Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9df72abc-f6c1-38a9-9a7f-de4ad4a16715.roa
File: 9df72abc-f6c1-38a9-9a7f-de4ad4a16715.roa (raw, json)
Hash identifier: L86aUNQDNuDoW57F1yEtfBAQRvc9r08PqvPeLCd0aOc=
Subject key identifier: 35:91:B7:B5:C1:CC:1B:37:CF:4B:C4:FD:5F:B1:D4:6D:48:77:BD:E1
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037AED524CDDD399A0A33980
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9df72abc-f6c1-38a9-9a7f-de4ad4a16715.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 10796
IP address blocks: 174.101.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:ed:52:4c:dd:d3:99:a0:a3:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=33c5bc98-14d9-465d-98b0-5cc95d7e3dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:24:c1:f5:e0:ce:09:1c:26:ce:9a:a7:10:18:
7a:8b:21:0b:e6:e8:44:b4:59:00:3e:3f:00:a3:74:
c3:12:4d:8b:7f:a1:f6:91:94:a0:9e:0f:8e:2e:ec:
39:7b:5a:3b:80:65:ed:b3:fe:b4:a6:a4:59:c6:ca:
26:d9:77:65:0d:07:46:56:f8:44:67:0f:c5:cb:41:
1b:41:64:9d:04:14:58:35:c7:14:43:4e:f5:a3:74:
d0:a7:96:a4:a6:5d:45:26:ab:a7:89:c6:b2:8e:73:
97:0d:78:a6:7f:f9:77:b9:90:fd:82:ce:ff:78:ec:
14:48:24:7a:8d:dd:2e:c2:d4:8a:13:96:99:eb:30:
d1:e5:25:63:4f:c7:46:f2:50:31:95:18:28:fa:d7:
6c:1a:f4:8c:eb:5a:4e:16:17:34:a4:d3:01:73:37:
1e:b1:2d:ae:63:f8:09:3c:ec:19:5a:64:8d:cc:78:
5b:34:02:35:ec:0d:03:ae:1e:4d:b3:73:af:70:21:
de:04:75:8b:a1:68:15:9f:32:37:ee:f2:19:eb:58:
3a:0d:40:dd:0d:e2:73:16:06:6a:44:00:19:18:00:
62:f4:5b:31:3f:8b:41:03:67:5f:a0:be:d6:1b:4a:
c2:d0:a0:7a:91:d4:81:6c:3d:50:13:e3:49:5e:8a:
49:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:91:B7:B5:C1:CC:1B:37:CF:4B:C4:FD:5F:B1:D4:6D:48:77:BD:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9df72abc-f6c1-38a9-9a7f-de4ad4a16715.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
174.101.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:c5:29:a2:d1:d2:1a:95:d9:50:3a:8a:d0:91:c6:66:49:cf:
13:6c:29:9f:9a:c9:81:0f:71:6a:80:19:3f:a4:78:20:ac:00:
24:be:ea:02:aa:4f:46:8a:47:11:17:ff:ca:a3:7c:64:c3:06:
b2:97:55:7d:21:c2:af:d8:33:b2:6f:2a:11:45:af:0b:e5:a0:
ad:c5:db:ee:96:2f:c5:67:f3:e1:e2:b2:98:56:87:75:df:38:
f7:d5:a4:2e:f8:1a:83:e6:a0:0c:fd:a8:87:57:97:4c:8c:5e:
cb:38:14:39:57:d0:cf:85:fe:b6:e4:54:a9:4f:f2:8c:90:41:
0f:e3:40:43:5e:dc:43:ed:02:f6:d1:95:92:f5:53:24:27:72:
04:fb:ff:23:d6:9f:95:1f:4d:34:58:7f:de:10:d5:46:14:01:
35:be:7b:47:25:2f:d2:c4:81:59:94:1d:14:6d:30:11:3b:23:
f7:92:b8:ae:c9:43:c2:ee:fb:c8:2b:f5:3f:f0:2f:1e:e1:20:
89:88:b3:92:57:aa:59:b6:67:34:a9:6b:4b:c0:64:95:d9:88:
ef:d5:30:36:d1:be:f6:bb:85:d3:e3:d5:86:8c:62:bb:fd:53:
7c:ec:dd:36:da:0e:68:6c:91:b3:31:3d:e5:6c:60:8f:fb:11:
e3:43:b0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:11:05 2025 by rpki-client