Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/251ec1bf-19a0-3333-afac-edb2aced55ec.roa
File: 251ec1bf-19a0-3333-afac-edb2aced55ec.roa (raw, json)
Hash identifier: WcMohifa6kSxi+rfFsUN2yA2xe93nvzW3dgG85PaxrQ=
Subject key identifier: 21:0B:C9:B9:1E:6D:60:6E:47:66:B8:F9:E4:71:8D:AE:3D:48:9E:39
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037B0E762AE1E318E4914B80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/251ec1bf-19a0-3333-afac-edb2aced55ec.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20115
IP address blocks: 24.169.152.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:0e:76:2a:e1:e3:18:e4:91:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=4e95145b-1124-4a4e-8a3f-b4ca521f79ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5d:66:c0:d9:27:7b:f7:86:88:90:13:e0:d5:
d0:17:7c:bc:a8:39:54:0c:1a:fc:7e:b1:e0:ca:27:
60:36:d3:46:c6:c3:40:16:e8:80:5e:6e:2b:9f:08:
07:02:ab:f7:d6:1b:3c:61:12:e5:9b:41:26:0a:f4:
1a:08:1e:f8:e8:e8:81:0b:1b:ef:94:b5:d7:09:26:
51:a1:69:13:a2:1b:0d:6f:b3:88:62:ab:0e:d4:d2:
a7:19:c0:30:2d:be:4a:33:99:0f:39:ec:32:21:1a:
fa:0d:c2:25:7a:11:2d:92:4f:6e:cf:aa:05:55:ba:
c3:02:48:6f:d2:0e:51:b1:a1:8e:75:ee:3e:1e:df:
6b:cd:b5:d4:50:d1:63:2c:39:c5:25:0f:93:dd:79:
18:55:bd:0c:29:c7:3a:70:95:20:e5:20:e2:66:83:
18:2d:74:10:c6:9e:d4:5f:87:80:79:d4:09:05:1a:
48:e9:ae:42:0d:24:e1:88:de:e9:aa:30:33:a6:41:
00:de:1e:b2:52:d9:f8:b3:a2:c7:6e:96:cf:ee:ce:
93:8f:c5:6c:94:80:6d:be:e8:26:29:a9:3b:51:f8:
f7:6c:ee:f9:22:36:61:91:cd:1b:85:db:ff:48:ad:
79:b5:03:6b:1f:69:6c:9d:7f:3f:9b:84:80:5e:60:
28:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0B:C9:B9:1E:6D:60:6E:47:66:B8:F9:E4:71:8D:AE:3D:48:9E:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/251ec1bf-19a0-3333-afac-edb2aced55ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.169.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:e3:fd:0e:b1:85:bd:b2:cb:46:dd:3f:b1:da:79:37:64:f0:
b1:5e:fb:e9:08:04:66:a7:2b:68:6f:f1:8f:4a:56:84:b2:16:
6b:2a:45:b0:84:bf:fa:5c:f6:06:6f:99:4e:d1:a9:d5:3f:3c:
7a:a3:98:e2:ff:52:dd:6f:29:ef:d7:61:8e:b1:6b:8e:81:7c:
d4:24:4c:87:6b:fb:44:e8:64:bb:35:56:fd:93:24:19:46:80:
ed:7e:11:ab:f4:9c:51:b4:e0:47:38:06:a9:c6:6c:d8:4e:49:
6e:20:9d:52:81:49:be:dc:5a:ce:ef:95:76:f1:f5:26:d2:dc:
b9:58:07:60:c8:f5:0d:37:7a:d6:4d:9c:c9:5e:cc:a2:d6:84:
2e:ba:24:80:53:21:4e:76:12:4b:ef:5b:82:ba:5f:ca:82:56:
10:08:e2:55:a5:ae:5b:35:48:d6:75:92:35:b8:c5:17:22:c0:
4b:1e:2f:93:18:14:9b:56:d7:a6:28:27:0c:b1:5b:11:d8:36:
f1:c2:49:6b:a0:01:2a:29:11:2b:08:1c:5b:6d:d7:02:5a:e9:
c7:a0:fe:f5:d0:8b:9c:fd:d2:2d:b0:49:de:63:10:cd:d3:53:
af:94:12:ed:df:eb:0c:53:8a:c9:83:d9:a1:6b:b0:7e:17:5b:
ae:55:2a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:26:51 2025 by rpki-client