Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3a33e9dc-7053-3c2b-9ba1-3516416f97df.roa
File: 3a33e9dc-7053-3c2b-9ba1-3516416f97df.roa (raw, json)
Hash identifier: kFX+3TF+y/29E8TAWBYz+brvv+kbwxBOFIZJ6w3WSK0=
Subject key identifier: 68:FD:B5:BD:FC:BA:E9:C3:61:3D:EC:A3:9F:3D:EA:FD:C0:55:59:C8
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A863D5C3FE40FD3DCA080
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3a33e9dc-7053-3c2b-9ba1-3516416f97df.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20001
IP address blocks: 24.123.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:86:3d:5c:3f:e4:0f:d3:dc:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=ff1753ef-f9b7-4feb-9ac5-f3ca15972afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3d:fd:d9:6c:05:30:89:69:62:bd:61:73:ba:
3b:e8:6e:eb:c3:d2:9f:76:f0:5c:06:94:9c:dc:69:
f8:0e:35:1c:c3:1c:8a:4a:ac:f0:5d:a3:c5:64:28:
8d:41:e0:ec:1b:9b:d7:31:b6:8a:37:9d:a1:be:ca:
56:df:dd:49:b0:a9:0f:d5:39:9f:5d:91:cf:41:9f:
cc:d7:d9:1f:41:df:e8:78:82:cd:6f:05:8d:1c:55:
de:ac:7d:f2:e4:0a:f7:d3:2e:e3:e9:bd:24:80:75:
ce:f2:f8:06:f5:b1:16:c3:95:7e:4c:e4:b9:a4:fa:
51:65:1c:c1:91:94:b3:69:99:63:70:fc:e5:2d:4c:
6b:e8:ed:d4:f6:13:8b:66:05:e2:b9:0f:89:c3:c0:
67:db:18:b4:b4:ec:55:c9:f8:d7:a7:ba:0e:87:0e:
d2:91:bf:3f:63:73:4a:00:9b:6f:d5:43:44:bd:5d:
b2:5e:f8:e4:64:5d:18:16:64:01:40:b6:1e:86:ba:
83:38:fc:c6:41:a0:3c:b1:06:35:57:01:36:75:2c:
93:22:84:44:6a:31:a9:f2:0b:62:e5:ac:a8:ff:2d:
3d:10:fb:df:a8:f8:c2:a2:f2:06:90:cc:a3:c4:24:
dd:32:48:6d:a0:16:6f:e9:a4:fe:37:04:69:05:47:
fc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FD:B5:BD:FC:BA:E9:C3:61:3D:EC:A3:9F:3D:EA:FD:C0:55:59:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3a33e9dc-7053-3c2b-9ba1-3516416f97df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.123.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:2d:a9:c3:1f:9e:6c:d0:3f:f1:2a:ff:53:72:4c:49:95:99:
ea:2e:45:a5:f0:cf:4b:e3:47:d2:b5:d2:98:7c:17:61:0d:f2:
c8:03:5a:86:fd:aa:c6:85:d0:00:11:0c:12:ae:63:03:ea:bf:
e6:0c:f2:39:50:f1:17:04:5c:fd:ec:d3:55:3e:46:3e:ee:18:
22:b3:59:04:33:b0:f9:c9:32:32:98:b8:e7:bb:a1:9d:75:4e:
6c:4b:27:37:85:1c:91:d1:71:05:8e:6c:48:e4:85:56:55:f7:
f7:12:21:a1:df:3d:50:c5:0e:5b:06:e7:a8:b9:0a:7f:ed:e4:
fa:6a:9c:d3:6f:06:f8:58:94:d4:31:60:95:d7:89:42:43:c5:
44:fd:66:34:be:44:82:71:26:00:82:02:7b:f3:67:ec:8b:d6:
d4:a2:b5:b8:cd:a2:40:0d:dc:99:b8:0f:f8:43:4d:67:96:6b:
9e:cc:6a:a9:3c:6d:c4:25:aa:a6:c9:04:b9:0a:e9:cc:4a:cd:
3a:31:2f:65:fc:4f:54:46:82:9e:ee:98:63:9b:f6:18:5b:93:
2f:80:86:d0:d3:ac:fd:ee:b4:3d:4c:0d:08:58:60:12:9c:1c:
54:47:bf:a2:a0:d2:09:b7:f3:74:98:71:30:19:46:86:bf:62:
be:6d:98:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:22:27 2025 by rpki-client