Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c75749ed-6e42-352e-b812-e883b6d6cfcb.roa
File: c75749ed-6e42-352e-b812-e883b6d6cfcb.roa (raw, json)
Hash identifier: OmfgsNY9TxdArDjP8i8gl7x+sHdHih4L6cK0MvbOYI8=
Subject key identifier: 20:6F:67:95:AE:18:7E:CE:25:6F:D6:35:4E:B1:A3:9B:BB:5C:DF:C0
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1CFDF799498073B064780
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c75749ed-6e42-352e-b812-e883b6d6cfcb.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20001
IP address blocks: 24.123.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:cf:df:79:94:98:07:3b:06:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=380e31f7-d6d9-45f2-b0cd-2515643b2d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:01:45:d8:7a:2f:d1:e9:c6:9d:59:5b:77:
fa:a8:2c:3f:cb:15:41:b9:5c:91:55:e9:c7:dd:aa:
ab:a0:81:f2:64:49:f9:d5:0f:43:3a:d1:f8:ac:db:
eb:49:cb:66:7f:c7:1d:da:5a:50:40:5b:8d:fa:ba:
86:4c:71:0e:b7:cf:c5:a1:c4:bb:ce:a8:5c:86:fe:
09:2c:4f:f5:c3:70:29:61:29:1b:d9:35:7d:d0:5e:
cf:40:4c:ad:a3:47:5e:41:e2:60:e2:e7:d9:f4:b8:
7d:96:c2:e8:23:31:01:f1:44:fb:de:92:b8:b4:25:
f4:4f:5a:c1:2d:ac:d7:c2:6a:07:5f:c2:02:16:a4:
63:cd:1c:36:ab:f6:ed:f0:3d:42:80:78:dd:06:bd:
0b:47:5d:79:98:82:39:7e:e0:c5:51:9e:c5:96:d5:
fa:32:5e:3c:f6:13:77:54:3f:29:ad:6b:7f:f4:f9:
87:99:23:97:e7:25:fd:40:30:cc:98:80:47:af:c2:
22:81:28:1b:d9:0f:16:01:f2:ef:9c:d7:df:e6:52:
67:8c:68:13:40:8b:3a:5e:4d:63:b6:dd:56:2b:84:
ad:eb:c3:ef:6b:b9:ed:6e:b8:75:21:01:aa:2d:0d:
34:a6:ef:a4:05:72:73:45:3b:cf:6b:06:2a:d1:ea:
2b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6F:67:95:AE:18:7E:CE:25:6F:D6:35:4E:B1:A3:9B:BB:5C:DF:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c75749ed-6e42-352e-b812-e883b6d6cfcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.123.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:79:44:d5:9e:f6:10:84:ee:91:73:c8:cb:14:fb:2e:47:f0:
6d:55:55:df:9c:14:09:aa:e7:e8:f4:4b:d9:c9:5e:a5:9a:ec:
52:ad:93:be:d3:b1:28:5f:6b:a2:f9:5b:af:1c:e9:bf:d6:59:
39:7e:64:d5:0a:3c:0c:f3:a7:a4:36:93:93:5c:05:66:2e:f9:
90:f8:be:e9:c0:1e:35:8c:e7:f5:73:73:a2:8c:32:b2:7b:21:
ef:b3:5f:6c:d1:bd:ea:1d:51:bc:54:b1:bd:a7:0b:5b:07:45:
51:7f:2d:d9:e8:f2:dd:35:40:d3:52:ba:b5:96:f3:f9:fa:18:
a2:2c:f5:91:b1:f8:5c:c0:cd:de:e2:70:7c:90:08:ae:83:a4:
38:5a:e9:79:c3:6c:aa:2b:8f:90:31:36:e1:4e:43:e3:20:cb:
dc:e2:56:56:cc:1f:f0:2c:68:49:39:5e:86:b2:c5:43:1e:63:
61:a3:0e:52:31:a1:ee:6a:74:20:4a:4e:e0:11:42:df:d5:40:
0c:17:f7:5f:8a:26:d0:30:2b:22:46:2f:ce:6a:23:4a:81:32:
4e:25:42:2a:68:34:2e:3e:77:83:b4:cc:a1:24:05:3e:52:1f:
ac:31:1c:f8:a9:12:9f:a1:dd:1e:d7:46:e2:8a:d7:fe:bc:88:
25:e3:ab:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:20:45 2025 by rpki-client