Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bc61a7d8-be3a-3bb1-bdcf-d5857e723488.roa
File: bc61a7d8-be3a-3bb1-bdcf-d5857e723488.roa (raw, json)
Hash identifier: KrHi++ij++sf0mExLazNwVcbE+Y1lunxE2RXf1yAm7Y=
Subject key identifier: 39:FB:58:16:2B:0F:D9:7E:8B:DD:62:B1:9C:59:DF:73:7C:7F:3E:01
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A68C466DB606D8D384800
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bc61a7d8-be3a-3bb1-bdcf-d5857e723488.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 10838
IP address blocks: 173.197.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:68:c4:66:db:60:6d:8d:38:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=d630e513-20c0-4f2e-af0d-04d516fc0e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:01:31:9e:5b:c9:83:ae:47:6e:5e:ca:1e:04:
08:7a:0c:e5:6d:50:9b:37:fa:d9:95:8b:4e:cf:f2:
2f:95:d4:c9:9f:0a:7d:35:e4:a6:e5:53:d5:6d:9e:
a4:c6:c7:e5:c6:0d:93:16:ed:2e:5c:21:81:70:83:
02:d4:41:72:f8:58:ec:7b:f8:14:88:2e:8d:da:df:
29:f8:a5:3e:ff:85:05:28:d5:a3:5c:79:99:0f:a9:
15:15:e1:b9:ad:b8:4d:2b:4d:34:3c:9d:34:e7:4c:
2f:3b:d2:72:38:46:ba:6c:a6:c7:bf:99:dd:f4:b8:
04:29:f6:47:66:8b:74:53:2d:c4:e0:86:b0:1d:97:
00:9f:f2:26:22:16:e8:7c:b3:c2:6e:98:40:59:68:
bf:94:77:44:e6:6a:d6:92:e8:b1:61:d5:b3:af:6e:
68:cb:c9:ce:72:eb:df:24:1e:88:8b:c6:c8:f9:cd:
e3:ef:cf:bb:db:50:b9:ba:b2:38:2b:15:95:0e:0d:
9c:9b:9e:c4:d5:47:38:11:55:9c:de:37:e2:0a:8e:
5d:a8:a2:dc:11:e0:78:9f:8d:c6:ea:fd:31:3d:62:
c1:cb:20:e5:d8:87:69:46:4c:0e:4f:13:e0:ed:96:
65:bb:5c:8a:a3:40:56:58:21:f9:05:75:39:cf:df:
39:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FB:58:16:2B:0F:D9:7E:8B:DD:62:B1:9C:59:DF:73:7C:7F:3E:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bc61a7d8-be3a-3bb1-bdcf-d5857e723488.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
173.197.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:0d:36:f4:fb:a1:3d:6a:60:e7:99:bd:82:88:d6:59:cf:bc:
b5:75:14:04:7d:a5:6e:a2:7a:96:39:0e:e8:a8:9c:92:2a:7c:
6d:d9:d0:cf:b0:13:15:4a:9a:00:90:7a:26:e8:b0:dd:03:16:
15:9c:a4:68:a8:e7:94:da:c1:5a:ca:d8:ed:f5:7a:c4:98:a6:
b2:ed:3a:1c:48:5d:9b:38:31:33:bc:61:1e:82:ca:ee:ce:a1:
17:ec:79:68:d0:a8:10:f0:1b:33:5e:8b:5a:bc:37:1a:d5:b1:
78:40:fa:ce:30:a2:57:1e:41:fb:25:1f:fc:42:ef:85:0b:fb:
5e:9e:04:ac:11:10:0c:bd:21:60:56:76:6c:e6:39:d6:a0:80:
cf:dc:33:20:5f:8b:db:5e:f7:db:76:36:9f:f1:a2:ee:ef:99:
c1:a7:c7:1e:24:cc:98:df:70:6d:be:10:f8:f2:37:9b:f8:f4:
9f:85:e6:73:f6:d0:bf:c4:ed:e5:e5:43:7a:83:88:bb:34:52:
70:9e:01:69:2e:2a:85:11:b5:84:42:2e:bb:85:bc:df:9e:96:
dc:d5:4f:4a:f9:2c:b0:da:be:f4:1e:03:e5:23:72:e3:be:87:
58:c8:04:f8:61:ea:94:13:f1:03:59:16:b7:df:de:e3:e2:f3:
d6:a1:2a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:03:13 2025 by rpki-client