Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5955d366-6b28-3275-bd88-28b0af8fbd81.roa
File: 5955d366-6b28-3275-bd88-28b0af8fbd81.roa (raw, json)
Hash identifier: 6oVajvvtWloC3cUQ/YBNCHVRyLpZ8TXdivAq6crHgqQ=
Subject key identifier: 1C:C5:34:D3:A1:11:01:CE:8A:09:43:FA:2F:EF:E8:03:B0:5A:F6:6A
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037B09E92BEA0155A12DE3A0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5955d366-6b28-3275-bd88-28b0af8fbd81.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20001
IP address blocks: 172.248.0.0/14 maxlen: 14
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:09:e9:2b:ea:01:55:a1:2d:e3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=9a59ce56-8bfc-4a62-91d5-cf19624f1f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ce:cb:9f:b9:d9:af:49:4f:b2:04:bb:53:9b:
b9:52:77:de:41:d9:b9:b3:97:6b:1a:fb:0d:99:24:
dd:91:fa:a4:0d:5f:66:3e:11:77:98:88:bb:46:0f:
0e:d5:bf:9e:7e:39:02:b6:80:1b:b5:c5:37:8c:36:
48:95:5f:0e:3b:2b:ec:56:a7:cc:ff:34:bf:b4:9b:
98:ba:7f:a4:e7:ea:a9:8e:af:50:e2:af:f1:31:84:
ad:c8:a0:87:32:37:f1:ce:5f:34:4d:83:63:2f:10:
02:b0:bc:6c:10:9f:bc:75:da:ac:6a:9e:de:4e:f0:
35:37:0a:20:12:26:75:07:e8:26:52:bb:b8:31:f4:
11:7e:27:74:02:56:08:63:fc:97:60:03:d5:01:11:
20:2d:e3:75:e4:d2:32:88:65:30:0d:db:31:61:ff:
b3:7a:b1:82:f0:f1:7f:ee:86:6b:e4:54:77:bb:06:
16:26:32:c4:01:99:7c:65:f4:0f:75:ee:29:6b:18:
c9:63:91:95:6e:b1:ac:9f:06:2c:df:86:be:7f:03:
0f:c1:fc:86:1a:be:3a:f5:9b:26:4e:1e:77:b1:5f:
ec:1b:b5:72:d8:f6:98:b4:1c:b5:e6:dd:f3:60:e0:
76:4f:6e:ab:2f:f7:ac:5f:9f:8f:0a:0c:f4:9e:bb:
dd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C5:34:D3:A1:11:01:CE:8A:09:43:FA:2F:EF:E8:03:B0:5A:F6:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5955d366-6b28-3275-bd88-28b0af8fbd81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
172.248.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:ed:3c:38:53:ff:b3:6d:a6:69:7c:a5:0f:db:27:22:77:ab:
91:6f:21:5b:77:fe:7a:dc:dd:2b:9f:b7:58:d9:87:b1:00:d2:
e8:65:1b:25:aa:a0:33:af:61:c5:9e:16:9d:2f:e1:08:3f:6d:
7c:51:3b:7c:60:b2:3b:36:9a:c9:46:70:d5:c3:2f:b4:8f:cd:
bc:85:51:c5:ae:44:d2:0f:2b:1a:77:2f:65:92:40:7e:fc:48:
f1:92:94:59:a9:13:51:b4:f5:0a:13:e5:48:58:39:a4:52:a2:
4f:41:91:ae:f1:80:d6:f2:59:ee:0f:6a:47:0b:84:a9:1c:18:
55:8b:59:85:19:5a:a6:4b:01:d4:43:05:7b:5f:01:6c:0a:a1:
8f:1d:82:f1:9f:b5:2c:4c:96:67:f8:3d:d4:eb:12:0f:eb:c7:
bf:1b:dc:db:d0:fc:9b:a2:c6:05:31:e8:c7:0f:b7:c9:d9:d9:
9d:36:7d:4b:5a:90:df:66:c2:91:10:62:c3:25:83:97:23:d8:
c0:65:9d:53:c8:fe:13:79:88:73:7f:ec:89:02:04:41:3f:87:
81:ac:b2:e7:da:0d:b3:ca:f2:06:36:87:6c:cf:ef:84:e3:a2:
7e:b4:c4:a3:88:71:a7:48:d0:4c:64:2b:2d:d2:c6:2c:7d:4e:
1e:39:e6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:36:41 2025 by rpki-client