Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f663685e-a56c-3290-abc3-e5dab75b46cb.roa
File: f663685e-a56c-3290-abc3-e5dab75b46cb.roa (raw, json)
Hash identifier: mbNQpqrRlcqlzPbbWvGq0W4bXEkj5pFCacs6YvdreH8=
Subject key identifier: 4F:90:76:5E:92:24:96:69:43:57:76:A8:9F:7A:9F:7F:4E:3E:43:AA
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1CD54F29C48DD312F0180
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f663685e-a56c-3290-abc3-e5dab75b46cb.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 16787
IP address blocks: 24.28.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:cd:54:f2:9c:48:dd:31:2f:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=05e3dc82-e44e-445f-a28e-230cb0e30c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2e:19:84:46:09:cd:20:12:12:3a:a3:d3:fd:
86:7e:43:de:9d:ef:00:c8:4f:84:35:7e:cd:c2:9f:
7f:c5:b9:67:32:84:82:87:8a:ae:0f:9a:8c:6d:61:
05:83:8b:40:80:83:57:09:ee:30:c1:55:57:a5:aa:
fc:76:f1:b8:5c:f1:c4:7f:b1:3c:d1:98:54:c0:23:
21:4c:8a:48:0a:4b:80:76:4d:ee:f5:90:2d:85:ad:
d0:9a:b2:4b:37:b9:7c:79:2d:c8:aa:06:41:81:7b:
e5:de:89:c5:b0:03:b2:1c:af:7d:2e:dc:f6:84:ef:
ae:34:1e:0b:9e:22:5b:4e:31:60:06:fa:c6:e0:42:
cd:7c:8d:3c:1c:69:48:f8:9b:13:28:65:c1:a0:d5:
2f:3d:82:0a:ed:59:2f:21:48:70:38:d9:6b:98:07:
93:ee:12:e3:93:71:bc:05:a2:c2:b2:a1:a0:f2:93:
8c:85:21:28:7c:93:b2:f5:42:f8:98:77:e8:9c:18:
c4:8b:ca:35:2a:60:e1:d9:90:92:a9:5d:58:4c:56:
04:9f:86:4d:20:b5:a7:52:ef:e1:b8:0b:33:11:c8:
79:41:4c:d0:d2:c4:88:4f:61:56:c8:c8:81:fb:9e:
09:8f:f3:18:bc:1a:a6:5e:4a:7b:37:b5:83:ab:55:
97:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:90:76:5E:92:24:96:69:43:57:76:A8:9F:7A:9F:7F:4E:3E:43:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f663685e-a56c-3290-abc3-e5dab75b46cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.28.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:bc:fd:16:aa:ac:9f:86:f8:54:2d:0b:fb:9d:e0:d0:2a:81:
b3:8d:ab:78:15:67:10:56:39:be:8d:93:47:d7:4a:e3:e8:d3:
99:e0:19:7d:23:49:76:25:35:88:ea:fa:92:5b:ac:37:27:00:
e0:6d:bc:1f:59:d3:f4:b4:58:44:71:92:0f:a9:b2:1e:fe:48:
77:7d:f2:43:96:98:3e:c4:44:95:9a:61:bf:c5:2f:ca:77:8d:
e2:aa:8d:ec:d4:3f:03:31:7f:46:07:00:44:00:5e:24:22:38:
27:64:98:bb:a4:ac:34:f6:42:71:89:72:22:46:3a:c8:f5:02:
da:ed:20:e8:d2:55:90:91:da:7b:36:57:3c:9f:61:ab:7f:2f:
77:63:b0:67:8c:af:85:60:90:3b:14:26:2c:81:3e:fa:80:df:
46:79:e2:de:49:43:14:da:52:98:19:d1:fc:1a:00:48:08:3d:
19:4d:9f:ed:5b:dc:6e:aa:8c:51:a8:b9:29:4b:89:80:12:14:
a9:89:8b:fb:f3:9a:c6:df:65:bb:f3:d1:e8:57:6b:d7:60:10:
35:a2:3a:c9:84:13:95:a2:b5:e4:16:26:0d:06:7d:45:af:d9:
af:a7:90:3e:d2:9f:9a:57:df:eb:49:d2:d1:72:48:6b:37:40:
17:bd:d3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:49:09 2025 by rpki-client