Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ac0e7069-fd9d-3460-a18b-b8e3948f8850.roa
File: ac0e7069-fd9d-3460-a18b-b8e3948f8850.roa (raw, json)
Hash identifier: 45gX3zFKGSNwP0qDi6+AMpxUQsoOK9nyuO1iZ8TdXjg=
Subject key identifier: 2F:7A:AF:BA:AC:F1:B5:FE:44:F0:3F:BE:DC:3E:91:D5:C1:AF:53:F7
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D14F5B5C9E4F72350D2B00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ac0e7069-fd9d-3460-a18b-b8e3948f8850.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20001
IP address blocks: 76.88.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:4f:5b:5c:9e:4f:72:35:0d:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=c1bf91ab-b22f-4678-b099-5537db2a0ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:46:f4:42:0c:59:10:5e:f7:a1:a8:b3:c5:a4:
af:47:92:61:28:fb:db:c4:1f:b3:d8:f7:21:2d:84:
9e:8c:27:c3:9f:4c:e1:11:ec:52:b0:1c:ea:3e:2b:
41:be:4d:bb:55:67:66:d4:97:3f:39:da:47:9a:e0:
80:dc:b4:ca:3e:aa:30:43:8e:09:fc:ca:e9:a1:31:
b4:4b:71:e4:dc:d7:85:57:ca:bc:a1:b3:4e:d1:26:
6a:5d:ad:50:05:91:33:a0:46:d5:de:89:82:06:1e:
d7:8f:8d:43:72:47:88:62:ba:e7:5f:87:d9:62:c4:
5a:08:71:3c:23:d7:5f:c8:91:0a:fa:51:73:7e:0a:
fa:1a:12:41:5d:34:6d:4d:63:ce:cd:ea:4f:76:c5:
30:bf:df:2e:42:65:4e:aa:0e:87:7b:ed:ae:42:a0:
54:ed:b1:3c:9a:9f:61:f3:be:d4:ab:29:3d:87:ce:
54:b3:82:f7:3e:0b:af:a8:43:61:08:8c:84:7d:41:
25:29:8d:9c:02:62:c2:43:77:de:29:1e:0b:1c:d2:
a1:24:d3:72:4d:d6:d6:58:75:2c:22:aa:7a:98:1d:
cd:f8:5b:63:c0:ae:fe:8b:d9:ae:de:92:f5:b7:e2:
12:17:32:de:1f:a7:49:59:e6:31:6b:bf:f4:ce:05:
46:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7A:AF:BA:AC:F1:B5:FE:44:F0:3F:BE:DC:3E:91:D5:C1:AF:53:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ac0e7069-fd9d-3460-a18b-b8e3948f8850.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
76.88.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:19:63:ae:d7:2f:02:46:38:12:85:5b:11:68:1f:13:be:60:
be:1b:8b:02:52:f9:c0:3f:fa:5a:0d:10:9b:ef:39:5f:c8:c5:
1b:12:9e:c3:68:e5:5c:5e:10:b0:09:25:a6:ba:0f:6f:c5:22:
ab:b1:49:70:04:b4:f9:e3:43:fe:e2:04:70:51:38:15:fb:34:
8a:13:a7:41:1b:a9:5c:06:3c:f3:26:55:61:32:10:a3:57:20:
56:98:58:bb:a6:4b:5f:a7:16:5a:ec:37:cc:d9:09:79:39:2a:
6d:83:60:68:34:c3:c1:21:fe:b3:c4:23:44:40:c3:14:08:47:
6e:c6:68:65:b7:38:7e:19:16:1f:19:8c:56:96:4a:f4:89:22:
77:0a:ef:d4:6f:dc:c3:4b:97:94:6c:6d:f1:b2:78:a9:4e:43:
12:96:f5:38:0a:f6:f4:7c:39:af:02:62:f2:ea:08:bd:da:f7:
28:81:70:a1:fe:41:81:90:24:7a:0c:6e:2d:56:82:c0:9a:40:
15:c3:fe:cb:59:d4:1c:6f:d2:4f:0e:d4:af:57:21:07:b3:83:
50:5c:29:8a:ec:a4:09:4a:37:10:a2:4e:31:67:8e:97:ee:7b:
af:4d:16:72:b3:10:29:e8:21:67:d3:bd:b7:5b:1e:2e:3c:0d:
70:52:dd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:49:51 2025 by rpki-client