Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/472b645c-c2c7-306d-b4db-920eb40b4615.roa
File: 472b645c-c2c7-306d-b4db-920eb40b4615.roa (raw, json)
Hash identifier: OthYOoEamksZZdtoYVqXXFNdhhCpvLXHBtEbA4m9OY4=
Subject key identifier: 1B:71:6C:A8:7B:B3:4E:EC:E7:7C:10:1C:F9:E3:D5:55:57:66:7C:CD
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037B0BDADA74FB389D771200
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/472b645c-c2c7-306d-b4db-920eb40b4615.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20001
IP address blocks: 173.197.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:0b:da:da:74:fb:38:9d:77:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=854bf8a5-2918-4a32-9b27-affeff669120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:67:6d:94:db:e5:29:f6:ba:f4:4e:42:94:0b:
ff:ab:8b:46:f4:27:b1:3a:ef:f7:03:0b:f1:ad:a2:
66:e8:dd:a1:e2:2b:5e:01:01:fb:20:2e:76:79:fd:
72:cd:4e:7a:a3:13:cc:e8:6a:38:7c:8c:22:db:2d:
e2:6f:9b:f3:68:b8:56:fd:c7:64:26:d9:35:7d:fa:
26:3f:b9:e6:3b:e0:6c:c0:37:1b:e4:af:be:cc:6c:
07:dd:53:3b:7d:8e:8f:9a:23:57:06:5d:72:c7:c1:
58:20:b8:23:53:2a:4d:3d:6c:52:b9:95:8a:7c:55:
28:7a:3e:2d:9f:fc:0f:5d:70:25:55:f5:65:45:3e:
3f:81:49:3d:f1:9d:0a:af:a9:17:16:9a:d6:e0:0b:
8f:4f:08:aa:ad:4a:de:78:ce:e2:e9:f0:d6:6f:6a:
49:8f:d1:a2:52:81:06:22:97:4b:37:8c:8e:98:4f:
79:5c:98:4a:b1:83:d3:04:bf:20:8e:19:38:75:d9:
41:bc:12:36:c3:bd:36:e6:85:24:7f:a1:3b:31:5a:
b0:a1:c0:5f:11:d2:b2:1e:20:5d:c7:53:7b:c9:88:
8c:3a:74:15:78:3d:3d:4f:f0:5d:ca:59:85:38:87:
a8:4a:f4:b9:30:66:cc:ef:ba:a4:6d:c6:48:32:7b:
76:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:71:6C:A8:7B:B3:4E:EC:E7:7C:10:1C:F9:E3:D5:55:57:66:7C:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/472b645c-c2c7-306d-b4db-920eb40b4615.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
173.197.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:7e:36:08:37:8d:c3:36:45:60:78:c9:cb:05:42:87:9e:4a:
a8:91:ba:fc:dc:5d:cf:ce:f7:1c:7c:86:a9:7b:be:41:2a:05:
d1:7b:07:c9:f5:ef:11:38:31:12:e5:a3:68:b0:b5:7d:84:79:
9e:dd:0b:43:7b:05:16:65:b1:2f:f8:57:96:af:fc:18:3f:6c:
a6:1e:c7:c8:4c:a9:6f:af:31:55:be:d5:36:8a:a9:8a:43:0b:
4f:06:b0:98:68:47:68:11:e0:f0:f4:eb:53:7d:be:01:ef:b0:
b9:49:a3:35:5e:9c:3c:54:ec:7c:ab:3b:3b:66:b8:ca:d6:f5:
fb:aa:40:2e:6e:9b:8a:6b:0c:f0:e6:76:40:f5:a2:2b:84:a4:
33:ed:81:00:b3:20:30:9c:f6:5b:cb:e8:62:09:b2:8f:70:3e:
06:7d:77:11:3a:9c:a1:11:5a:9b:31:6f:06:02:05:5f:eb:f3:
f0:c0:24:3f:60:a2:66:28:e2:5f:0f:ee:59:e8:eb:14:aa:63:
d2:2b:c6:2c:ec:fa:a5:32:d7:8c:43:1f:90:09:85:d8:fa:a1:
a2:80:5e:20:49:b6:ee:96:92:e7:d9:62:8c:cf:4e:1c:c8:6d:
d7:0b:2b:43:a8:91:e4:ae:c5:9d:bc:0e:2e:3e:ea:5a:78:50:
6a:7d:c8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 12:26:17 2025 by rpki-client