Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9d137dad-2f21-3018-975b-670cf5e68dd7.roa
File: 9d137dad-2f21-3018-975b-670cf5e68dd7.roa (raw, json)
Hash identifier: r3E/fyyK8EpsIbu2WecuIa8vAWc1Slv8ngs424oAvJs=
Subject key identifier: 72:AF:A4:2A:F1:09:E8:5B:87:F6:11:EE:1C:25:E4:B4:07:B0:DA:EE
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A697032D1792762679D30
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9d137dad-2f21-3018-975b-670cf5e68dd7.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 11159
IP address blocks: 173.196.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:69:70:32:d1:79:27:62:67:9d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=ff1ffc60-17aa-45c2-8adc-ed5e3589d81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f0:b7:99:c4:ed:15:83:80:fb:3e:7d:e7:8b:
56:ed:79:95:ab:64:54:73:58:45:d7:0e:8e:39:f2:
13:8a:53:67:bc:58:ce:8a:c2:ec:ff:97:65:52:55:
9d:6c:aa:54:5f:69:15:f6:3d:2f:0c:9a:a5:5e:6f:
37:46:a7:05:96:8a:6e:b6:61:95:fc:19:28:de:d9:
c8:f7:c2:a0:de:68:20:9f:95:25:fd:a3:7f:3a:ce:
a3:c1:69:3c:b7:8b:1f:b7:ca:0d:90:8d:fc:36:70:
43:56:ec:5a:6e:9a:bc:54:3e:ac:ee:ca:6d:2a:a5:
74:65:3c:1a:27:e2:06:c0:8c:b6:e4:73:19:be:b3:
1f:b0:59:44:08:af:47:ef:9c:bb:7d:cd:0e:a1:3d:
47:72:30:e4:66:89:5d:0f:5e:6b:83:0f:94:4a:d5:
5d:e3:08:cf:7e:c4:6c:19:8e:60:5e:aa:76:6a:cf:
c2:2c:65:2c:a0:4d:5b:35:a3:ef:c1:28:ce:82:d5:
fe:66:74:84:df:06:1e:4d:03:f2:b0:0a:f4:1d:b1:
11:54:19:5a:ee:bc:f7:ad:e7:14:82:b2:d2:1c:1a:
0b:34:b0:81:f0:f9:67:41:ec:2e:2d:da:4d:91:4a:
63:ab:53:85:3a:13:df:a4:4c:36:f5:c5:c7:de:7d:
d6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AF:A4:2A:F1:09:E8:5B:87:F6:11:EE:1C:25:E4:B4:07:B0:DA:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9d137dad-2f21-3018-975b-670cf5e68dd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
173.196.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:1a:b6:74:5d:91:3d:96:cc:06:81:a4:51:6f:4b:e5:0c:98:
24:c2:48:ac:66:09:cd:66:5e:4d:ae:ad:4a:18:3e:0a:70:93:
c3:a1:22:fb:9a:0c:c6:6c:fb:7c:95:33:bf:fa:44:01:d9:8f:
1c:16:e8:a1:86:c4:14:9a:72:21:64:8a:54:59:74:60:a8:07:
b1:aa:de:4d:c5:35:90:fa:ef:a7:01:d3:d6:e0:f4:b5:32:19:
af:1b:06:5e:22:be:26:1d:20:79:c9:89:16:f1:80:69:48:ec:
a7:d6:8f:c4:bd:97:41:00:17:d7:30:74:54:90:9b:24:f9:3a:
82:d0:3e:df:38:8b:de:b9:e3:66:75:41:ec:f2:b1:1d:3e:2a:
23:b6:31:76:0b:45:15:8a:9c:b2:5a:6a:02:fc:86:e0:c6:f1:
9b:3f:b7:cc:5c:0f:26:7e:0a:dc:d6:63:b0:64:0d:98:7d:4d:
e2:2d:fa:1a:32:92:79:2f:b4:5f:e2:a6:d5:a0:54:20:44:a6:
17:bc:54:69:e7:f9:f8:bd:8c:fc:18:6d:80:8e:f5:39:a1:29:
16:86:d6:f4:b5:88:b6:ce:68:c9:f1:d0:1c:64:b9:10:5e:ad:
1d:4e:bf:e9:aa:9e:33:fb:b5:4e:af:ed:c9:73:bf:89:61:e2:
b0:dc:71:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:24:50 2025 by rpki-client