Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bbc2d907-e9ac-31c5-b80b-ec1394d148cd.roa
File: bbc2d907-e9ac-31c5-b80b-ec1394d148cd.roa (raw, json)
Hash identifier: 6Yx7Hcweozch7CeoGsLGwtrd5drqyBtGii+nVrFYgqk=
Subject key identifier: 39:47:3B:26:88:AF:A9:43:49:42:C5:05:17:75:9B:A8:D5:B3:BA:73
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285849011B6345889BB15B8A413700
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bbc2d907-e9ac-31c5-b80b-ec1394d148cd.roa
Signing time: Tue 25 Feb 2025 22:24:49 +0000
ROA not before: Tue 25 Feb 2025 22:24:49 +0000
ROA not after: Mon 26 May 2025 21:24:49 +0000
asID: 20001
IP address blocks: 173.198.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:01:1b:63:45:88:9b:b1:5b:8a:41:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 25 22:24:49 2025 GMT
Not After : May 26 21:24:49 2025 GMT
Subject: CN=bc20ee9b-f255-49b4-bc6a-bcebddd78ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:df:f3:1d:0e:0c:09:fd:81:70:44:6d:dc:
41:0d:5d:19:c6:58:04:06:e8:33:ac:fb:49:7b:2b:
e5:7a:03:b6:80:d6:88:48:e2:c7:f8:77:64:51:69:
e7:0e:0f:d8:7f:3b:13:a3:c4:ac:56:76:c3:d7:db:
14:ec:1c:b8:60:44:ba:cb:5f:6b:73:20:61:45:f1:
d0:7d:c3:8c:98:22:aa:3c:38:78:1a:c4:a1:1d:ea:
86:ce:d0:27:cd:16:68:8f:a4:48:2c:d9:3b:ea:32:
30:10:ec:29:8c:9a:8c:ec:87:ae:53:c0:ce:94:82:
ad:04:7e:49:92:f9:0a:23:74:e4:3f:01:b3:61:8b:
ae:30:04:8c:ad:df:8e:f1:d1:5b:86:89:5f:2f:e6:
be:bb:05:2b:f6:75:ab:2b:1a:52:d2:f5:c0:0e:7f:
d3:f6:8c:25:60:f2:a8:fa:f4:fa:ef:31:55:21:17:
d4:3a:a1:b9:09:83:dc:98:57:bb:d8:13:2b:97:d0:
2e:df:d1:f2:ca:6c:68:46:35:17:60:7e:97:81:09:
4e:0b:bf:26:95:8f:63:1f:28:d7:b6:fd:9b:59:01:
e8:7f:b5:b0:eb:28:24:41:5d:bc:1f:13:2a:49:b8:
10:f6:70:0c:07:20:f1:51:21:a1:fd:62:6f:87:60:
0c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:47:3B:26:88:AF:A9:43:49:42:C5:05:17:75:9B:A8:D5:B3:BA:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bbc2d907-e9ac-31c5-b80b-ec1394d148cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
173.198.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:7d:2d:b4:a1:79:04:79:e4:cc:1b:56:8b:f4:73:21:3c:e0:
c7:53:f2:de:7b:3a:ee:d1:92:9f:23:d4:c4:4d:c9:dc:4d:d0:
69:a5:e8:84:b9:3b:eb:1c:76:f2:c1:2c:b7:11:7f:6a:16:a8:
5b:bc:c3:5b:6a:5c:69:0b:2b:d9:9f:4f:72:75:43:9a:e6:50:
d1:b6:e3:06:55:40:6a:a9:2d:97:24:4d:73:74:ab:23:ad:ff:
5f:6a:99:80:8b:ac:97:d2:22:30:77:f3:3f:99:8b:e6:98:d3:
c6:4e:72:14:c3:35:9b:5f:61:3b:17:7c:ac:b5:22:cf:61:ab:
aa:32:ec:7f:c0:1a:50:48:0d:a2:89:16:c6:a7:46:bc:ea:c0:
bd:09:06:7a:2c:9f:d1:7c:2b:83:a5:30:85:ff:db:af:c3:01:
bf:64:05:df:9a:f0:84:74:19:4f:7a:bf:85:45:d7:c2:8f:49:
db:de:46:ee:36:d0:69:9c:66:8f:96:b4:0b:c5:91:59:c9:63:
09:4a:37:79:5a:41:41:51:a4:f1:8e:99:51:51:b6:5c:71:ff:
b3:80:4f:cb:3a:6e:7c:1d:e7:46:29:4b:24:14:5f:c5:36:5d:
19:ca:b4:96:1c:fd:91:2f:56:20:fa:69:b0:70:e7:9f:e4:ec:
c5:a1:72:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:06:08 2025 by rpki-client