Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/eceff2cd-2330-3d9f-bc1c-45811bcafb54.roa
File: eceff2cd-2330-3d9f-bc1c-45811bcafb54.roa (raw, json)
Hash identifier: i9ZmqFDfI/kJAQ/lBDcCpUmSlpP4sXY1PL3YlwsrXEI=
Subject key identifier: F7:FF:BC:D0:D9:4F:BD:DB:05:D0:5E:ED:A2:C9:4B:D8:A2:AE:AD:27
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1C87505130FB876C3EF20
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/eceff2cd-2330-3d9f-bc1c-45811bcafb54.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 11427
IP address blocks: 72.128.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:c8:75:05:13:0f:b8:76:c3:ef:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=7be57bb5-9bc7-4522-8e4e-46041e59aaeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:12:af:03:5e:e4:da:44:4e:81:86:be:3f:ed:
f7:fe:34:ac:6c:b0:85:8f:26:6a:02:eb:61:0c:11:
26:c0:41:df:50:fa:3c:17:53:4c:85:f8:a0:05:ba:
44:91:1a:b2:f8:c2:fc:51:01:0a:d1:7e:fe:b4:be:
38:65:a3:53:89:8a:9c:fc:30:8e:25:88:d2:f4:41:
53:70:8e:95:5e:30:1d:4d:55:ad:cd:76:da:34:69:
99:01:3c:43:4a:e6:fc:c7:26:0d:30:c6:6f:d2:f8:
82:dc:c0:17:65:a5:f7:00:55:f8:96:81:69:45:2d:
05:d3:f2:50:43:c1:c0:b1:95:90:ee:12:c6:6f:94:
16:49:38:b8:88:e6:97:81:65:f1:84:a7:52:6d:7d:
c4:28:42:71:4c:4f:ca:23:46:34:a2:0b:18:8a:40:
97:c6:67:79:dd:f1:ec:9f:33:2c:0f:34:37:8c:e4:
8f:5e:4b:89:7a:b5:40:b6:90:17:e0:57:0e:b7:2c:
04:11:48:32:3c:da:7d:1e:ab:96:f7:bf:37:07:50:
9b:95:3f:4f:56:c2:f9:8b:ff:26:43:53:70:a1:07:
96:a0:ec:c3:58:a6:d3:88:a6:81:f2:4a:f8:0c:27:
48:90:f2:07:eb:d8:63:80:20:07:c8:28:42:c6:1e:
1b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FF:BC:D0:D9:4F:BD:DB:05:D0:5E:ED:A2:C9:4B:D8:A2:AE:AD:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/eceff2cd-2330-3d9f-bc1c-45811bcafb54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.128.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:c9:b9:60:2e:42:c6:b3:60:a7:83:18:c9:93:61:1e:12:b0:
69:12:8b:9d:2b:ee:cb:7d:b0:df:3f:d6:a4:25:30:0f:12:2c:
e4:8f:9d:a6:4c:fd:e4:db:f4:28:73:9a:ca:1f:0f:8e:ce:fb:
86:38:e1:c7:9e:ef:b2:3a:be:d9:95:d9:54:b2:39:21:44:7b:
f7:cb:81:50:52:29:d0:c0:e8:c3:a8:34:d3:32:fb:6c:90:fc:
11:96:0d:9f:3a:08:b6:a7:5a:f4:f1:41:13:73:56:89:0e:ed:
c8:34:f8:07:a6:e2:76:86:ab:70:a9:1b:75:0a:88:6d:62:8c:
a6:73:9c:59:b8:c5:ab:87:64:07:55:64:c3:fc:34:8e:a6:49:
84:87:f1:76:a4:0f:7c:c5:1c:36:5a:4b:4a:00:6a:ab:b3:a3:
a0:69:7d:4f:34:a8:17:8d:86:b3:b6:76:49:c4:5c:a3:a6:a8:
b0:e7:bc:02:ce:d7:41:f2:a1:4e:8c:56:e7:3d:e4:af:a4:cb:
c9:3f:54:7b:66:90:08:dc:db:cb:0f:df:5e:69:ae:9e:db:6a:
4b:83:af:83:9f:34:ac:8c:7b:e8:d9:18:b4:5e:39:72:20:cb:
b6:97:5c:d9:96:fb:d8:ca:24:cd:77:f7:db:2b:01:f0:ba:0a:
67:fc:ee:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:11:15 2025 by rpki-client