Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/faf34472-decc-3e4e-ac2b-5340e85dcd5a.roa
File: faf34472-decc-3e4e-ac2b-5340e85dcd5a.roa (raw, json)
Hash identifier: u/7W+SQkR5r8mM/yg1kcNY/wcas1+qBPWJ0juwwQQjo=
Subject key identifier: 45:A4:9C:3E:16:96:5A:0D:6F:62:C6:2E:2F:F6:A1:E6:DF:00:3E:1A
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1D51F5980C0018E440380
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/faf34472-decc-3e4e-ac2b-5340e85dcd5a.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 33363
IP address blocks: 24.129.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:d5:1f:59:80:c0:01:8e:44:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=d1d708af-65ef-468f-9286-796cb739e0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:af:4b:ae:b8:7d:31:74:fb:0f:c3:ce:6c:05:
33:b7:3c:2d:8a:61:50:0c:73:b2:d7:be:82:19:9a:
38:0c:6f:79:1e:23:6e:e0:bc:fc:d4:3d:e3:85:e0:
51:9a:b4:b4:6c:6d:6f:1c:cf:c9:d8:30:d3:12:ee:
b8:3c:c5:db:52:b6:f5:95:0f:10:09:ce:ec:9f:5f:
53:ab:52:7a:0e:dc:15:a7:3c:ad:2b:58:01:a4:51:
f1:f5:5c:29:84:af:28:ed:96:42:ca:fb:af:56:b7:
df:d1:65:35:d7:70:d3:01:09:bb:ff:86:c2:82:06:
d8:ea:bf:3d:d5:74:f6:2e:09:e2:cb:82:8c:28:55:
81:0f:92:15:97:e0:01:c6:dd:63:75:38:21:f2:2d:
5e:e3:9a:d0:1e:64:20:27:f8:73:02:6e:dc:84:b9:
8c:77:92:bc:b5:cc:1f:85:ae:6c:86:d3:46:f0:a8:
6c:66:6f:be:7c:77:c0:a8:c0:6b:d0:fd:24:4c:7e:
e6:7d:3f:11:ee:3f:34:59:79:4f:fb:ba:7c:4c:41:
77:28:57:56:32:03:0b:a1:c9:a7:e7:4e:75:38:e4:
79:7b:0b:01:41:1b:b6:73:53:9a:64:4f:2e:a1:90:
1d:cf:2b:f2:18:fb:09:fa:dc:88:47:67:27:be:87:
ac:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A4:9C:3E:16:96:5A:0D:6F:62:C6:2E:2F:F6:A1:E6:DF:00:3E:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/faf34472-decc-3e4e-ac2b-5340e85dcd5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.129.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:f9:5d:03:49:eb:eb:24:80:ed:6f:80:e6:b5:e4:60:9c:24:
17:ea:15:4b:3f:91:09:76:10:4f:12:a5:b0:e9:03:96:c4:df:
16:32:c5:d0:68:8f:a6:a8:de:9f:56:91:09:34:ad:94:fa:2d:
c3:7d:a8:7c:87:ae:fc:31:61:88:eb:39:e1:99:05:4e:cd:75:
e2:10:6e:0b:1e:8b:0d:09:e5:1e:99:54:06:87:74:4a:e3:cb:
ac:58:e2:88:ff:07:ec:94:f9:e0:76:6f:60:f7:8d:48:19:5f:
e1:89:e5:e9:e6:5b:b5:dd:2a:27:b0:c8:91:ab:b4:01:db:e9:
cf:fd:39:0e:8e:05:61:75:f1:6a:3e:d6:d5:b0:e3:6f:6f:77:
8f:22:af:37:6a:e0:e2:6b:4a:f2:23:28:ad:d3:cc:7e:08:b1:
c9:63:0f:c6:a8:6e:f5:8c:66:63:93:fb:71:18:f7:4e:df:db:
7d:79:dc:c8:81:d3:84:f7:bb:d9:20:2c:de:d2:97:cc:a2:a2:
35:82:06:61:6e:af:cd:ee:4c:6c:41:7c:46:42:fd:69:b2:4b:
2b:64:de:fb:94:1e:b3:35:16:2e:c3:89:f5:5d:2c:be:7f:e9:
56:9b:fc:81:d4:4f:4b:bf:8a:be:f2:4a:1b:1d:20:11:e6:88:
88:59:77:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:44:09 2025 by rpki-client