Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cf0d2f37-5d3f-3031-aa67-5a8e58895817.roa
File: cf0d2f37-5d3f-3031-aa67-5a8e58895817.roa (raw, json)
Hash identifier: Go6WQhyGQxQj9Q3DDNvtkgjb1tzQM/xhNGnB6sjJwug=
Subject key identifier: BB:DC:B3:F1:6E:A6:7C:21:82:79:90:71:A0:3B:B6:CE:B0:32:50:99
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D14DA9A68B2CC33FE1AE70
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cf0d2f37-5d3f-3031-aa67-5a8e58895817.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20001
IP address blocks: 76.176.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:4d:a9:a6:8b:2c:c3:3f:e1:ae:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=b4d3bf61-1463-4d47-a2fe-8d08c62db6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:41:cf:29:a1:ff:d1:c8:bd:84:58:ea:3c:c7:
d9:7c:60:d8:ee:39:ed:68:6c:b7:52:69:01:78:a1:
c5:85:a3:88:f2:3a:3c:15:8b:24:7f:13:27:48:16:
77:92:dd:c0:ed:7e:43:7b:cc:29:47:c5:71:17:53:
39:4b:90:db:c5:84:ca:55:6f:ff:78:10:70:24:c7:
7d:10:55:79:07:d5:d4:0f:a3:d3:7b:fb:a6:fb:90:
ef:03:05:ed:b0:63:45:7f:89:8d:06:f5:11:e6:c4:
8a:03:6e:20:fa:9a:13:c0:47:1d:95:f2:98:e8:ba:
59:f6:8a:2d:6e:d3:22:de:d5:93:6d:e2:16:90:06:
d7:3a:3d:1e:77:a2:f4:e8:c4:79:7c:32:86:26:8d:
7e:5d:dd:18:59:e5:16:fc:c7:94:2e:77:e3:ad:6f:
b8:f4:ad:cb:17:a8:09:da:6d:7c:c5:18:bf:f3:fc:
09:d8:08:07:8f:23:02:38:36:21:ac:8d:a7:af:28:
97:a5:a6:32:2e:7f:2a:51:5a:7e:eb:d8:af:12:fc:
40:db:52:03:b3:ee:ec:3d:ee:60:24:86:aa:62:91:
42:2b:9c:2e:76:e4:e9:79:0a:c7:25:00:fb:f3:7f:
51:6c:d0:ac:39:22:f7:b8:e1:01:92:ee:dd:34:e0:
7c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DC:B3:F1:6E:A6:7C:21:82:79:90:71:A0:3B:B6:CE:B0:32:50:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cf0d2f37-5d3f-3031-aa67-5a8e58895817.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
76.176.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:16:99:4b:a6:9c:89:12:5b:16:eb:16:36:5b:51:c8:74:cb:
a0:7d:eb:5b:1b:dc:50:48:9d:9a:64:cd:e3:27:1e:7a:ec:88:
fa:ce:29:ad:47:ac:3f:32:c1:b5:8c:63:c1:f7:11:51:52:61:
26:d6:cb:26:3d:d1:85:8a:17:c8:dd:11:ee:d7:1b:b0:63:5d:
93:45:c5:56:b1:a4:68:50:54:6f:93:df:49:92:d0:ae:e4:26:
07:ff:f0:c4:55:9e:37:f1:77:aa:bf:48:a6:37:aa:18:bc:03:
ee:d6:c2:7c:2f:64:3f:e7:4b:9f:6a:57:43:8c:52:5c:77:a2:
81:50:88:09:48:2a:16:c6:c1:1a:c3:ec:a6:16:39:73:37:df:
6a:be:f1:c9:d8:84:57:54:77:26:3c:02:78:31:22:1d:09:fd:
9e:3f:5b:65:a0:20:39:5f:a3:ad:4d:48:ab:e2:47:ed:a2:70:
47:4b:89:1c:d0:83:45:76:60:fd:92:0c:40:89:ce:39:02:b0:
bf:02:04:db:fb:1d:05:84:fc:f1:fc:ea:35:3c:0c:14:cb:2d:
62:04:39:b2:74:ca:90:e3:05:ea:47:f4:c6:1b:f6:04:97:09:
4f:2d:51:89:9e:ba:37:fb:f9:a8:cc:42:b8:df:da:fe:70:ab:
1d:25:61:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:22 2025 by rpki-client