Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/db81cf4d-5215-32e9-a3cb-a211b56f0cb8.roa
File: db81cf4d-5215-32e9-a3cb-a211b56f0cb8.roa (raw, json)
Hash identifier: 1jODlsBufEvpamWrsz0WqRpT4JNlixgJg4qgS8rOm9M=
Subject key identifier: AD:D1:FE:A5:B9:7D:33:25:9D:5B:F5:AD:5D:F8:BE:E4:DC:38:41:8E
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1240D66089DA72ACDDD80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/db81cf4d-5215-32e9-a3cb-a211b56f0cb8.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 7843
IP address blocks: 173.197.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:24:0d:66:08:9d:a7:2a:cd:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=f93ae7ec-709e-467a-a81c-e7ea538de76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:60:8a:c0:a4:17:c8:96:85:82:79:14:79:ba:
2d:2f:11:0f:ee:8f:96:73:c0:ac:d3:f2:53:e8:2a:
b3:36:dc:f2:c6:e5:46:fb:0f:7b:07:86:b9:f4:be:
e1:32:27:99:e0:3c:cb:8f:c7:02:3e:cf:51:fd:50:
f3:0d:9f:a5:b7:cd:6f:d6:cd:ca:05:fb:5f:b6:b0:
69:f5:50:18:f9:a1:de:dc:ac:36:dc:4c:05:97:a6:
f3:7b:d7:a4:bb:2a:4b:df:f5:71:1d:fa:65:0c:37:
ea:9b:87:b5:05:69:1d:39:23:ba:7d:48:50:bd:03:
24:4b:b9:e5:69:76:a7:41:33:49:81:01:50:0a:a6:
58:e1:9b:c8:67:8e:98:4f:e9:c8:08:9a:8b:f1:7d:
68:78:c4:fd:48:36:8a:2d:02:b5:78:ce:73:b8:d0:
0b:91:2d:38:93:04:63:7b:68:ad:03:f5:29:08:28:
86:38:fd:40:51:d7:8f:47:7e:4e:0b:7c:24:ff:42:
c0:a5:5b:b3:a9:bc:9a:2a:5d:e6:77:74:fb:86:44:
18:3a:1f:12:3b:e1:79:49:41:9c:4d:0f:31:e1:af:
58:c8:9b:db:b6:fc:05:c8:7e:02:4b:e4:d9:96:fb:
8f:29:8f:92:f1:0a:bc:37:6f:bd:15:b5:1b:bf:76:
aa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D1:FE:A5:B9:7D:33:25:9D:5B:F5:AD:5D:F8:BE:E4:DC:38:41:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/db81cf4d-5215-32e9-a3cb-a211b56f0cb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
173.197.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:51:5c:4c:fe:1f:03:68:bb:a8:7a:65:60:e4:1b:fd:a4:8a:
1a:86:4d:8f:f6:93:44:21:2f:6c:ab:02:e3:6e:bb:35:7c:a2:
cd:b9:c9:02:fb:61:a4:17:d8:28:b7:be:8c:85:65:f7:62:17:
15:42:f6:a9:55:57:89:53:c9:73:03:77:bb:75:5e:03:99:49:
44:fa:92:69:2d:c9:a1:9c:de:0f:02:d3:d2:1e:c0:09:ba:9d:
0f:3c:2e:69:3d:1c:f4:f9:5d:6d:58:e2:6a:98:31:a8:a1:a7:
c6:02:5a:0b:c6:3f:e1:1f:bb:7d:ca:4d:7b:9c:72:6a:f1:0e:
f9:35:d0:72:16:0d:03:75:ea:d1:21:3c:63:1c:e8:e7:7b:ef:
f0:43:ae:9a:ce:33:95:d5:75:99:a3:4f:fe:a7:1e:2c:07:8e:
1b:b4:f8:d7:a0:f4:21:9b:cd:99:38:da:bd:40:61:75:4f:84:
f3:72:26:41:6a:0c:d4:e2:80:d8:0b:65:ed:60:2a:4f:42:26:
9b:30:44:ed:97:b2:00:b8:7c:53:20:a2:71:2c:f0:73:15:40:
99:7e:ce:bc:8d:8c:9d:42:d6:be:b9:a4:2b:4d:27:fb:d0:d5:
ce:ae:83:78:a7:d0:e5:2b:da:46:3a:c3:cf:db:c1:f3:65:7f:
c9:81:d8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:44 2025 by rpki-client