Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c525b582-42a7-3759-b425-cd9471ada511.roa
File: c525b582-42a7-3759-b425-cd9471ada511.roa (raw, json)
Hash identifier: cYhqecyc+ghupb0RYzY+p+lPRpEGV9POKRfzne7Xe1A=
Subject key identifier: C3:80:E5:66:B4:3E:30:5C:5C:EE:0F:4D:94:37:71:85:54:73:1B:55
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1C656F37650CBAD4E3000
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c525b582-42a7-3759-b425-cd9471ada511.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 11427
IP address blocks: 24.173.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:c6:56:f3:76:50:cb:ad:4e:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=e22b6a5c-6b43-47f7-9335-a1283993ef5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:86:83:1d:e2:72:1d:8c:62:7a:ab:42:52:c3:
7b:4c:80:d9:fe:10:82:d1:99:ce:b4:2f:10:c7:1a:
8c:4f:48:93:25:c9:64:1f:ca:33:4e:5a:3e:71:e7:
6b:d9:3e:e9:76:68:60:cd:4c:14:aa:91:0d:c4:51:
5a:48:d3:e5:5f:58:1a:a6:b6:60:02:ef:ee:ee:e5:
e9:63:cb:67:e4:e8:2f:36:13:bf:05:50:9d:dc:9a:
ee:46:7f:89:86:24:10:45:86:1a:cd:44:d1:2d:be:
7a:21:0e:2a:89:30:13:2b:51:26:11:7a:4a:2a:cc:
f1:c9:af:fc:b6:cf:5f:2d:f1:c0:41:fe:e6:ca:87:
9a:a4:81:43:a8:37:1f:d6:a1:2a:10:8d:67:e9:0f:
2e:49:05:57:d5:0a:e4:64:09:fb:d7:76:7c:d3:de:
0b:98:b8:43:d7:f7:97:75:bd:d1:8d:84:ba:fe:a2:
a4:05:5e:f3:63:b4:c6:80:cb:e9:90:8d:ca:a4:b6:
de:0c:b3:85:6c:91:b3:24:19:e2:50:75:16:c8:27:
16:20:53:50:f9:99:aa:c0:5d:ef:f6:2d:40:ff:fe:
c7:de:2b:5e:eb:66:c2:6d:28:2f:08:46:c1:c7:82:
a4:18:61:c0:b7:98:ff:3d:8c:6a:25:10:ea:83:40:
ea:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:80:E5:66:B4:3E:30:5C:5C:EE:0F:4D:94:37:71:85:54:73:1B:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c525b582-42a7-3759-b425-cd9471ada511.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.173.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:b5:87:78:a7:d4:66:ca:7b:74:2f:93:62:92:da:7b:52:78:
94:cb:41:6c:96:c4:15:8a:81:ca:9e:a4:94:83:d1:a8:f1:01:
c2:31:ab:09:2b:03:30:3b:b3:ff:9a:67:3c:75:50:a6:0c:5a:
09:9e:fe:42:9c:c5:4f:61:52:5f:9f:39:7f:89:de:86:cd:80:
be:8a:2f:2f:25:1a:40:93:4c:13:b2:0d:66:5e:ee:a9:b4:42:
e0:69:7c:e0:68:cd:8c:02:4c:c5:9c:60:4d:65:4d:63:88:2c:
1b:b0:c0:b6:d0:c6:f2:c6:f1:42:20:82:48:db:0c:74:78:14:
df:2c:69:97:f8:90:76:46:e9:68:fd:23:22:b1:49:11:8a:30:
21:f7:79:fc:ae:68:08:30:27:0e:f4:3b:f1:50:b7:ba:11:87:
50:69:ec:9c:61:bd:8d:41:0f:ca:7c:c6:38:ce:ae:b7:cf:84:
41:fa:1b:7f:a0:e0:01:ff:65:a9:f0:fd:32:13:13:a2:b5:77:
eb:9d:63:31:8c:56:1c:b2:d2:cc:6c:2b:ff:90:6f:a2:0c:b9:
35:9f:fa:f1:6a:b2:f7:1a:e6:59:bd:dd:83:d9:dc:13:b2:9c:
ea:c7:f0:90:4f:05:8e:e6:e4:e7:ad:f3:42:c4:23:34:86:e0:
4b:e3:ab:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:08 2025 by rpki-client