Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3ecfe410-a22d-3db2-82eb-a258ea860b3a.roa
File: 3ecfe410-a22d-3db2-82eb-a258ea860b3a.roa (raw, json)
Hash identifier: dMdhbPRfSp3koxchkteXQ6VR6gV4wNb2cX4sb5bFf0w=
Subject key identifier: 8F:F7:8B:55:65:43:10:A2:76:E1:1E:A6:F5:42:E1:20:FF:D7:C5:82
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A6BA0BC6A6C57D2CDF200
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3ecfe410-a22d-3db2-82eb-a258ea860b3a.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 11351
IP address blocks: 24.29.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:6b:a0:bc:6a:6c:57:d2:cd:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=9b67822c-986a-4c3d-95e0-61e525071aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b5:1d:4e:dc:fa:7a:00:f3:0a:ec:af:6c:a9:
b7:e6:ae:29:3b:f4:d6:3d:a1:23:c7:4b:41:85:7b:
7a:ba:6c:1e:ea:f0:56:f0:3b:c2:86:d1:ad:83:4a:
1d:87:a0:67:49:60:87:f8:a1:ab:cd:e6:0a:6b:bf:
59:33:85:11:70:1c:6b:89:11:cb:d6:0a:7c:54:46:
69:c8:ed:62:75:73:c7:06:b3:52:68:b0:6a:86:d3:
1c:79:38:77:d7:2b:25:b8:a5:05:a3:07:8e:86:c8:
a2:5b:e9:03:07:d8:fa:a9:95:89:ed:d0:32:78:cb:
3f:b5:22:c9:f6:e5:17:4e:66:28:01:c6:96:a6:7d:
5c:76:3d:72:ff:f8:83:24:ff:1c:fb:8c:ca:63:7c:
39:f1:6e:84:cd:23:bb:2b:7e:41:b1:c1:cf:54:b5:
b7:b4:3d:ed:ec:a4:2f:c7:07:94:e6:09:ab:8d:e5:
62:9d:b7:f7:6c:8b:6c:64:86:51:16:ed:9d:af:3f:
be:5c:14:21:da:97:32:0b:10:e0:47:7b:4f:fd:fb:
9e:97:ba:68:72:f3:84:e9:d6:72:a3:41:54:81:b2:
e4:81:20:2e:54:d5:13:08:08:77:62:7f:cf:6b:97:
fa:09:a4:7a:15:8e:3f:13:ff:f9:d9:b5:97:cf:05:
9e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F7:8B:55:65:43:10:A2:76:E1:1E:A6:F5:42:E1:20:FF:D7:C5:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3ecfe410-a22d-3db2-82eb-a258ea860b3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.29.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:a1:e2:da:ea:43:f9:aa:d1:b8:b4:02:68:e3:bd:8a:59:1c:
03:7c:69:28:ed:d8:02:b2:d9:5e:be:49:dc:6d:99:70:9d:85:
37:b5:cb:44:10:af:bd:e6:30:76:78:74:f0:90:5f:25:cb:4b:
fa:de:4b:09:fc:2a:4f:31:fd:d4:21:1a:d2:6f:b5:17:84:e0:
ae:ac:6b:85:9e:05:f9:cd:a6:7a:c7:f2:cd:69:d1:d8:f7:a6:
90:a2:b1:33:f1:12:e9:15:58:92:9b:3c:38:1c:fb:7e:3d:63:
d8:3d:8e:3f:68:e4:bd:71:a3:e9:3c:15:84:86:51:59:52:5a:
50:89:2b:a8:c9:b1:5d:51:b2:04:d0:21:df:ad:10:07:fd:3c:
97:95:95:aa:8b:62:dc:59:07:93:e6:d2:5f:50:04:2e:2c:f9:
73:e8:e8:39:44:95:30:47:e7:8d:43:06:5f:91:4e:91:97:50:
44:80:e7:7c:a8:1e:39:63:2a:82:99:0c:55:38:22:41:20:b2:
36:bb:d0:ee:00:79:15:89:82:9f:82:57:91:d7:64:a5:d7:09:
f4:bf:7c:fc:27:ac:f7:6c:08:c5:d7:f9:81:5e:24:e6:83:8d:
ed:32:a8:d7:03:eb:a7:5a:81:a5:fd:be:26:06:d2:2b:33:30:
93:be:a5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:40:47 2025 by rpki-client