Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/554d3506-3128-3e6f-9879-458782e58ddc.roa
File: 554d3506-3128-3e6f-9879-458782e58ddc.roa (raw, json)
Hash identifier: 0yIHB/zsI2B1xbI92ytofe1/p4tbKUTcxnFW5mj8w7U=
Subject key identifier: 27:3E:37:ED:49:56:9D:AC:0C:FF:C1:B3:F3:05:FC:FC:FF:C5:8C:67
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A8725E5E90220647F20C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/554d3506-3128-3e6f-9879-458782e58ddc.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20001
IP address blocks: 173.196.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:87:25:e5:e9:02:20:64:7f:20:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=a3afdeb8-5cb3-4746-af52-0f7df8eee3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:eb:0b:11:71:68:2b:0c:c2:f7:19:bb:fa:13:
bc:66:79:d3:78:42:98:39:d4:6b:38:b9:2e:a5:a7:
6f:d9:47:45:72:77:16:74:38:c6:41:98:cf:8c:e3:
d4:b0:72:6d:60:f7:b1:67:ef:07:51:90:f8:62:3f:
7a:e4:e9:01:c8:5f:32:f4:4c:d3:02:e7:23:8f:61:
81:92:26:b4:16:2e:f2:94:5f:65:15:8f:11:a9:16:
7c:00:ad:29:78:52:99:11:3e:f5:aa:9e:c1:95:96:
88:51:aa:12:2a:6f:0d:c5:ec:51:90:79:b0:1e:0e:
d6:84:12:5a:68:75:7e:ac:28:6e:c8:b1:92:7f:5f:
01:99:42:f9:56:99:e9:28:a2:0f:82:f9:a3:b4:ae:
4a:c1:33:cd:59:f0:72:85:bf:45:b8:4f:6e:a2:1e:
e4:ac:00:9c:91:74:ce:cd:46:f1:b5:5d:b9:c1:c0:
59:41:39:2a:90:af:b7:ea:81:f5:a6:e9:66:91:fe:
28:ab:c6:85:f1:ac:ca:fb:fc:a4:98:ce:4f:df:7e:
7f:74:84:26:a4:ec:c1:ba:f5:23:86:e7:bd:4b:d2:
16:37:fe:a0:73:1c:79:1b:ce:fd:91:b2:b5:c1:e1:
90:62:5f:65:c5:46:d9:d2:12:ac:a2:c8:f4:f1:ab:
2a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3E:37:ED:49:56:9D:AC:0C:FF:C1:B3:F3:05:FC:FC:FF:C5:8C:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/554d3506-3128-3e6f-9879-458782e58ddc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
173.196.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:c0:19:17:6f:b5:2e:c8:45:76:36:85:a1:a5:ff:b5:2e:29:
6a:44:fa:f9:2f:c0:cc:37:30:83:ba:39:c7:48:17:05:0b:e1:
ee:2a:59:b1:47:4c:67:99:69:dc:88:e1:ce:45:52:05:80:9f:
a5:6b:1c:4b:5d:f0:33:db:e1:28:2b:c4:17:59:12:26:6c:97:
d9:c5:14:d4:d9:ac:28:87:7e:87:37:f9:80:b1:a7:d1:78:ec:
50:31:70:fb:32:f4:d1:45:9c:eb:42:98:0c:17:47:cb:5b:fa:
5c:e8:99:f3:2b:91:02:7c:86:c4:f3:12:a5:12:0a:35:13:cd:
03:e0:1f:06:d8:11:76:16:27:db:27:30:f3:78:55:3a:a0:87:
e4:f9:d8:4d:95:28:6d:9f:7a:40:09:b6:a8:c4:cc:47:30:fb:
af:f7:3a:48:74:cd:7d:a4:dc:ae:42:49:1b:1d:8c:c2:3a:a6:
b2:32:18:3e:f3:e5:35:4d:29:aa:4a:92:61:d2:b8:b8:63:65:
b7:27:b0:1a:36:4c:59:46:ff:dd:6a:95:09:fa:a5:08:a3:3e:
5a:ac:af:10:78:5b:69:2d:b6:c5:a0:a6:42:06:ef:6b:a6:15:
b4:b7:a1:ac:fa:b7:c4:17:5d:b4:d6:45:c3:5e:c9:90:75:51:
6e:7e:e2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:31:52 2025 by rpki-client