Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/ab72ae7a-bbb6-383b-bcd5-f0c98c0ab346.roa
File: ab72ae7a-bbb6-383b-bcd5-f0c98c0ab346.roa (raw, json)
Hash identifier: bzdlwP+eQcPxwd0WMO4H+1oYsDK/Vfa28UTcGbCOghU=
Subject key identifier: 9D:16:A9:6F:85:9C:A7:25:0B:8B:B8:0F:9C:49:4D:22:CD:BE:EA:6B
Certificate issuer: /CN=7aeb1cf3-9b67-4e65-93ee-39960a392b68
Certificate serial: 010D0C9F4328584807AA70589FF92F8D0AEE3AC0
Authority key identifier: 69:61:30:F5:96:DC:44:BC:35:07:F4:81:95:8A:64:32:64:F8:7C:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/ab72ae7a-bbb6-383b-bcd5-f0c98c0ab346.roa
Signing time: Thu 28 Nov 2024 14:00:52 +0000
ROA not before: Thu 28 Nov 2024 14:00:52 +0000
ROA not after: Wed 26 Feb 2025 14:00:52 +0000
asID: 11399
IP address blocks: 137.165.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:07:aa:70:58:9f:f9:2f:8d:0a:ee:3a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aeb1cf3-9b67-4e65-93ee-39960a392b68
Validity
Not Before: Nov 28 14:00:52 2024 GMT
Not After : Feb 26 14:00:52 2025 GMT
Subject: CN=11315fe1-6226-4907-bb4f-33079b0b70ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:99:8a:31:e2:df:dc:eb:1f:86:d1:97:7a:32:
5d:14:ba:3e:b8:d3:87:15:d8:48:34:b5:9e:d9:5e:
42:54:6d:cc:95:69:5d:46:5f:34:04:82:b5:f5:9f:
cf:eb:97:ab:2f:4e:a0:b8:ad:27:3a:37:5b:2c:fd:
fa:2d:22:c8:f2:71:f0:e1:8f:0c:b2:6f:36:67:b8:
bb:fa:9c:22:a6:ae:8f:da:c3:4f:d4:ec:9c:d2:17:
f5:6c:7d:b4:fa:e4:4c:c8:01:a4:31:91:29:2c:d5:
1c:b6:e5:24:92:41:b9:64:8f:f2:f8:64:90:25:51:
c9:d8:4b:b0:79:d8:5d:04:ca:89:7f:a1:2f:95:76:
e9:71:9b:97:07:01:fd:da:7e:80:55:92:77:53:9c:
47:47:c2:58:07:97:c2:c9:1a:2d:4e:6e:f0:d4:c8:
3e:f6:e9:5a:3d:7e:0c:a6:f6:53:d8:ab:a0:1b:17:
8b:74:d8:f2:c6:03:17:0c:e6:41:49:1c:a2:47:70:
87:16:ee:f8:c0:f0:a7:37:a4:06:3d:12:7f:32:06:
d4:38:2e:b0:2e:9c:d1:51:68:aa:e5:7a:4e:4b:ef:
e2:e2:b5:72:b0:6f:34:8c:ac:c0:68:91:35:0e:1f:
e6:06:43:fb:48:39:30:94:b0:c0:04:64:55:9e:8b:
60:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:16:A9:6F:85:9C:A7:25:0B:8B:B8:0F:9C:49:4D:22:CD:BE:EA:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/ab72ae7a-bbb6-383b-bcd5-f0c98c0ab346.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/7aeb1cf3-9b67-4e65-93ee-39960a392b68.crl
X509v3 Authority Key Identifier:
keyid:69:61:30:F5:96:DC:44:BC:35:07:F4:81:95:8A:64:32:64:F8:7C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68.cer
sbgp-ipAddrBlock: critical
IPv4:
137.165.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:6e:d5:71:10:27:9a:a1:ba:b3:ae:d4:54:7e:ed:3d:02:67:
17:78:c6:fe:98:17:1d:ec:64:d9:39:3d:44:36:22:e3:7e:1e:
2b:b1:95:a9:89:e7:f9:1e:b0:78:5f:62:75:80:92:b3:20:43:
ae:9a:86:fa:82:6f:e9:07:e0:18:3b:5c:4d:7f:af:36:96:19:
c9:3b:e4:6e:54:0f:a3:5b:86:29:39:f4:d6:6d:74:e1:0b:7d:
44:7b:42:8b:e6:65:ee:26:9b:e5:71:c7:be:47:2a:23:11:78:
1e:47:1b:9c:56:b4:05:a2:6b:a1:ac:aa:45:74:b4:dc:6a:5d:
6b:c2:38:f3:45:d1:fb:16:b3:a4:75:2b:83:0a:14:f2:ea:3b:
0f:7f:78:76:e0:20:b9:98:1e:14:fb:1c:4c:f9:23:10:0d:07:
eb:df:1a:99:f7:ff:ec:80:31:59:06:f7:96:e9:8d:a5:c0:4b:
a4:87:b0:b9:d5:70:32:b2:b6:fb:ab:d4:62:fc:9b:e6:42:46:
b0:a9:dc:b7:9f:93:a6:71:9d:bd:5d:be:28:d5:6b:c8:5e:6d:
5b:76:d9:ef:15:c4:92:1a:41:2c:42:6c:e6:cb:5d:f9:3a:7d:
b6:46:57:c8:30:e8:a8:1f:54:f7:e7:ea:65:be:bf:c6:13:72:
f8:32:17:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:48:03 2025 by rpki-client