Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3ac73ed4-7836-3d00-82f3-32ad7794c661.roa
File: 3ac73ed4-7836-3d00-82f3-32ad7794c661.roa (raw, json)
Hash identifier: zsfcVJ6iOPDP2tqgV3l6LteIeAmcQzY0s4Cvy+Ljq2Y=
Subject key identifier: 7D:32:19:50:7F:45:BA:DB:02:B3:DC:59:61:D0:21:22:78:3D:C3:26
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037B142A96B092D974D1DA00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3ac73ed4-7836-3d00-82f3-32ad7794c661.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 53502
IP address blocks: 108.178.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:14:2a:96:b0:92:d9:74:d1:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=75d03406-3ecf-4dd5-b0b7-74b7c5696cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:58:5a:fe:e8:d9:ed:32:39:e6:94:02:9b:6f:
88:cd:a8:b6:33:86:5f:9b:88:27:58:27:92:03:fb:
87:8a:37:4d:57:c9:fb:4b:fc:d2:36:f9:f1:96:2b:
ea:40:94:bf:12:c7:c3:06:4f:09:6f:e0:6f:49:e7:
31:d5:ed:e0:ae:0b:c2:fb:56:03:65:bf:61:d2:30:
ea:4e:e0:48:20:24:f4:3d:7b:1d:32:c7:6d:f5:81:
39:cd:58:5a:25:e5:9c:64:87:5e:34:89:53:4f:98:
53:fa:15:a7:11:ed:d1:a4:29:c7:0a:59:f3:79:74:
cc:d4:de:cf:b6:c1:96:83:f5:2b:eb:42:37:6b:47:
ae:b1:c3:5d:6c:64:d3:50:93:d8:87:3c:96:fc:db:
5e:3c:17:ac:56:c8:df:3d:db:1e:87:ad:b6:e8:ea:
4c:2f:e2:8f:34:ad:73:21:bd:09:de:fc:3e:dd:ea:
10:b1:e1:61:90:5f:76:a8:dc:2b:c0:34:1f:ec:ad:
0a:1c:a2:33:6a:7c:68:1c:d7:9b:89:0d:68:20:80:
f9:1b:d6:a5:48:6c:37:b6:0a:2f:57:23:0a:57:07:
a9:4f:ae:03:94:07:35:56:dc:c9:96:a4:68:6e:a4:
97:80:3f:99:72:d6:31:d2:a3:bb:c4:91:ca:5b:91:
a1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:32:19:50:7F:45:BA:DB:02:B3:DC:59:61:D0:21:22:78:3D:C3:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3ac73ed4-7836-3d00-82f3-32ad7794c661.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
108.178.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:15:16:d9:b4:82:c0:56:7d:68:be:5a:f4:2a:e3:85:40:8f:
f0:cf:7d:e3:41:d5:11:ba:66:16:f2:32:06:f0:f2:f2:b0:90:
92:a1:fc:7e:ae:da:7b:23:e5:63:05:17:62:e1:b1:cd:86:9c:
db:ac:bf:bc:71:61:4f:73:95:7b:ae:7c:eb:a0:48:ba:91:57:
98:66:c1:2c:f1:bb:53:f4:8c:60:92:02:e3:bc:19:3d:e1:b1:
0e:e6:7f:d2:a0:af:3d:1e:a7:f2:80:7a:76:6b:67:2c:ae:f7:
3d:64:50:45:cf:84:a3:d5:01:69:f3:30:c2:bc:42:04:5b:81:
70:cc:31:f5:87:c6:ef:06:50:33:53:51:b0:b4:02:ff:18:17:
e0:f7:2d:e7:e5:13:a0:43:0f:1b:f5:0e:d6:5f:d3:16:de:1f:
69:c5:21:bf:d3:fa:c5:7c:3a:a0:d4:e5:08:af:e4:02:11:ae:
86:ca:16:2e:13:2f:e8:c6:3a:bc:4c:11:78:d3:52:81:04:4e:
2c:75:dc:7b:01:09:2c:9f:d0:f0:f0:da:12:10:87:f1:46:b1:
a8:75:27:e9:41:89:9a:f5:ed:ac:ad:69:7f:fa:d9:c5:24:81:
91:64:e5:ca:9e:d3:18:1f:3e:dc:fc:7d:8f:e9:f8:9b:0a:00:
fb:65:1e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:11:00 2025 by rpki-client