Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/890bb4d3-958c-3d02-bab8-fd03d80ada8b.roa
File: 890bb4d3-958c-3d02-bab8-fd03d80ada8b.roa (raw, json)
Hash identifier: joHPNElrBjZ8SD3r3BrGf2cxc7jwkevS6CqWMHHM9xk=
Subject key identifier: BD:EB:E1:80:52:E8:29:E3:DE:E3:D1:AC:C6:A9:3E:0A:6F:2F:85:E7
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037AF100FE8839614239C7C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/890bb4d3-958c-3d02-bab8-fd03d80ada8b.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 10796
IP address blocks: 108.169.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:f1:00:fe:88:39:61:42:39:c7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=48e646a0-b61c-4f1a-a37b-6172b680110f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:63:d4:21:b2:7b:f1:80:1f:a5:fa:e1:7d:7d:
64:2e:96:f7:07:c2:6e:d5:b1:0e:63:55:7b:5e:98:
21:d8:b5:f9:71:47:66:df:f5:09:78:72:7c:bc:60:
53:83:07:7e:87:57:04:25:f9:86:88:86:60:b8:4a:
35:d0:4c:c4:2a:67:1d:50:5f:82:c8:0d:78:07:fe:
25:de:ba:3f:dc:fc:15:5d:94:cd:34:08:55:61:c1:
e9:68:6f:24:9c:8c:44:2d:dc:b8:1a:54:a8:18:62:
1e:ab:3a:75:5a:bd:71:e4:68:0f:92:e3:bb:8c:f7:
ed:55:7a:6a:4a:9d:6f:49:9c:50:04:71:7c:c9:d6:
78:5b:4a:02:49:00:50:de:6f:0e:e0:d8:b4:1a:e1:
05:69:63:5f:d1:b7:38:66:54:5d:3b:2d:ce:99:ee:
51:1a:f8:d6:e4:e2:e4:36:41:cc:7a:de:10:7d:b9:
a6:c5:20:8c:03:3b:ba:c4:fe:4d:70:54:2b:9a:27:
f3:3d:1c:8e:5e:99:37:61:e1:f9:52:53:a2:0f:18:
2a:e8:fb:d7:b8:12:d1:db:f5:02:3b:54:12:7f:b5:
d6:c8:f5:7b:cd:0c:dd:68:96:7d:ce:e5:5f:77:e5:
48:07:82:35:4d:25:cc:29:18:2b:65:b8:85:56:e7:
68:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EB:E1:80:52:E8:29:E3:DE:E3:D1:AC:C6:A9:3E:0A:6F:2F:85:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/890bb4d3-958c-3d02-bab8-fd03d80ada8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
108.169.160.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:e8:25:76:e2:97:59:b4:6a:eb:65:89:1b:3c:71:da:ce:de:
a4:49:cf:51:30:24:af:51:f7:2b:c6:3f:3d:5c:01:93:1c:94:
7d:f5:25:9a:ac:00:86:51:17:9c:c1:83:d2:92:13:fb:46:98:
fd:42:65:28:2d:21:8f:5f:f8:f9:a5:a8:c7:e2:bd:f4:0e:59:
46:f7:48:f1:b0:84:9f:2c:91:88:c5:b6:b8:11:36:f3:0d:15:
2c:15:40:cd:b1:cd:4e:a7:dc:0e:3b:98:cf:f5:52:95:47:f6:
28:5d:b4:2d:ba:8d:a7:d5:00:57:c4:ab:11:a2:9a:bf:68:0c:
2a:78:9f:26:cf:ff:dd:cb:0d:61:24:b7:62:ad:13:a1:de:65:
ec:3c:9b:66:04:e8:12:c4:a2:6f:cc:a8:0e:f6:38:f9:59:ec:
4d:9c:83:8b:94:f0:7f:10:30:b7:f9:5b:59:d4:6d:d5:eb:6d:
b8:08:46:ea:42:67:54:84:cd:bf:d3:fc:57:8c:d5:b1:b4:83:
db:38:40:9c:8c:43:2d:fc:5b:bf:27:63:09:91:82:16:44:dd:
56:0c:90:f8:d8:80:1b:28:7b:d7:77:cd:4e:da:b0:10:75:49:
38:14:22:b9:87:d7:74:ba:eb:e2:32:b9:23:9b:68:78:76:76:
bb:36:b9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:09:44 2025 by rpki-client