Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/33276c0c-7571-370e-afb2-d7da1bbf280a.roa
File: 33276c0c-7571-370e-afb2-d7da1bbf280a.roa (raw, json)
Hash identifier: qL57kHWw8itLxYtdOgrxWrhA+jrbhHc0p4oGtiBJ8Ww=
Subject key identifier: 63:D7:CB:01:67:E3:4A:E7:A5:58:7D:E8:F2:EB:43:AB:00:5D:30:CA
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A5D7C0CB8B63372BC98C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/33276c0c-7571-370e-afb2-d7da1bbf280a.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 10796
IP address blocks: 24.106.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:5d:7c:0c:b8:b6:33:72:bc:98:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=ea175002-537f-4251-9b85-24c17913aedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:65:50:a9:ae:2d:91:7b:4f:8d:88:25:f4:de:
6e:e5:85:f8:67:70:da:17:7d:a2:5e:51:49:33:e1:
c5:98:f5:89:11:58:ed:11:92:9b:20:36:5d:64:ee:
62:cb:da:0c:e7:6f:d6:26:78:df:93:0f:e6:6d:85:
3a:6b:ef:92:61:5e:eb:14:e4:88:85:49:6b:b9:03:
75:a8:8f:fa:33:e9:cf:45:a0:11:85:80:8d:66:0b:
04:f2:01:ba:c4:a8:f5:a3:43:0e:3b:b0:76:50:41:
90:6c:f6:72:d6:17:4e:bf:91:48:a1:44:d8:c6:b6:
f3:78:fe:8e:0f:9d:d8:09:9a:a8:10:b7:fb:b1:19:
58:8a:a0:c3:02:d2:a0:2d:7d:aa:f4:dd:4c:f1:8d:
18:46:0d:1a:55:ce:32:b9:e7:a5:8b:13:e3:da:a8:
77:a9:62:65:6c:53:bd:ec:14:17:df:66:44:9e:8c:
20:bf:95:b3:35:d0:9e:ec:cb:0c:e9:9f:33:e8:ba:
44:ee:d0:07:b3:87:c8:57:88:31:85:11:e6:36:f5:
75:33:77:cc:12:61:42:22:1c:65:87:23:50:a1:7b:
c5:64:15:98:67:b2:39:29:d8:af:03:87:7b:45:f4:
44:5f:ee:ac:e2:65:22:08:fc:6c:a0:6d:db:96:f2:
b0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D7:CB:01:67:E3:4A:E7:A5:58:7D:E8:F2:EB:43:AB:00:5D:30:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/33276c0c-7571-370e-afb2-d7da1bbf280a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.106.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:34:33:44:25:6d:7f:e5:4c:69:c2:bc:16:c4:46:5a:dc:b1:
7e:f3:35:c3:e7:b3:2d:c4:c4:fb:dd:2f:c2:e5:62:62:e6:32:
b1:d3:0c:bf:28:ec:e3:0a:6b:77:c7:4d:0f:a4:58:c5:19:fc:
8c:b3:27:41:c8:53:5b:2b:63:f4:77:a5:e2:89:c6:70:dc:47:
a0:9c:32:2c:40:20:42:75:7a:b5:05:c4:6c:f7:c4:08:71:08:
57:8a:0e:fb:c1:01:0b:c6:a1:96:86:80:a1:c8:46:8e:72:49:
d4:db:72:77:d1:a5:0b:84:a6:e4:d9:6a:0b:07:3d:f7:e2:87:
3c:1b:c4:23:2c:0a:ca:76:76:d8:6b:0f:dd:48:04:48:93:20:
b4:a4:7e:12:ac:da:23:5e:6c:c6:01:96:0a:d8:f6:d3:33:b8:
73:cc:76:8c:dd:36:90:4c:8f:aa:20:fa:d3:52:cf:b1:9f:f7:
9b:d8:36:53:bb:e1:48:d9:0e:42:0d:71:ef:92:9e:69:3c:9b:
c6:ce:b6:71:6c:da:72:6e:da:b6:a1:97:bb:6f:aa:af:23:18:
b5:45:75:1c:11:fc:a3:66:e6:40:3c:d4:2d:21:5f:54:b3:75:
d9:e2:e6:92:54:cc:8a:60:31:3d:52:41:21:e7:71:e9:00:93:
90:59:a1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:08:28 2025 by rpki-client