Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2d603779-324d-302b-a85c-ab0dcf5f1692.roa
File: 2d603779-324d-302b-a85c-ab0dcf5f1692.roa (raw, json)
Hash identifier: H7ElV+TKEFzCw/bjsm7HEOKxgP6hYo4bow0iMcWKSek=
Subject key identifier: 3B:37:3A:6B:2B:42:AF:8F:EB:49:D1:3E:0F:36:A0:D5:5C:09:6B:25
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A8A6099CF1B3F9974C800
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2d603779-324d-302b-a85c-ab0dcf5f1692.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20001
IP address blocks: 173.197.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:8a:60:99:cf:1b:3f:99:74:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=f00bbc1a-e49b-4d77-a5ed-5a623d0f4a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f6:c1:ce:9c:3a:a0:2a:71:28:24:f8:24:33:
72:55:0e:3e:a4:5d:14:62:7e:0c:6f:d5:10:51:88:
a0:31:50:20:d3:cf:3d:98:04:22:a3:d2:3a:91:e0:
d8:0d:2e:fc:e8:f8:e2:b0:53:ec:a6:7d:0d:39:08:
93:fa:be:0b:82:e1:7c:7b:76:d8:ae:ab:62:32:56:
d7:5e:e4:cf:be:91:db:fd:98:e0:92:ed:ca:9b:cc:
8c:85:c9:33:eb:08:01:ed:84:12:a9:f2:60:eb:8d:
f7:f8:aa:4a:22:ce:88:5a:40:35:51:65:3a:3b:ed:
20:ec:40:f5:72:50:c0:fc:d6:44:e5:f2:17:8e:1b:
a6:3a:6c:d5:5a:27:7c:df:b1:c9:fe:45:ba:14:14:
be:f1:04:12:18:cf:43:85:48:3f:14:64:9d:2d:1f:
5d:a4:ab:26:bc:a5:1b:9d:00:20:9d:08:18:00:9d:
24:d1:8f:a2:7a:c1:8d:0d:dc:02:96:18:5f:7f:93:
54:77:cb:c8:87:b1:c1:8d:9f:76:59:61:66:cf:6e:
66:7b:47:10:41:15:85:b3:1a:1d:f0:c9:13:62:24:
b5:3e:bc:c5:dc:0f:84:9e:ac:52:72:62:4b:87:5f:
2d:e2:04:a2:d2:90:3c:cb:ba:5f:0d:f1:d0:b8:96:
c7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:37:3A:6B:2B:42:AF:8F:EB:49:D1:3E:0F:36:A0:D5:5C:09:6B:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2d603779-324d-302b-a85c-ab0dcf5f1692.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
173.197.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:c0:66:45:40:fe:c4:fc:5f:14:74:ce:1f:0e:8c:b4:69:3d:
18:e7:b4:04:0d:c0:c2:2a:dd:d0:16:4d:a5:fe:df:3d:49:ac:
2c:ea:4a:90:df:59:15:7d:3a:85:c2:f6:10:da:21:a1:75:ac:
38:61:9f:e2:32:10:69:90:e4:20:48:6a:24:f2:34:00:b0:d9:
0d:69:96:18:a7:89:0e:d5:8e:5b:fe:54:45:80:57:c1:d2:b3:
ce:40:45:fc:68:91:4e:f8:90:0d:79:1a:22:08:68:7b:34:eb:
af:49:c5:ce:7b:b5:29:57:42:49:f8:5f:8a:33:8d:c8:b5:79:
1d:1a:1d:23:10:d4:0f:ac:45:31:ab:c7:52:79:5f:47:c0:31:
29:d6:d2:98:c2:30:50:11:77:5b:08:3b:c7:95:52:ee:78:84:
42:29:40:c0:04:57:a3:43:c8:03:35:42:d9:0e:b5:c0:38:11:
b4:41:9f:f2:9b:69:46:f6:d2:6a:1e:2a:ed:63:2c:06:3f:3a:
58:35:ab:78:16:dd:e5:69:3f:d5:48:1d:b0:58:c5:ff:d2:0b:
85:4e:2a:a0:81:a2:6a:99:be:0f:c1:fc:7d:98:81:70:38:07:
4c:4e:0d:2b:db:4b:07:87:5c:3c:76:a0:f3:f4:3c:55:6f:64:
13:aa:13:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:01:15 2025 by rpki-client