Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/82637120-81fd-31bc-af24-fe3f076fadc1.roa
File: 82637120-81fd-31bc-af24-fe3f076fadc1.roa (raw, json)
Hash identifier: sn5XxtibpOQXgY0XfbYXL8Qz4Yzo+tymBz+TBEUDs8w=
Subject key identifier: FE:19:43:6D:81:1C:DB:F1:0D:B4:D5:5B:E6:69:21:24:C3:EE:94:D8
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037B01F84F4D3841D20E5340
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/82637120-81fd-31bc-af24-fe3f076fadc1.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 11427
IP address blocks: 24.73.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:01:f8:4f:4d:38:41:d2:0e:53:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=e72131b1-b389-465f-9d31-1804ba13ae3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:79:2d:8f:e1:ba:8a:ae:82:32:62:21:f7:e5:
8a:19:55:61:a8:8c:15:15:e4:26:8c:4c:bb:b7:73:
1c:74:8f:f8:d0:61:66:32:83:73:f5:17:09:aa:10:
77:f1:85:7b:88:0c:a8:72:3c:ec:cf:8c:7a:ad:4b:
1f:e5:4e:81:5a:4b:76:72:0c:cc:47:03:22:f6:b5:
e1:f0:ee:81:33:3c:69:8d:9a:f6:d0:e6:26:30:7c:
84:84:f9:13:83:f1:5d:1c:d4:06:6e:bd:54:b7:ee:
60:e1:11:5d:46:b7:46:df:f1:cb:33:0c:c6:44:4c:
07:59:51:06:f5:e7:ae:9d:b3:17:f6:d1:81:5b:7b:
cd:ec:e5:37:64:df:c5:0a:73:71:13:31:01:2c:b6:
5a:aa:3c:7c:e0:b9:74:0b:bd:2f:f6:e9:ef:e1:f3:
42:84:28:7a:fc:1b:11:1f:f3:19:8a:02:ef:0c:c9:
f6:9d:07:6a:f4:94:2d:75:b0:e8:75:11:8f:48:6f:
5b:cb:82:c8:57:59:2f:f9:e2:0a:cb:1d:ab:d5:6d:
04:6d:71:09:60:60:3f:e2:5e:13:b5:e7:03:76:9b:
ce:68:9c:ce:44:e3:5c:47:f0:c6:03:5c:b7:02:a9:
68:24:66:1a:7d:28:66:8e:bd:74:2f:0b:cc:91:b1:
c8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:19:43:6D:81:1C:DB:F1:0D:B4:D5:5B:E6:69:21:24:C3:EE:94:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/82637120-81fd-31bc-af24-fe3f076fadc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.73.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:c1:25:ce:06:74:cf:2b:a4:a7:56:fc:17:4a:13:18:f2:25:
02:b1:26:06:d7:a2:2c:7c:fb:a5:e1:a1:59:be:b4:fd:8a:7b:
c1:dd:63:f9:17:7d:f9:c4:38:2c:f2:b0:f3:0c:42:cc:55:e1:
8f:08:77:42:ac:f1:52:cf:66:00:5a:24:37:11:f2:a2:6d:93:
7f:45:9b:4c:b0:a6:3b:49:40:92:e0:5a:09:5e:83:87:89:8d:
e0:59:ec:c8:f0:d0:6f:d2:9b:09:5e:f3:57:eb:28:13:ce:d7:
bc:6b:0b:ef:e9:87:bf:ec:38:e1:93:61:35:59:7a:7c:a9:68:
8e:ba:1f:04:eb:6a:51:e6:3e:89:da:0e:fa:ce:56:11:2c:1c:
67:33:28:50:44:26:65:df:95:ae:db:3a:68:28:ea:58:4f:97:
0c:7b:1c:0c:f1:64:a7:aa:bc:0b:c2:5e:c1:2b:83:f6:c9:ee:
a3:7b:98:90:bb:45:2f:11:32:d5:36:19:ca:d8:87:26:eb:db:
1c:64:1a:1b:76:8a:09:9b:72:53:91:b8:e2:8c:1d:3f:c9:81:
a4:d5:b5:69:92:35:fb:aa:a8:59:21:fc:18:f0:d9:a0:56:92:
36:85:be:c7:76:7b:e6:0b:93:c3:e2:49:f1:ab:bd:b5:06:f7:
1e:6e:45:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:37:08 2025 by rpki-client