Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f8be478a-3593-3c09-83b3-bf6d7f0e6009.roa
File: f8be478a-3593-3c09-83b3-bf6d7f0e6009.roa (raw, json)
Hash identifier: 2We+VDkbWSyZr06DPaa8mSI3hLCdnA54i6xEhQk/I9c=
Subject key identifier: 65:1E:23:22:16:C5:7D:E6:96:0D:24:0F:E8:16:CB:A6:60:7C:AB:71
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1C5C14CF8A24285D82D40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f8be478a-3593-3c09-83b3-bf6d7f0e6009.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 11427
IP address blocks: 70.120.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:c5:c1:4c:f8:a2:42:85:d8:2d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=858bfd27-3235-4c75-aa16-3772aaf5a2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:71:8d:6d:65:f9:1e:69:64:04:c5:08:b2:9d:
a6:7c:4b:14:9b:4c:3d:d1:49:d2:9e:61:0a:c6:f1:
92:79:0e:06:e1:a3:09:2c:c5:a4:7e:4c:f2:bb:75:
d0:b8:24:60:9e:1f:c3:59:1d:f1:3b:d2:9e:e7:fa:
8a:49:2a:05:2d:bf:3b:d0:ad:04:84:6a:19:5d:f5:
8c:d1:45:c2:fb:3b:b5:53:1b:d1:f4:6b:29:78:71:
a9:b4:77:55:b4:bb:01:d0:8c:cc:36:bb:09:e7:f5:
3e:3d:76:12:ab:33:cc:78:27:b1:14:0e:20:53:04:
7a:64:9c:76:7b:00:16:70:9c:63:da:e4:81:83:a0:
06:38:96:75:95:65:ac:86:5b:68:da:64:f3:34:96:
ff:54:10:93:5b:57:e8:77:0a:2c:89:a0:9e:b9:de:
0a:cc:62:0b:90:27:09:2a:72:ff:21:be:16:9f:95:
33:f5:3a:d8:04:19:19:36:15:98:85:48:26:b7:37:
6e:1c:32:7e:5e:63:a2:ee:f0:aa:44:c5:97:b2:aa:
54:c5:51:f4:04:a9:b4:47:39:19:d9:9e:d0:db:3c:
23:06:22:22:5a:d9:e1:f4:53:f2:22:37:f1:a2:bd:
75:2c:98:c7:19:d8:58:16:2c:70:0f:b9:1b:a8:c5:
a0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1E:23:22:16:C5:7D:E6:96:0D:24:0F:E8:16:CB:A6:60:7C:AB:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f8be478a-3593-3c09-83b3-bf6d7f0e6009.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
70.120.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:6e:b7:b9:74:3a:a2:02:34:f3:bd:f7:55:56:ed:07:a4:b6:
e3:c8:47:eb:60:d0:6b:fd:38:73:4b:e3:79:cc:7e:be:66:52:
27:77:1b:a1:4f:ad:5d:c4:a6:1c:f9:10:c5:fe:a6:16:b8:b3:
e1:8d:f5:b1:30:e0:70:9c:36:ed:b3:86:59:26:2d:5b:ec:45:
3f:58:b7:6f:3a:86:29:7a:a9:65:b1:17:05:a7:2a:02:f0:d2:
25:7d:7e:32:ad:c1:77:28:db:13:9a:fd:fc:05:9d:e1:15:be:
ca:e3:ef:fa:a8:36:e7:22:14:93:c4:8e:7a:71:a8:49:47:1e:
6c:b4:d6:31:22:5c:99:48:c4:ff:ad:35:58:0f:19:bc:8a:64:
ca:6d:9c:05:95:ac:20:62:de:fe:df:68:8d:2b:4e:9b:73:d5:
5a:08:12:d2:f1:28:92:83:7a:fd:63:29:24:f3:07:2f:38:71:
42:ed:48:49:dd:17:fc:6a:eb:73:57:f6:6a:c2:6c:ab:c7:5e:
31:11:3f:0f:28:4e:76:04:06:41:a2:b5:1e:c6:ec:39:2e:5f:
6f:bc:91:a4:7f:3c:96:6d:b5:b4:02:67:93:1a:ce:2b:b6:0f:
b1:50:31:35:33:30:2c:3f:a4:f7:f7:7e:f7:9b:fa:d6:f9:26:
68:b1:86:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:04:47 2025 by rpki-client