Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/585d963c-fa5b-3c2a-a41d-67f3a1fac1e9.roa
File: 585d963c-fa5b-3c2a-a41d-67f3a1fac1e9.roa (raw, json)
Hash identifier: JDA/fKfs0Z3g+RSe1ULg5B9cih2Td85sV/1fKzr90fI=
Subject key identifier: 41:13:8F:55:43:17:77:B3:EF:EB:0D:11:A9:D9:FC:2B:1F:4B:E3:7A
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A8E401506E7F69A8385EC
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/585d963c-fa5b-3c2a-a41d-67f3a1fac1e9.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 33363
IP address blocks: 71.41.108.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:8e:40:15:06:e7:f6:9a:83:85:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=d9e56657-4c07-44cc-935f-a37245d533fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a1:37:0e:04:48:f5:33:52:53:08:19:a7:5f:
25:1a:63:10:17:91:fd:d9:7d:c0:e0:ad:6f:ae:37:
5a:64:c5:34:f0:26:c7:16:f0:e9:dc:42:93:b0:32:
51:2b:2b:01:5e:9e:43:e1:37:34:21:5e:e3:b0:71:
0c:e5:c8:5a:b8:a5:0d:4c:96:59:71:db:3f:1e:71:
e0:76:15:1e:d0:f8:f1:28:5d:7f:8f:b8:73:3a:df:
6e:4f:71:d1:99:c1:95:5f:80:f5:b0:f0:db:6e:85:
18:30:2d:cf:f7:48:e8:9c:d1:fe:52:71:35:d9:28:
5c:90:32:b0:bf:e3:6f:37:45:5b:05:68:c3:09:e0:
4b:f7:21:a9:20:d2:b2:99:8b:c8:7d:1c:97:0a:82:
24:d0:7c:2d:2f:6e:a8:b7:09:69:c3:c2:f1:60:e0:
fb:8c:77:1c:56:98:b1:6f:49:79:af:16:35:e5:08:
2a:d9:bd:73:37:ed:cf:ae:54:3d:49:7a:82:0c:a9:
af:c8:0e:04:ea:ea:c7:99:b7:c2:25:14:da:51:2b:
44:2d:1f:52:4c:f2:de:48:47:7e:dd:12:1e:91:49:
dd:65:1b:fa:aa:bd:b9:b5:33:3a:30:51:75:29:d9:
b9:ca:13:cf:fd:50:d0:ad:9f:29:a1:75:da:0f:b6:
82:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:13:8F:55:43:17:77:B3:EF:EB:0D:11:A9:D9:FC:2B:1F:4B:E3:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/585d963c-fa5b-3c2a-a41d-67f3a1fac1e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
71.41.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:c1:95:45:4b:e6:95:66:de:89:11:a7:5d:d2:fa:7d:b0:e7:
02:4b:49:6b:6f:75:e0:48:58:2e:f7:41:25:39:d0:5b:d5:c7:
92:ad:d7:d3:e4:4e:1d:f3:4b:9b:fe:c0:f1:7f:60:fe:fe:bd:
a7:0a:79:57:c4:e7:2c:e2:34:80:0b:71:b4:b4:99:5c:10:10:
ff:49:9c:8b:bd:32:75:fe:8e:fe:1f:84:1b:0c:0b:af:b6:b1:
28:16:72:86:e6:4e:7b:be:47:45:88:20:ce:34:40:de:b1:39:
be:68:d3:f5:70:73:b3:aa:d9:af:c4:18:7e:98:74:0f:cf:cb:
ee:db:94:64:9c:e1:50:95:b8:06:59:3e:9e:c1:1a:d4:14:90:
c8:f4:71:03:92:5a:4d:5e:e2:ba:f5:b4:36:a0:a9:c6:b1:df:
c9:34:1d:83:8c:49:ae:cf:3f:cf:3b:42:07:2d:87:56:66:3d:
ee:6d:7d:b5:28:27:40:30:42:f7:89:13:a2:cc:5e:33:7d:e9:
1b:e7:fc:55:75:af:5d:4c:2d:d2:3d:87:a2:de:f8:af:93:bf:
72:4f:91:be:83:5b:ad:80:72:2b:6c:d4:91:15:d4:71:86:18:
92:30:5a:e8:6d:c2:7a:8d:36:ed:60:58:a2:ef:4e:8f:0e:1f:
29:b4:e2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:58:07 2025 by rpki-client