Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3897bbf7-b3d2-3cf2-8e7d-811e20bc7fc5.roa
File: 3897bbf7-b3d2-3cf2-8e7d-811e20bc7fc5.roa (raw, json)
Hash identifier: 4xRNflj4y8oX32ebpnE4kzFcLmD3kbF2DYHCE15s3Do=
Subject key identifier: 48:58:C9:E9:F8:61:7B:83:3E:3D:6F:18:9D:4D:0F:D3:57:B5:82:DE
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848573AD9C1A8701392EBA1BD00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3897bbf7-b3d2-3cf2-8e7d-811e20bc7fc5.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 11351
IP address blocks: 71.65.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:d9:c1:a8:70:13:92:eb:a1:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=6567ab56-43b8-4e17-9ae6-f5f04ca533f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b7:3d:76:80:88:dd:c3:ff:dc:1d:60:c5:24:
5c:80:07:cf:3b:9b:c6:d9:ee:87:69:30:06:d8:91:
02:24:e5:cc:0a:fc:84:4f:ef:47:e0:c8:48:5c:21:
a6:ee:16:83:50:51:71:c7:20:7a:40:88:8e:15:d1:
99:e1:99:d4:a1:e3:6f:f1:68:16:2e:c8:3a:c3:1f:
d6:f7:c2:b5:99:d3:e5:40:67:a4:76:db:6d:a6:44:
d0:2a:22:18:df:55:52:80:fa:83:b0:bd:ea:17:0a:
5a:e4:5e:43:a2:de:5c:7a:33:30:08:56:28:b2:16:
32:d2:2b:aa:72:0c:30:28:e7:71:b1:a1:04:e1:1f:
88:e3:64:20:f3:18:3c:b9:48:71:6f:77:4c:15:9d:
dc:39:b2:e3:d8:b5:9f:e9:29:3b:61:37:20:63:72:
36:14:8c:fa:5d:1a:7e:b6:9f:64:1c:8e:e3:f5:ce:
1b:4f:f6:0d:83:75:2a:91:34:e3:16:4d:79:0c:ad:
03:94:9e:7c:a3:23:6a:87:ed:35:66:3a:87:7f:2a:
2a:ac:50:bd:32:75:8b:0c:ba:a3:1f:bf:b1:f7:50:
33:56:a2:8e:90:57:14:72:da:e4:7d:15:85:b9:5d:
ac:e9:4e:11:c8:63:0b:e6:a4:0a:57:b0:e8:13:8c:
9d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:58:C9:E9:F8:61:7B:83:3E:3D:6F:18:9D:4D:0F:D3:57:B5:82:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3897bbf7-b3d2-3cf2-8e7d-811e20bc7fc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
71.65.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:27:70:31:7c:57:77:0b:e2:0e:de:b6:00:b7:75:ba:fd:67:
8a:0c:08:f0:3e:57:44:b9:f2:82:14:72:17:d4:3a:bb:fe:3b:
50:51:cd:59:f3:c9:41:d1:0a:77:ba:dd:0a:5b:e4:af:ea:9f:
52:52:fa:01:cc:aa:27:c1:5d:ca:5f:89:b3:2f:d3:cd:07:9e:
a7:ac:3f:c3:c4:1b:1e:08:31:29:01:60:3a:6f:42:09:9a:a8:
6a:65:9b:50:51:74:ea:fc:6d:b1:b3:4f:54:99:0f:16:f9:c6:
20:61:3a:7c:54:51:a1:89:b7:fb:31:c1:d9:fd:68:ff:b1:55:
4d:ae:14:06:55:ac:7d:4e:2e:bf:2d:9b:60:40:02:1e:1f:6d:
b2:38:43:f8:4e:94:39:79:f5:b3:03:88:79:a6:77:b5:2b:88:
85:a7:ec:43:9c:44:9c:b8:b3:58:60:49:24:90:5c:01:73:e0:
e3:08:b8:b2:f8:e8:26:36:85:45:f1:10:9f:2d:f7:10:ed:46:
96:00:77:14:ff:7e:7a:78:ad:be:1b:32:7e:32:e8:05:d2:60:
19:12:5b:f9:06:ef:e4:df:69:a0:ef:7b:58:83:6a:29:64:91:
ef:77:18:3b:02:8c:c9:96:f8:ac:50:ab:ba:e9:28:cb:3f:23:
ed:5d:2b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:03:03 2025 by rpki-client