Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/24e95202-dd0e-30da-a34c-80929dc855c0.roa
File: 24e95202-dd0e-30da-a34c-80929dc855c0.roa (raw, json)
Hash identifier: IKBCg1SHQZzJ2tlUqn5Zvioe4kMvqk7rrxdlPt97yTo=
Subject key identifier: E7:5D:50:05:9D:AC:06:E4:F6:A7:E8:70:22:1E:38:10:EC:C5:9D:21
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A77911B793E35CBBFCEC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/24e95202-dd0e-30da-a34c-80929dc855c0.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 11427
IP address blocks: 71.42.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:77:91:1b:79:3e:35:cb:bf:ce:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=406b73aa-45de-4ac0-9afd-eb7a0f6cb862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:dc:91:fa:f7:c8:f5:a7:35:37:21:d7:19:83:
62:8c:2c:e1:ff:49:ff:07:d2:b9:0e:46:3e:57:df:
aa:41:4d:f0:2f:74:2c:eb:95:f4:35:f5:f1:6b:ff:
b5:fd:bb:d2:63:93:c9:b5:5a:6a:7b:89:13:94:1e:
45:92:4b:81:05:37:e8:84:3a:f6:f4:a5:4a:d9:05:
0c:86:70:d0:8c:1a:a0:39:ca:67:26:4e:77:9e:50:
8a:a5:bc:ea:3c:68:5f:a2:f6:50:0b:57:04:41:18:
a0:34:e4:7c:36:a8:1d:8a:09:c2:b1:fc:cb:a5:74:
d0:e7:a3:62:23:74:1c:38:d7:7d:86:9d:ba:fa:4a:
a7:82:86:86:fe:a9:2d:5d:c9:10:2c:75:50:0a:4a:
69:31:f0:1b:d6:3e:3a:06:dc:c2:c8:fa:32:9f:9b:
29:5f:bc:43:5a:dc:34:da:0c:cd:0e:39:b8:1c:66:
b1:0e:a7:94:46:90:d6:ad:ce:3c:8c:b3:dd:43:68:
c9:14:07:83:5a:9e:84:b9:8f:42:0a:87:e3:bc:a1:
4d:89:97:c0:2e:c7:d2:43:8c:24:17:c9:22:98:06:
f2:d4:94:fd:7c:c2:a0:bd:7e:f0:69:79:a5:5f:52:
8a:57:6f:3e:01:92:9c:48:66:0a:fa:3e:3c:19:2d:
ee:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5D:50:05:9D:AC:06:E4:F6:A7:E8:70:22:1E:38:10:EC:C5:9D:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/24e95202-dd0e-30da-a34c-80929dc855c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
71.42.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:f8:8c:48:49:d1:9f:f2:f8:31:8f:d0:88:54:02:a3:dc:a8:
89:57:2c:b9:7e:87:95:c8:cd:25:9c:46:11:45:e8:d8:09:94:
a2:4e:59:b8:bb:b5:db:ae:47:ec:34:e3:db:62:b3:d3:ab:de:
de:6a:2a:ca:e1:ce:db:c7:f4:f9:24:04:8c:e1:40:cb:ce:01:
30:7b:2a:00:63:04:13:fe:14:e6:8f:eb:77:94:d4:d3:68:7c:
42:c9:20:92:c3:8b:b4:d8:a5:8c:f3:c5:90:cf:d7:d1:93:22:
de:8f:3a:33:74:ba:fc:99:b1:c1:84:e4:1d:8a:c6:c9:aa:98:
00:c9:49:21:a6:c7:6c:d3:3e:f4:df:40:91:25:82:85:a8:39:
70:fe:a3:50:9d:a4:51:66:92:8b:e3:dc:a8:89:14:94:84:de:
7a:e5:1b:97:51:49:16:15:26:40:60:12:c0:23:8a:ba:75:4d:
0c:44:6a:49:94:be:09:0b:97:b9:e5:0b:fa:48:09:24:78:51:
90:98:54:8c:0d:ce:0d:a4:53:21:c5:cf:5b:12:c0:cc:a4:c7:
96:3f:bf:56:8d:19:61:4e:10:76:f2:53:45:4e:b8:f4:a3:ca:
ee:b4:5e:63:a5:3c:16:31:df:ea:84:ee:6d:db:1e:2f:db:bc:
70:9f:f0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:55:05 2025 by rpki-client