Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/dce87514-6e02-371b-b663-7d29855c31e6.roa
File: dce87514-6e02-371b-b663-7d29855c31e6.roa (raw, json)
Hash identifier: ZNkJoNVUEO3MZUVa/RNOdXVL0TCnfHxpa3x4drSt1ho=
Subject key identifier: 77:AA:C4:C1:12:28:39:31:64:98:55:89:1B:EA:55:5E:FF:42:6C:66
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D123C54E1DC7C7CAB97C00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/dce87514-6e02-371b-b663-7d29855c31e6.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 7843
IP address blocks: 2001:1998::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:23:c5:4e:1d:c7:c7:ca:b9:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=2a7daa9c-7a37-49dd-9266-c5f7c0378555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a9:19:02:22:8b:ca:a9:54:da:85:2d:1c:11:
1c:30:fc:72:fd:9e:4b:8c:22:f0:5b:ff:8b:48:5e:
6e:14:d4:80:10:cb:50:df:8a:2e:2c:a1:0d:7c:9d:
33:0b:1c:3f:34:3a:47:8d:78:6b:65:f8:80:31:a2:
fd:e9:21:73:5f:ec:44:93:b5:5c:d8:37:b6:4d:6e:
6c:20:33:75:e8:70:1e:3e:1a:8d:91:45:3f:51:f2:
85:37:d9:bc:d8:41:16:6e:02:a9:80:b5:26:28:c3:
7c:86:1c:42:ab:31:18:93:ce:c0:a7:ba:d9:8e:b0:
03:c6:0a:4c:bc:d8:24:7c:ae:69:74:41:4e:c4:4a:
47:85:0b:18:6c:99:26:43:10:2b:14:92:77:a4:3f:
7f:60:88:f0:23:8b:ff:1c:2e:7b:25:5b:f2:c3:89:
70:d6:de:72:68:23:f8:25:6d:72:9e:09:e4:0f:0e:
fa:b8:58:92:36:aa:05:f3:41:bb:5c:43:33:c8:3d:
7a:80:c6:22:55:e2:3c:a6:b1:12:a3:e8:a8:47:ad:
9a:f8:ae:62:d0:51:82:bb:89:27:8e:d8:0a:f8:88:
19:75:f5:d3:70:60:45:e4:6d:e8:3a:58:9a:44:67:
71:ac:df:c1:8a:45:64:c2:68:3a:75:cd:4a:c8:a4:
f6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AA:C4:C1:12:28:39:31:64:98:55:89:1B:EA:55:5E:FF:42:6C:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/dce87514-6e02-371b-b663-7d29855c31e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:1998::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:57:8e:52:69:7a:2f:65:c4:da:1d:08:f7:c5:14:f0:33:ad:
8c:ae:36:0f:6f:db:b2:9a:be:b8:28:8c:2b:fc:8d:55:82:df:
ac:7a:d6:31:ab:5b:a4:03:6e:cb:3e:b8:d4:1a:71:04:0c:63:
b4:36:57:3d:b0:89:2a:e6:1c:a5:59:31:76:87:52:2f:79:50:
20:88:52:a6:be:29:c7:3c:29:c0:60:c0:a2:0d:81:97:fd:04:
7c:a5:57:33:8e:66:ca:fc:96:db:39:fd:4b:0c:59:e3:47:90:
48:2c:12:52:57:10:68:f1:0a:01:0a:3d:85:8e:1d:56:6a:42:
49:12:b9:18:26:b9:0e:63:86:c4:d1:6b:32:eb:0f:86:ce:4f:
88:06:ad:dd:38:da:35:2a:13:99:65:92:c2:61:75:9b:36:03:
5d:37:a8:77:80:5c:d7:75:75:16:de:7f:0b:65:b8:0c:a9:de:
2b:c0:d5:3c:21:34:80:fe:42:c5:39:f2:ac:75:77:e3:07:bc:
70:3b:82:4a:49:d9:98:a1:7d:f7:dc:ce:e9:60:c7:b9:65:9f:
dd:93:f5:a6:3d:f0:4d:94:b9:07:07:c4:f8:a5:40:90:5f:1d:
54:ed:c2:4d:12:32:83:aa:02:e0:04:b9:9f:3a:cc:60:62:c2:
dd:c5:0d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:11 2025 by rpki-client