Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5b934b6c-881f-324d-929f-f36d20fd7e10.roa
File: 5b934b6c-881f-324d-929f-f36d20fd7e10.roa (raw, json)
Hash identifier: MG4fOIGF/WCOmxRSymSkf/Q63WT1P0g2nFSmm0nb5qw=
Subject key identifier: 4A:77:FF:2C:D6:D5:3B:9B:4E:C1:76:04:48:E1:FF:E4:07:FB:6F:DA
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A7BCBB0B62D22AD342540
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5b934b6c-881f-324d-929f-f36d20fd7e10.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 12271
IP address blocks: 142.254.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:7b:cb:b0:b6:2d:22:ad:34:25:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=5ff0f02a-48df-42e1-8dc0-64d7e714166f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a5:3e:c4:66:94:2d:60:18:42:eb:e9:f6:a1:
bd:ad:da:85:42:93:6e:ed:87:88:b4:55:20:f6:fe:
04:40:df:c3:2e:51:7f:3f:0c:ae:7c:56:cc:35:3d:
cd:4a:1a:4e:36:43:d4:aa:2e:a3:26:95:2f:5b:8c:
94:00:80:28:ee:bb:8d:ae:ce:c0:30:25:26:f1:fd:
5e:d0:fd:3f:a6:df:e7:1a:4d:51:2c:40:d0:69:af:
45:0e:f5:8b:27:b7:49:22:7a:ed:98:2c:e5:ae:09:
78:cd:15:59:c9:01:e5:0e:db:2a:6a:1a:0d:16:8d:
4a:c1:de:d8:44:08:72:f3:cd:64:bc:1b:e5:bc:53:
aa:41:d9:5a:43:3c:23:9f:ab:be:74:91:4c:e1:f0:
c8:1f:f4:84:eb:79:fc:24:a9:44:bf:32:46:d0:c9:
0d:b8:34:3c:94:79:5e:ec:4b:ac:c3:cb:37:ea:37:
64:5f:f3:fc:a5:e2:27:9a:b1:37:68:e7:a3:5d:0f:
7d:f3:b2:77:44:1c:f4:f7:d1:61:4e:50:cf:11:20:
4f:38:54:8f:aa:2e:bd:17:df:a3:ea:2b:f3:e1:c7:
ed:41:27:70:87:bf:32:ff:ae:1d:37:32:36:ed:2c:
ec:ac:f9:49:c1:fb:9e:ae:2b:f2:7f:dd:5b:2c:9e:
06:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:77:FF:2C:D6:D5:3B:9B:4E:C1:76:04:48:E1:FF:E4:07:FB:6F:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5b934b6c-881f-324d-929f-f36d20fd7e10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
142.254.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:1d:f2:a9:4b:4c:19:fb:25:4a:1d:ef:f3:92:a0:ce:12:d7:
91:dc:ad:78:c5:39:6d:09:ae:e0:9f:57:75:da:c7:5c:1e:ba:
53:fb:05:03:6b:e3:0b:9c:61:37:4c:2c:32:0d:ab:75:94:29:
9a:7d:5c:2d:90:83:77:8a:a3:c1:2b:47:97:40:3d:1d:b8:5c:
9b:f3:ed:7b:2d:63:41:17:ee:01:04:83:fa:13:04:63:c8:2c:
e2:e3:f4:17:c9:6d:0d:7f:76:6a:f1:61:76:e3:1f:7a:d5:72:
96:69:aa:d0:59:ce:ad:bb:f2:e7:5f:cd:31:cb:b5:70:57:99:
65:42:fb:cf:0f:83:46:4f:6c:f8:37:a9:8d:54:39:6b:bb:2b:
ec:07:69:aa:87:9c:41:47:1d:d0:42:61:22:3a:92:76:15:bd:
6c:20:0f:38:c6:43:a9:09:db:8f:fb:1f:5a:bb:97:31:52:8b:
23:ea:78:f2:24:27:9f:42:e9:82:6f:a9:24:7a:95:15:4e:6a:
9e:8f:8a:7c:10:2a:83:52:47:b9:f9:ac:0a:6a:69:b6:4c:93:
3d:78:3b:54:8a:51:e9:72:e7:f4:e8:14:47:f9:0f:5a:da:74:
36:86:4c:e1:38:92:30:77:41:cf:27:4a:07:4e:5b:6b:f0:52:
fc:d4:96:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:36:35 2025 by rpki-client