Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/895282cf-133a-34b4-aaa6-6a471f9ff11e.roa
File: 895282cf-133a-34b4-aaa6-6a471f9ff11e.roa (raw, json)
Hash identifier: eA9hlJeQg5I6mZBvPLmf1JajslsE6fhQx8EfOCQOUHo=
Subject key identifier: 4D:2F:B2:C4:74:7A:C8:24:49:63:2E:73:31:0F:27:F1:85:19:E6:1E
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A8FFE3EF3F3D2B45C9F00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/895282cf-133a-34b4-aaa6-6a471f9ff11e.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 33363
IP address blocks: 24.172.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:8f:fe:3e:f3:f3:d2:b4:5c:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=ebe37087-93cd-4601-9807-8c8fce92e22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7a:52:00:40:14:b9:0a:49:75:dd:99:91:61:
c2:6b:08:76:84:ae:ec:f4:87:95:d5:7b:cf:38:e7:
f8:2b:f4:0c:34:00:7d:82:91:7d:62:a5:0f:5b:b8:
9d:a1:4d:37:e0:ff:45:8c:47:52:c2:2b:ec:c0:6a:
41:8e:6c:aa:8c:f2:39:1e:a2:7c:0c:7d:2d:36:c8:
53:80:e0:a2:d5:9d:c1:da:64:43:c8:fd:07:a5:f2:
f0:cc:28:e6:24:8f:5e:8d:78:6a:b0:39:3e:29:b6:
a2:cc:b0:ec:d9:78:52:a4:e7:40:13:32:31:62:5e:
34:31:19:b8:d6:af:10:b9:1d:16:cb:f4:30:c8:ad:
5f:fd:54:f6:cf:4d:38:69:4f:c5:4a:8a:8d:cd:58:
1c:f3:27:50:24:ee:09:58:29:15:21:f4:22:a5:b1:
6c:69:9f:d6:85:9a:77:49:50:c9:ed:70:20:cb:c7:
cc:20:b7:78:1c:21:9b:2d:ac:b9:44:70:29:d8:22:
7c:c9:10:ae:e0:bf:c5:36:9a:47:c3:11:af:15:0b:
9b:90:e5:d3:f3:07:27:a4:ea:96:8f:9b:83:d7:00:
b4:a2:6f:a0:6e:8c:bf:53:88:ca:29:0b:0b:79:36:
28:01:1a:f0:0b:9f:68:df:b5:37:f6:61:82:a4:68:
6f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2F:B2:C4:74:7A:C8:24:49:63:2E:73:31:0F:27:F1:85:19:E6:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/895282cf-133a-34b4-aaa6-6a471f9ff11e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.172.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:39:96:b9:d1:d7:0a:e5:df:a2:72:f4:71:35:bb:cc:4f:9c:
74:0e:3b:35:e7:08:c3:ff:fd:fa:24:8a:5e:0f:d1:07:f8:99:
7f:22:68:05:7f:50:a8:2a:8c:1d:a8:3e:b9:aa:09:d0:99:2a:
c9:db:3b:8a:29:bd:0c:68:b3:95:de:2d:b9:58:2b:69:c6:94:
70:e0:08:5d:2b:66:fe:64:3f:c6:cd:b3:53:43:b6:79:12:ce:
46:a4:bf:a2:c8:4a:82:20:23:4d:d2:ff:14:63:72:8e:a9:8c:
a1:f7:59:1c:1b:a1:f4:b2:ac:e6:48:6b:1b:de:72:71:a3:8d:
11:e4:2b:f7:72:9f:92:fe:d8:a1:1a:c6:bc:25:f7:26:af:b1:
7c:a1:ab:ed:1d:8d:7e:af:73:67:9c:83:5e:dd:f7:0e:a1:f5:
f0:6d:d8:d0:dd:c2:a3:c1:9f:60:96:0b:67:7d:d0:74:ed:ba:
fe:67:f5:c7:7f:e2:10:5d:16:4d:27:7f:0a:d7:e6:9a:86:42:
24:7d:0a:e8:21:f9:50:07:cc:19:57:89:b3:08:5f:59:b6:71:
fd:7d:26:38:6f:8b:6f:8d:69:f7:f3:9d:19:9d:8d:09:e7:72:
22:6a:6f:f6:dc:52:f8:40:37:d2:fa:c9:c7:4b:88:8d:aa:27:
d6:be:25:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:27:26 2025 by rpki-client