Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/be3ba580-d94b-3f11-a765-7e7aa3573f9a.roa
File: be3ba580-d94b-3f11-a765-7e7aa3573f9a.roa (raw, json)
Hash identifier: Khd7sY0SIH3oCEu6oH8bkJW36Pyhj/3Yjj64bi38Lr4=
Subject key identifier: 0D:F9:0D:D2:B2:F8:08:67:F5:3D:16:B7:C6:4A:F9:1B:8C:4E:98:86
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037AE4ECD347D640BFAB6E00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/be3ba580-d94b-3f11-a765-7e7aa3573f9a.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 7843
IP address blocks: 24.33.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:e4:ec:d3:47:d6:40:bf:ab:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=f07258f0-e96a-4f22-8bba-6356b6b0da69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:52:42:f8:6d:43:c1:2a:20:f8:ad:72:34:5a:
b4:9e:19:52:7f:36:13:94:12:7b:ac:c4:22:da:86:
9d:2e:25:71:26:83:1d:d0:33:61:78:6f:e7:84:a3:
c1:90:c6:3f:b8:f3:03:fb:4a:03:31:7d:69:9b:3b:
5b:39:37:d1:36:f2:1f:a7:70:4e:d9:ec:30:19:50:
74:f6:b9:98:14:8d:70:b4:aa:6c:25:8f:d6:89:d0:
15:a0:44:78:f0:b1:c6:dd:ce:d9:57:8b:20:d5:3a:
6f:87:cb:e1:6f:ab:74:1a:a3:72:aa:d0:21:38:b4:
65:a9:e8:5a:02:da:81:43:a5:44:96:72:cb:4f:88:
4f:65:cc:48:7c:b7:2c:31:af:c8:c6:25:7d:6d:6f:
6e:21:90:14:28:e3:f5:cc:4c:71:91:8f:e1:37:6b:
5e:0d:a6:92:2a:e7:00:ac:25:eb:15:ff:25:18:e0:
e9:3a:02:99:ef:d9:22:4f:1a:13:d6:7f:30:8e:61:
5d:ec:0c:e2:9e:38:f0:01:a9:b3:15:12:32:36:58:
97:d4:29:85:59:f7:74:a5:fa:b9:cd:ab:65:56:c4:
09:cd:59:e9:30:0c:f3:b2:b0:42:cf:39:16:0c:7f:
2d:ea:e5:fe:e5:80:ce:7e:fb:cf:e4:44:1d:9f:eb:
57:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F9:0D:D2:B2:F8:08:67:F5:3D:16:B7:C6:4A:F9:1B:8C:4E:98:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/be3ba580-d94b-3f11-a765-7e7aa3573f9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.33.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:41:e1:d8:6f:59:93:99:8a:73:46:93:15:ed:1f:92:f1:3b:
00:f7:2f:c3:10:a0:22:85:fc:d4:a6:89:14:03:aa:02:02:12:
3e:21:cc:e4:a2:15:a1:b3:56:4d:22:f2:ec:df:cf:52:68:31:
be:04:56:a8:cf:e2:3a:76:d7:a9:f3:ff:2b:fe:95:f6:e1:fa:
63:67:14:df:33:7d:9e:a4:82:60:06:e2:7a:7c:f4:74:36:93:
72:03:f8:67:8f:ad:5b:7c:89:07:83:46:2d:99:d1:6e:d0:07:
e8:fa:bd:ba:30:d3:c0:9f:ff:8a:80:13:7f:12:ab:73:34:2b:
eb:68:e6:89:26:6e:62:2e:dd:1c:9b:bf:25:20:1c:83:39:38:
28:d6:2d:af:d9:e2:16:31:41:84:bc:23:c3:aa:f2:be:11:e1:
eb:a2:a9:9b:50:5f:14:95:80:cb:dd:1f:49:57:58:3b:d0:5a:
52:c6:fc:c2:2c:fa:4f:83:1b:b7:49:d3:0e:54:14:46:ea:d1:
31:cd:c9:61:4a:47:04:71:6f:73:a5:68:5f:5e:da:24:66:67:
e1:ba:75:7d:01:d1:a2:c8:ab:d5:06:71:1b:ab:fb:a9:89:9b:
3d:49:35:8a:8e:b9:ad:cc:c7:41:05:05:53:43:49:06:b4:d0:
bb:d4:30:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:43:43 2025 by rpki-client