Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fc92606a-95d8-387d-983e-1ccf46063441.roa
File: fc92606a-95d8-387d-983e-1ccf46063441.roa (raw, json)
Hash identifier: JjRBWDlNK3B9NxoAe3gIcK9ZnMnkDg8AgsM01klDMd0=
Subject key identifier: EE:15:E5:2D:3A:2B:48:F8:EF:DD:F6:A6:B2:F5:1B:46:56:71:FE:51
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D132BCDE292EF894F07600
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fc92606a-95d8-387d-983e-1ccf46063441.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 10796
IP address blocks: 67.53.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:32:bc:de:29:2e:f8:94:f0:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=85fe4e2a-8a93-49f6-88a0-b1a20ed690d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d8:7f:e0:f5:c2:6c:8f:fe:b8:6b:4f:37:83:
3b:30:d6:ac:c5:f9:ab:58:98:94:2f:c5:35:85:71:
d1:3c:35:5b:86:4e:08:19:bd:7a:d1:01:67:fc:f5:
e4:7b:8d:d5:2f:98:9d:ac:21:37:88:67:ce:b3:bc:
42:9a:6b:4c:f0:f6:34:a3:39:b6:43:bc:0f:8f:5c:
4c:af:0e:b7:2b:ed:0a:ea:ae:74:dc:23:1d:a9:bf:
ab:3d:ff:db:df:18:be:6b:e0:ac:56:f4:02:13:13:
e6:3e:72:cb:f6:26:4d:f4:2d:51:49:cf:73:69:60:
13:7c:98:50:0c:59:24:49:34:e9:d6:db:38:a8:f4:
aa:85:d1:17:73:f0:0e:d9:ff:31:14:f0:ce:dd:77:
47:40:4b:53:2f:3a:b5:98:1c:44:a9:6d:97:f6:f0:
b4:78:42:0f:64:dc:fd:51:df:6d:ee:1d:c1:98:57:
84:d9:9e:89:7f:70:76:98:6f:62:f4:bc:a0:90:68:
01:c3:d3:c8:5f:c4:af:e5:bd:cd:f2:76:cb:86:5c:
6d:21:f5:85:39:e5:f6:60:cc:45:ed:d2:9f:a5:7f:
79:6f:7b:e8:70:82:b9:0b:39:2a:e3:0f:6e:f1:de:
0f:9c:60:8a:a1:10:55:56:e2:a3:d3:4f:f6:67:2d:
03:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:15:E5:2D:3A:2B:48:F8:EF:DD:F6:A6:B2:F5:1B:46:56:71:FE:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fc92606a-95d8-387d-983e-1ccf46063441.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
67.53.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:30:31:2a:f6:2f:f1:8d:3e:93:b5:3f:58:42:2e:5b:ad:00:
02:4d:ea:e2:64:ef:f6:6b:94:00:be:b2:06:ff:5a:52:f8:51:
58:5f:28:21:4d:bc:44:4c:5b:d9:50:e4:e9:8e:1f:a1:26:11:
b0:59:61:8b:9c:0e:89:f5:d8:76:15:3e:bc:65:ee:57:a4:f2:
6a:d2:8c:e6:5b:56:91:59:a1:61:56:57:e2:d4:62:50:46:af:
98:92:3b:9c:27:4f:42:85:7b:29:d5:fc:06:30:dc:c9:70:30:
fd:2a:c0:fd:3b:a6:65:93:b4:c5:3c:93:36:b8:01:3d:c4:24:
57:b9:48:c0:2f:d4:7d:4b:4c:6e:9a:04:bd:b4:87:90:d2:e6:
71:3f:1b:5e:d2:e3:24:0a:9e:db:76:13:5b:67:b9:bf:f9:fc:
c0:74:8d:59:09:03:23:f9:cd:08:c0:d0:93:bb:37:fc:5f:5d:
b1:6f:d9:70:d9:19:71:86:69:74:c9:dd:e1:96:4c:80:2a:7f:
e4:e3:57:45:5b:71:16:24:00:84:fc:a6:e0:e0:f2:d7:0f:6a:
fc:3e:d3:58:92:c7:f1:07:bc:81:e1:5c:29:a1:d9:af:bc:5d:
81:26:2d:bd:d5:5a:b7:d8:24:f9:a5:10:53:3f:52:7a:a1:30:
60:53:b5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:06:28 2025 by rpki-client