Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1bd1b2e7-0fba-37a6-bde1-cac30ac6d971.roa
File: 1bd1b2e7-0fba-37a6-bde1-cac30ac6d971.roa (raw, json)
Hash identifier: fGknxHAN+p3AMlj2RN//bk74T0OBK7xEyD/Nchyparg=
Subject key identifier: 28:F2:84:1C:BB:5F:86:C0:9F:B3:A5:EF:34:90:7F:C8:CD:D2:ED:DA
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037AF707CE2FE1872863BD00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1bd1b2e7-0fba-37a6-bde1-cac30ac6d971.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 11351
IP address blocks: 72.228.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:f7:07:ce:2f:e1:87:28:63:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=711a0055-6f18-4681-8769-4594129730f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e0:69:96:d8:f6:dc:b9:c5:e4:cb:b5:d7:0f:
75:e2:2c:d9:25:cc:c6:55:29:26:fb:81:ef:e8:68:
7c:d8:72:2e:ce:f0:c9:bb:e0:6c:53:5f:b1:eb:40:
ee:a5:be:ad:37:ba:dd:19:06:76:b0:ed:38:19:e6:
4b:32:29:94:9c:bc:69:e0:9a:23:77:bc:77:92:3b:
cc:0e:2f:e0:8f:d0:c6:0f:83:66:b4:60:77:98:65:
a9:5c:8e:eb:66:ba:0a:2f:49:50:14:fe:a3:c8:8c:
dd:73:c6:ca:0d:62:03:58:88:26:ca:51:b1:7d:99:
49:1d:fd:a9:df:24:4e:3a:95:19:e0:9f:71:36:7a:
b5:9e:7d:0c:ce:76:70:af:83:1d:ae:07:6f:8b:80:
54:50:9a:a0:c9:94:be:0f:e7:2c:a6:34:90:f3:98:
36:22:73:2b:6d:f1:6a:8c:b8:4d:4e:93:0b:5d:c6:
24:85:6a:96:78:29:35:7b:ab:f2:ed:fd:6e:97:f2:
a3:53:51:50:cf:2f:93:05:ef:08:8c:f5:57:0b:8f:
a8:86:dc:8a:0d:1f:17:c9:e7:77:46:1b:33:2a:ae:
94:79:ab:5c:c1:f9:69:e5:6c:38:96:15:7d:64:1a:
c4:c3:43:09:9c:d1:8d:2e:7a:b2:be:f6:cd:46:c2:
45:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F2:84:1C:BB:5F:86:C0:9F:B3:A5:EF:34:90:7F:C8:CD:D2:ED:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1bd1b2e7-0fba-37a6-bde1-cac30ac6d971.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.228.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:10:19:19:c2:ce:b0:82:39:04:46:a0:ab:04:7d:bb:9d:03:
c6:16:91:9f:8e:ad:13:87:ae:65:50:fc:e9:7c:a2:11:3f:62:
b7:94:fd:99:98:91:8b:39:56:c7:f0:5b:db:33:7d:1d:96:2b:
ac:35:e5:08:98:3e:2e:8f:1f:d3:2c:61:75:0e:9a:54:4a:2a:
2b:d6:6b:fc:36:45:46:5b:e3:14:1b:ea:41:c9:78:94:4f:22:
91:7f:6e:32:f9:1e:9a:e6:e5:21:9b:8e:9a:c0:98:c5:fb:da:
17:ec:ed:40:18:0f:85:c0:df:3f:c9:68:e7:1d:78:6b:8a:ad:
ce:19:db:02:d8:a1:2d:eb:d6:10:1c:92:e8:61:2c:e8:9b:07:
8b:b3:76:f4:88:3b:43:fd:69:64:de:12:76:f8:f6:30:90:83:
50:d1:61:95:d6:e4:12:8c:f6:1c:1f:74:c3:3c:45:9a:3f:0e:
b0:cc:6a:8c:32:90:4d:ce:68:69:c6:b3:3e:37:64:ef:cc:e6:
d7:cc:df:c6:ac:b1:5d:e6:65:27:e5:5b:84:d6:91:9f:22:55:
18:33:da:6e:e6:38:0f:56:8f:7d:53:34:b0:da:c0:52:2f:f6:
da:12:d8:91:4e:e8:3d:ae:8f:be:cf:f3:fc:7f:44:22:d2:84:
4c:bd:46:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:42:08 2025 by rpki-client