Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b96cb0bf-232f-30cb-8ded-61415f0c177b.roa
File: b96cb0bf-232f-30cb-8ded-61415f0c177b.roa (raw, json)
Hash identifier: N4uz417V6qtmOGNLLvDkfXGhRTraBPgb74ZbV5UeyQA=
Subject key identifier: A2:0D:10:B0:B8:DC:CE:8D:5D:FC:CB:8F:5D:29:9B:24:A3:5C:09:37
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285849446949E5FC68468004A4E800
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b96cb0bf-232f-30cb-8ded-61415f0c177b.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 7843
IP address blocks: 24.33.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:49:e5:fc:68:46:80:04:a4:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=46cc0dd3-8927-4c09-9510-57c387888c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c6:9f:a2:8b:72:4c:7e:b2:d0:77:4b:83:c5:
48:da:d1:a7:ad:b3:5d:b6:17:76:b5:11:a0:ef:fd:
2c:a1:e0:ba:64:a9:7f:76:c8:ab:f1:e4:4c:24:e7:
90:41:16:09:c2:36:5c:f3:83:4f:13:85:41:c1:33:
f8:ba:49:54:6e:a0:fa:9c:ef:29:85:f4:07:b2:95:
dd:4c:49:4c:a3:ab:c4:43:a6:5d:3c:10:27:e6:9c:
16:98:fc:33:83:79:5a:4b:73:20:b6:38:20:8d:18:
2d:d8:8e:56:42:2c:29:86:70:bc:d9:0b:a3:c8:e5:
c1:4a:18:f3:98:3c:1c:f3:55:1b:f5:ae:d6:ff:da:
bc:97:73:c4:28:12:ba:b7:44:09:aa:d8:6a:6e:19:
ab:c5:ca:4b:c9:01:96:72:1a:34:54:b8:f4:e9:b5:
c5:3b:d3:26:85:72:aa:23:4a:52:99:44:b2:fe:b9:
ca:cc:82:cf:6c:28:b9:db:c8:7a:e6:bc:52:fc:fb:
01:11:c1:03:2e:23:4c:09:69:ee:e3:76:02:41:36:
0d:e9:48:ae:3e:09:44:f4:cb:91:f8:db:4e:eb:13:
ea:0a:1b:b8:3d:6b:17:6b:19:8b:61:20:fd:6b:d5:
38:70:f2:2d:44:de:0e:68:87:eb:12:ae:f8:05:61:
c6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0D:10:B0:B8:DC:CE:8D:5D:FC:CB:8F:5D:29:9B:24:A3:5C:09:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b96cb0bf-232f-30cb-8ded-61415f0c177b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.33.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:81:21:b9:01:95:d7:45:b5:88:03:ed:d1:a9:d9:01:c5:02:
27:d4:8a:c3:7e:39:57:30:89:5f:0f:fc:35:01:c2:8e:25:6f:
83:94:ba:95:37:95:46:1a:46:c6:c6:25:b7:fe:00:b7:64:d3:
c9:e8:de:fb:9f:9b:52:49:94:31:0a:d7:f7:a4:a7:9d:46:d2:
06:8c:1c:77:12:45:a1:43:2b:b2:7c:c6:d8:30:7b:bb:94:a4:
6f:f9:16:4b:c7:51:c2:51:41:b4:46:65:5c:57:00:93:f2:de:
c3:b2:ed:8a:a1:0f:c5:74:f9:ca:8e:e4:fd:9a:b4:b0:35:34:
ae:23:aa:65:ff:93:a0:94:ac:81:3e:f1:e3:77:25:29:21:bf:
00:9b:4d:b7:36:84:92:d1:ca:54:3a:62:d5:3c:fb:e4:88:dd:
3b:9b:40:fd:99:71:0f:a8:20:9a:bd:52:22:63:2c:f8:74:31:
f7:73:3d:28:dd:90:63:4b:a6:28:f4:03:09:53:83:1b:ab:d6:
63:88:ef:6c:59:c1:cd:9d:d3:2c:ae:1c:b5:8d:61:2b:8a:17:
d3:62:c5:80:ac:42:a9:52:42:2d:88:a2:36:e4:13:99:b8:73:
49:24:e1:a5:11:c9:ff:51:f8:c7:61:79:87:88:f2:ed:76:5e:
56:10:6c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:49:49 2025 by rpki-client