Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ff562219-a198-3b3e-b80a-f52c04f2ae20.roa
File: ff562219-a198-3b3e-b80a-f52c04f2ae20.roa (raw, json)
Hash identifier: Dy7gBGOBzUZssO/T7tQqbGSQ5paG/mvzi7b417he0HA=
Subject key identifier: 25:0D:2A:38:EC:56:9B:7D:58:18:08:E7:8A:67:28:17:6C:82:CC:92
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D14EAA9D89529B88B57CA0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ff562219-a198-3b3e-b80a-f52c04f2ae20.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20001
IP address blocks: 24.94.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:4e:aa:9d:89:52:9b:88:b5:7c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=2ae18e93-429c-4c80-90db-a4926da575d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ab:5b:79:83:79:d5:dc:a1:54:ce:df:0d:54:
83:65:17:f6:62:d8:9e:af:e8:51:b3:db:60:72:f8:
2b:d5:72:33:f1:f9:69:04:a7:f5:17:8f:84:ab:4d:
26:50:90:c8:7e:fa:51:b1:e4:12:dd:7b:54:5b:3c:
12:70:34:5b:2f:46:c0:15:74:e2:fb:7b:22:d0:a9:
41:55:5b:f4:d0:8a:53:46:9a:9e:13:aa:5e:53:36:
b7:2d:18:57:53:04:1a:89:14:95:be:f3:e2:2b:9d:
63:b8:ca:69:8d:21:e7:31:e1:c7:bb:6a:c6:f5:f5:
2a:5b:d1:c4:25:6a:ff:6d:c9:ec:35:a9:3c:3a:26:
4a:32:cb:43:fd:e4:1f:6d:e2:56:0d:08:78:d8:73:
a8:7f:b7:75:7e:3b:9a:6d:16:13:36:0b:54:e9:7d:
ed:9f:4e:43:77:0b:30:10:90:dd:6d:20:bd:f8:9f:
62:10:1e:6c:7a:96:44:83:da:25:7c:95:60:9d:23:
9d:b8:21:ea:55:67:ac:f6:3a:db:d6:0d:e2:64:39:
c6:3f:22:97:f6:6a:08:09:ad:f6:48:99:ef:63:b9:
94:12:cf:38:a8:3e:52:29:e4:8d:27:e5:d3:00:ba:
05:01:bd:47:99:5d:3c:48:ec:bd:0e:1e:0b:e5:45:
ca:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0D:2A:38:EC:56:9B:7D:58:18:08:E7:8A:67:28:17:6C:82:CC:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ff562219-a198-3b3e-b80a-f52c04f2ae20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.94.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:81:09:53:aa:1f:c7:27:58:64:94:cc:8b:0b:78:41:bc:93:
c2:8d:98:f6:c7:f9:1b:8a:63:fc:ac:29:f0:9c:d4:de:93:46:
a2:a5:33:17:d7:ca:a2:a1:c0:03:72:df:4d:2c:27:65:eb:b9:
8b:ab:69:4f:7b:c6:c5:2f:f5:ea:be:a7:f1:67:b5:64:6e:11:
0e:1f:55:e8:34:86:96:18:24:f0:2c:11:07:23:7f:f2:ef:f0:
e2:95:5f:8a:c8:07:0a:d9:26:c6:47:90:79:eb:f9:57:d7:49:
d6:5f:34:16:04:3a:92:4c:e0:6f:91:2e:55:1e:03:ed:ee:e4:
4b:b8:28:5f:db:b1:55:50:13:cc:c1:0a:07:25:9f:bf:7d:d3:
2a:b2:bc:c1:90:c2:16:1f:f1:83:41:cd:46:0f:2a:fe:65:4a:
e3:47:d9:cb:87:98:13:d2:7e:6c:b6:b0:31:0c:92:19:ea:05:
06:30:f1:07:af:0a:35:f9:59:50:1b:2e:02:ad:6f:b4:bb:4b:
d9:73:b9:b8:6f:ad:59:eb:bf:e7:d4:fe:51:23:b9:00:dc:6b:
cf:11:36:84:d2:6c:df:dd:03:98:e6:d4:94:b8:ea:fb:3e:9a:
da:fb:f6:41:e4:1d:32:4b:0a:17:f6:73:70:aa:4d:bd:89:21:
56:51:c4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:50 2025 by rpki-client