Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f0c7c6af-529a-38bd-986f-30f0c5d9884e.roa
File: f0c7c6af-529a-38bd-986f-30f0c5d9884e.roa (raw, json)
Hash identifier: aL7uyBnz9XoJP8ixn/ClSrtjjVgJGmNbOe6xW3VZnm4=
Subject key identifier: B0:85:3F:A0:4E:71:14:87:3D:62:22:6E:07:4C:59:7F:04:D0:BC:E0
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F4328584944694D56DCA3A90E5578D850
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f0c7c6af-529a-38bd-986f-30f0c5d9884e.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 7843
IP address blocks: 24.106.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:4d:56:dc:a3:a9:0e:55:78:d8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=25d5664b-dba2-4f7b-9c89-2cfce863141d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0c:78:4a:37:97:9d:40:20:a6:62:ee:36:92:
f7:9e:da:14:0f:cc:c3:2b:1e:03:a6:6d:77:e6:70:
49:5b:35:82:3b:f8:7f:9a:6f:3d:c7:1d:dc:cd:3d:
1e:e4:9a:fe:df:b6:b4:d8:34:22:9b:98:a6:23:5c:
ce:30:cf:6b:c6:ae:fc:fc:8b:7c:6c:cf:e4:b0:93:
2b:82:f3:14:c4:3a:07:e4:75:22:4c:27:30:3e:63:
0b:e9:66:1a:7a:61:3e:4f:63:6e:44:2d:02:73:15:
63:ab:82:ac:f0:8e:c3:b8:5d:f1:44:f7:36:bd:ba:
17:4f:78:b8:19:f6:4e:5d:b3:9d:87:48:79:5b:e3:
fc:33:73:c8:9e:f0:91:4e:13:37:c6:23:3f:ec:05:
42:91:83:65:41:07:ee:9f:7e:30:71:96:b5:e8:53:
5d:fd:dd:6e:41:4e:43:19:93:72:b2:36:81:83:ec:
4d:a0:17:03:c1:11:b6:16:26:62:b9:6c:0e:79:b6:
cf:f3:41:0d:64:ea:a1:93:0a:c6:1c:80:6b:6f:59:
f5:78:56:d1:88:d4:42:8e:d2:56:e4:00:e1:54:bf:
d2:1a:27:33:8f:78:11:ad:07:34:79:1f:b7:43:28:
e2:df:77:79:1a:1d:c8:b0:1f:b0:7c:78:6a:03:56:
dc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:85:3F:A0:4E:71:14:87:3D:62:22:6E:07:4C:59:7F:04:D0:BC:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f0c7c6af-529a-38bd-986f-30f0c5d9884e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.106.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:25:24:d9:d3:b7:4a:06:19:f6:93:e7:c2:77:b5:a3:ce:2a:
ea:c6:a7:26:62:1e:55:1a:37:86:a2:84:78:55:fa:50:41:8f:
ea:e2:4b:6c:96:1d:8e:13:73:32:b4:7e:5a:93:d9:b4:8f:7d:
49:9d:a3:47:a4:5d:d0:70:f3:14:9f:cb:ff:fa:5a:8a:0f:b2:
46:ee:cf:23:1b:e2:d0:d8:d8:e8:e1:93:da:da:a0:94:e4:5d:
49:5c:ba:1f:88:49:0c:19:4d:db:3e:11:6e:b4:83:a5:d4:5a:
27:3d:f3:68:b7:86:2d:4c:37:31:cf:a0:5b:6a:f3:37:a3:da:
98:4b:17:ff:ac:e3:b5:58:a4:8b:6a:6b:3a:79:05:32:5f:4e:
14:7e:68:38:3c:14:1a:31:56:39:80:b1:fc:51:4e:bd:cd:2a:
37:4e:f2:16:bc:c2:93:09:6b:f7:1b:36:45:9d:c1:40:e0:1e:
5d:4a:b4:25:70:10:5d:56:c3:4f:e6:9e:15:6a:2d:b8:7a:1b:
2e:bf:b8:30:21:6a:ff:26:a2:6b:56:49:c1:4f:7b:af:ae:85:
a9:6c:86:88:ed:6e:a1:c0:9a:73:c9:89:b3:f3:25:69:ea:ea:
f9:4d:91:b2:aa:6c:59:f3:92:9a:81:63:1b:51:79:1c:4d:69:
e0:6b:13:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:24:17 2025 by rpki-client