Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3cd8fa33-8932-3f53-9ee3-75362d322650.roa
File: 3cd8fa33-8932-3f53-9ee3-75362d322650.roa (raw, json)
Hash identifier: 6914EgSlP8NC91+mudLkmA/HwmsmKl8i54IOIYk1mnk=
Subject key identifier: A7:FC:35:77:07:C6:09:80:9D:E4:5A:DB:44:5A:34:C5:F0:17:E2:5E
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A8E4D1DC9D23A7A2457C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3cd8fa33-8932-3f53-9ee3-75362d322650.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 33363
IP address blocks: 71.42.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:8e:4d:1d:c9:d2:3a:7a:24:57:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=7a65d0aa-a0df-4997-8c7e-1d74c2c1262e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a3:51:2d:a3:23:bc:b1:f8:c2:16:51:fe:05:
6f:04:fc:98:9c:8b:e4:f0:02:f8:2c:b7:ab:a3:96:
44:75:20:5a:8e:2c:4b:e0:11:97:27:14:cc:34:c1:
76:d6:4c:89:ba:75:ba:3a:aa:b7:08:52:8a:21:41:
d0:ca:84:39:ec:6f:2b:1f:a3:18:08:43:45:4e:2a:
20:ad:b6:32:ad:0e:b1:22:03:2b:6b:af:ae:a0:ec:
63:e5:6a:d7:66:41:58:3c:a6:66:d2:47:fa:69:b7:
14:71:12:20:78:08:30:d0:aa:23:38:07:f3:9a:ec:
83:6c:04:18:1e:cc:46:74:4b:fd:b6:7f:81:21:13:
72:ea:d3:19:94:0b:4e:42:d0:77:d2:08:96:ed:54:
55:04:b5:e8:06:92:f0:a4:b0:12:fa:5f:ec:72:d1:
ce:c6:32:28:5c:05:97:c1:58:3c:b6:a9:53:15:ba:
e1:de:73:e1:64:63:46:03:1c:a8:99:09:f7:ad:26:
55:09:78:d6:42:30:30:2a:33:98:0a:ec:0b:f7:92:
ff:ff:7d:50:7e:b7:3a:c8:7f:64:a9:e7:3d:c6:f0:
5a:2f:09:12:1c:60:99:08:27:2e:1e:be:9f:ab:76:
6d:35:96:11:1b:7b:70:a1:be:ab:6d:11:ab:1a:4f:
b4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FC:35:77:07:C6:09:80:9D:E4:5A:DB:44:5A:34:C5:F0:17:E2:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3cd8fa33-8932-3f53-9ee3-75362d322650.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
71.42.164.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:59:f2:36:b5:8f:89:0d:7c:ea:c4:84:13:30:1c:73:68:52:
9e:5f:33:93:37:fd:81:0b:50:7d:8a:21:31:eb:18:01:30:74:
fb:48:71:2f:c0:d9:1e:c8:b4:36:c1:4f:45:42:50:36:08:cf:
03:f1:9a:11:63:4a:42:18:2a:c9:ff:e8:35:a3:f1:89:45:97:
6c:70:ba:b5:85:dc:9e:32:4d:8f:f2:8c:5a:26:2e:d7:67:24:
ed:bf:b6:d8:aa:20:fc:21:50:41:b1:da:9c:2c:e1:4a:53:20:
7f:a6:97:a5:4e:34:3b:d2:84:d1:44:3a:bd:f0:47:03:a7:da:
6b:1f:b3:c5:99:84:bb:64:fb:c6:f2:bf:a5:74:4b:c9:af:85:
35:db:d3:c4:ce:f1:4c:ae:f4:72:32:9f:53:e0:05:cd:7d:40:
72:64:ee:4c:f4:8e:7f:66:24:08:52:08:83:4a:20:dc:f0:e3:
01:d2:b5:04:5d:42:a3:40:e9:0d:31:65:58:bb:a5:6a:50:ea:
74:58:c7:04:05:2c:d7:c4:19:87:5e:a5:49:3a:48:40:7e:d7:
2f:15:68:13:a9:4e:70:f2:0c:f8:23:ce:19:8a:1d:52:25:34:
69:56:b3:20:72:88:07:13:37:f1:95:bb:20:37:d2:bc:4d:06:
9f:5e:f4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:35:01 2025 by rpki-client