Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3a09d4ee-01cb-3905-bdf7-bb034cbb9118.roa
File: 3a09d4ee-01cb-3905-bdf7-bb034cbb9118.roa (raw, json)
Hash identifier: MTtrGorfe9WYgGrcDxRRvNw6TkQ5xciQTUEFMPxE0Cg=
Subject key identifier: 88:75:BF:E6:91:89:F2:9E:20:17:94:F8:61:F6:47:5A:28:3D:58:86
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037B13C53A61DD39654B1580
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3a09d4ee-01cb-3905-bdf7-bb034cbb9118.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 40354
IP address blocks: 173.198.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:13:c5:3a:61:dd:39:65:4b:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=88425448-1065-4090-9137-9dc744a68743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cd:e2:1b:24:12:23:af:0c:26:0a:33:7f:ad:
7c:d9:17:9d:3a:24:cb:d1:6a:5c:53:29:0d:2e:c4:
c6:0d:16:a0:91:ad:12:a7:20:ab:89:02:c6:58:38:
ab:a9:b7:7c:b2:be:48:13:4f:d2:d9:0f:2a:16:4c:
51:ff:12:fc:ba:60:ae:c9:ed:65:f3:62:2f:3c:e9:
9d:eb:25:27:86:c4:b9:cd:54:96:b7:94:16:d7:33:
d4:63:4e:75:2d:22:f1:45:2b:bf:78:e7:fd:3b:d6:
86:3a:0c:98:ed:ac:ea:15:17:c3:84:4d:42:19:c9:
f7:fa:ce:1a:aa:9f:89:7f:4f:d8:94:1f:72:20:61:
36:dd:d4:cc:2d:f8:84:8d:a9:d2:26:ed:a3:ba:cf:
1e:cc:d8:6f:ac:5d:a5:56:fa:30:51:76:98:d3:e2:
74:9b:c2:90:4c:17:2d:cf:6a:ce:31:20:04:c6:1e:
d0:b6:d2:2c:77:64:eb:af:60:3e:e6:32:f1:e5:1b:
c0:00:99:cf:fa:82:49:d7:85:a6:df:87:de:f8:1a:
46:8f:63:bb:90:1c:22:c5:1e:f7:06:ba:07:29:61:
5f:b8:06:10:d9:b2:14:68:df:03:dc:6c:ce:93:86:
6f:9c:13:36:b3:37:c7:1c:0a:0f:21:77:30:bf:44:
7c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:75:BF:E6:91:89:F2:9E:20:17:94:F8:61:F6:47:5A:28:3D:58:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3a09d4ee-01cb-3905-bdf7-bb034cbb9118.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
173.198.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:51:21:a8:c4:43:d1:72:02:a5:3b:4c:1f:b0:8b:22:99:88:
30:98:6c:e3:0a:14:ff:38:95:26:9d:f6:86:7b:f6:03:ce:1c:
d2:31:23:49:d7:ee:5d:a6:8e:a4:34:9f:23:c9:83:66:ad:7d:
6f:23:8a:ca:10:2a:eb:26:5f:ca:e7:08:65:59:5a:2e:3d:10:
3a:5c:0c:31:17:fe:fb:ac:6d:9b:6a:61:d2:71:7f:35:24:95:
1d:fd:b3:2f:8a:c1:92:e6:d8:14:b4:13:e9:04:a1:b8:d9:a0:
67:90:e4:95:c9:c6:ee:b5:64:31:f8:bc:ab:7b:b2:75:38:95:
eb:db:ec:26:7f:18:67:bf:ea:69:6a:93:9b:f6:ae:d6:15:3b:
4c:c9:6e:20:cd:41:27:96:77:7f:2e:c8:42:79:da:38:f0:b2:
66:b3:88:67:ca:2d:f3:d1:79:52:7b:3b:2b:a2:cf:d6:fa:94:
ea:59:f9:4c:1b:6b:55:05:d0:30:5d:d5:0f:f7:75:98:0e:5d:
f2:80:63:d6:c3:1d:59:94:c1:69:db:e1:d3:be:ba:62:bb:bc:
17:79:44:4f:e7:ae:12:b6:45:7f:4f:37:b1:fc:82:bf:f3:51:
3e:0e:f5:00:1c:88:c6:06:35:f5:25:eb:88:f3:c3:93:a5:64:
90:a8:d0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:08:41 2025 by rpki-client