Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/59d38ea8-ad22-3bed-8fa9-92ec2e4a27b6.roa
File: 59d38ea8-ad22-3bed-8fa9-92ec2e4a27b6.roa (raw, json)
Hash identifier: VgC5Qj+n5E8rZxSeMdWPbehojSAFtFVK3evacjAKK5c=
Subject key identifier: E1:E8:D8:EA:98:13:0D:61:80:3E:91:38:BE:6E:0F:CA:9E:73:3B:C8
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A7A3EDEBD6E6AD42914C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/59d38ea8-ad22-3bed-8fa9-92ec2e4a27b6.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 12271
IP address blocks: 158.222.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:7a:3e:de:bd:6e:6a:d4:29:14:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=af7ae2f9-c301-4ccc-8319-f1b6f90fb09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:59:2e:19:71:e6:f8:d0:40:16:5c:3e:af:
8c:13:37:95:c5:28:b8:2b:10:a0:bd:93:a0:a4:e6:
6d:da:27:9c:2b:48:97:91:35:f2:7b:07:29:97:19:
0f:b6:4b:fe:52:1b:a1:6e:42:7c:cb:e9:af:e2:52:
70:66:60:5a:2c:cc:ea:29:c5:ba:a7:88:64:a6:11:
94:b4:72:02:66:dc:14:32:ea:f1:41:28:7a:5a:a0:
87:68:e0:b2:c1:14:7d:40:5d:30:09:a4:8d:84:8b:
71:ae:7e:bf:73:de:01:e0:b2:6c:e6:48:e3:ad:36:
c0:13:37:92:73:05:35:78:47:91:8d:d6:33:55:d3:
10:35:bd:17:5a:c2:ae:8e:d7:ad:93:13:55:1b:fa:
86:49:5b:21:7e:dd:d9:93:76:60:12:b8:be:05:96:
99:d4:65:5d:16:e3:01:12:87:0d:58:2e:f4:25:1b:
99:ea:d7:17:0f:5e:eb:d0:4e:13:67:58:ee:34:5d:
c9:cd:10:37:78:0a:b8:8d:c4:95:09:80:ae:83:02:
e6:23:ab:7a:82:70:1c:0d:0c:85:50:3b:7f:fc:a7:
98:5b:9b:15:27:30:87:92:4c:94:89:ef:3f:20:d5:
d7:37:50:5b:fc:21:09:9a:b2:15:32:72:f3:90:7a:
e3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E8:D8:EA:98:13:0D:61:80:3E:91:38:BE:6E:0F:CA:9E:73:3B:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/59d38ea8-ad22-3bed-8fa9-92ec2e4a27b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
158.222.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:55:40:65:f8:64:a5:68:60:20:57:b9:5a:3b:e6:60:8d:3c:
10:66:ea:1f:10:6b:05:30:ca:fc:e6:2a:e8:59:1d:6f:dc:2c:
a4:46:9e:88:bb:36:da:d6:c4:30:bd:82:e6:dc:bf:e0:f4:a9:
6b:74:a3:55:97:8c:8d:de:bb:9a:8c:f9:a8:a4:f2:61:79:89:
47:6d:a7:c0:6e:93:69:97:0c:ed:a2:fe:68:4f:58:2d:72:91:
17:89:8d:91:4d:48:31:29:f1:7e:55:68:28:75:f3:95:36:36:
ec:ed:f3:96:05:9e:50:4a:36:ad:14:39:54:64:76:d1:94:03:
1f:2a:89:59:19:6d:91:85:4c:dc:8c:82:4f:31:40:1b:2f:f0:
84:ac:bb:16:c6:7b:6f:f6:db:30:44:d4:69:21:c5:29:81:a4:
72:61:b9:0c:b3:6c:e3:92:0d:3f:a4:15:af:9f:38:f2:57:c3:
f3:30:9b:fe:6d:b3:8e:23:63:39:75:d3:28:c7:24:f8:ba:01:
bb:b1:a7:24:7c:bb:7b:59:4b:06:40:f2:87:a3:1f:e7:c2:3f:
d3:57:f6:e5:26:2e:80:99:7e:1d:32:c8:e0:c3:b2:7a:2f:01:
c2:08:57:c3:41:fa:d1:d6:09:a9:ee:09:af:ab:c3:06:6c:2b:
8a:34:8d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:49:26 2025 by rpki-client