Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5b72123a-68f3-33b0-a841-bb0e0ebb8bfb.roa
File: 5b72123a-68f3-33b0-a841-bb0e0ebb8bfb.roa (raw, json)
Hash identifier: PcPH/nmK6Sd3DUgoClA8aVQJXLaORO+ULwo089J9sHw=
Subject key identifier: DD:37:66:18:67:4B:53:23:62:67:A2:F6:2E:7E:EC:AA:3B:86:0C:FA
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037AFBBDFD1F624698C89FC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5b72123a-68f3-33b0-a841-bb0e0ebb8bfb.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 11426
IP address blocks: 108.169.134.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:fb:bd:fd:1f:62:46:98:c8:9f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=66330d24-cb30-40b7-82d1-63368fbdbf94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:4b:da:a6:2d:f1:e7:57:ca:76:4b:3b:61:
07:ee:9c:4f:f3:87:ab:3f:c2:7c:44:6f:8e:86:7d:
e1:60:f7:37:9f:95:06:9a:b1:1f:0d:ed:93:21:48:
46:2a:05:d4:55:68:48:8c:96:4a:cb:30:e7:b9:ba:
34:22:11:65:e9:cb:91:6d:ea:74:a5:23:f1:40:eb:
51:bb:62:11:8a:ae:08:86:65:6d:8d:f7:52:17:13:
57:c7:b6:76:61:6c:2a:cc:1a:68:1b:85:2d:d7:6d:
b9:f0:8f:6a:e4:0e:b3:02:59:82:b4:2c:f1:df:c4:
94:84:d1:24:f8:72:69:31:e7:3b:63:ac:67:27:f3:
44:44:5f:b7:ea:eb:da:ca:3b:9c:ef:24:6e:59:25:
f0:a3:57:25:16:5a:0b:a7:e0:c0:b0:e2:21:97:ed:
66:0d:b8:1a:ed:48:40:e7:94:d3:8d:f2:f8:b5:c5:
72:f4:cb:90:5c:98:9d:ce:82:28:b8:84:c8:64:46:
6a:5f:32:da:d7:68:1d:ea:ed:31:46:8b:92:98:ee:
2e:20:1e:6d:2e:09:01:b1:b8:56:77:91:da:b2:d1:
9c:4f:e7:6e:e3:da:d9:41:04:51:11:1c:cd:cb:6d:
a3:57:fd:83:34:f0:61:ef:b1:d4:e6:bd:19:f5:16:
c3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:37:66:18:67:4B:53:23:62:67:A2:F6:2E:7E:EC:AA:3B:86:0C:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5b72123a-68f3-33b0-a841-bb0e0ebb8bfb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
108.169.134.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:8f:5c:94:37:02:c5:47:08:fa:0d:90:fd:46:e6:ac:bb:ac:
93:e6:e3:3f:69:6b:3b:bf:b1:15:4c:61:30:56:c2:f0:a6:58:
8b:63:7a:50:1e:c0:31:ed:28:8c:8a:a1:37:8a:33:46:b0:91:
1c:65:d0:d8:b2:1d:40:7d:f1:ea:5a:84:4a:eb:1e:68:a7:71:
a1:4c:be:41:81:94:b4:aa:27:63:7b:98:9d:ab:96:8b:bf:de:
63:67:3f:6f:63:3c:91:5c:0a:15:ed:c7:0e:e9:0f:f2:0d:ff:
28:39:ac:0a:1a:e2:f5:35:59:94:b5:bc:61:bb:13:b4:16:f9:
02:36:93:9f:35:1e:42:84:f5:7c:07:6b:25:2b:33:9f:59:f2:
83:c2:cc:db:e0:39:4c:68:38:ab:ae:bb:6e:90:15:45:35:b6:
f9:67:8b:2a:22:ac:4a:f7:91:91:6c:56:b2:41:0c:bd:a1:49:
72:f8:ce:98:09:33:0b:a0:e5:e7:0c:f3:ff:e9:1f:90:96:48:
1e:fb:3e:77:d8:4a:86:f6:ae:16:04:02:63:3e:bd:93:94:a5:
7f:1c:16:1f:c3:09:af:fc:ee:68:c3:24:1e:64:e5:60:1e:a9:
43:a9:65:72:2e:c7:e8:f1:af:b8:16:d2:00:4b:05:5c:3b:f1:
be:e1:cf:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:31:30 2025 by rpki-client