:58:01:3e:7e:89:
47:8c:6e:4c:e7:97:3e:c8:9a:71:0c:cb:ee:32:17:0b:8f:a3:
ff:58:4b:e7:c3:86:61:7d:fb:8a:4c:2e:62:84:26:73:c3:0f:
4f:51:3f:53:86:a0:b5:fd:7e:7e:40:1c:6f:10:a1:42:9f:8b:
8f:21:b5:86:5c:d0:a0:0a:a8:91:a7:db:b4:c8:23:de:06:97:
e5:80:76:63:08:bf:13:13:48:e2:16:c8:36:6f:84:ab:57:2a:
b1:a0:ac:31:de:f4:e9:31:8d:ce:a4:5d:4f:4f:0b:33:98:bf:
76:5a:a1:f2:00:8e:85:68:c0:da:2e:6d:7c:3f:6c:e7:72:ba:
94:c6:b5:c1:c9:b3:0e:f8:36:8d:9b:8a:3f:28:87:95:d2:c2:
6a:12:3c:99:84:2c:e3:b9:6e:9a:d9:44:1c:b4:3c:0c:b5:94:
76:20:a6:9a:62:ad:10:75:fd:eb:0d:06:c9:f6:28:f1:c2:17:
75:ae:63:58:b7:d7:21:5c:86:51:8e:51:30:2e:ef:88:cb:10:
42:9a:3d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:38:53 2025 by rpki-client