Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bef55cf1-33ca-3581-b5d2-c162378fe467.roa
File: bef55cf1-33ca-3581-b5d2-c162378fe467.roa (raw, json)
Hash identifier: c1YrEgLNwI4Jqybwz+xdFppW9RWvqQMsotU58rlt4w0=
Subject key identifier: 22:F0:5E:84:E2:A7:E8:00:3F:DB:A0:14:31:D1:0B:A3:46:3E:56:94
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A81CEB23723CACE2D3FD0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bef55cf1-33ca-3581-b5d2-c162378fe467.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20001
IP address blocks: 66.8.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:81:ce:b2:37:23:ca:ce:2d:3f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=e5e7c10b-b5ef-4f32-a280-89636cf63927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:c2:c9:0b:03:29:86:2f:ce:88:16:35:fc:
67:7e:77:1f:e8:6b:77:df:22:c1:9e:ff:c6:24:a2:
fd:a8:7b:1b:43:e3:d7:36:a3:37:91:1b:66:ff:37:
91:df:ec:14:7c:3d:f8:34:dc:1a:fc:6c:40:d7:12:
28:a7:d4:0a:f5:e4:f1:85:5e:44:68:e4:34:99:92:
6a:f6:c4:e3:4a:93:d6:39:f5:dc:25:a5:e3:e7:1e:
dd:ff:2a:2b:8f:bd:d1:1a:05:c7:b9:43:b1:42:99:
26:d2:3a:fb:47:63:80:ef:f8:21:48:b7:fa:a5:ca:
89:0f:fc:e1:c0:23:81:c1:1f:88:d8:3b:e7:ef:ee:
d1:98:52:c4:54:4e:ab:0f:39:b4:b2:f8:eb:bc:cb:
44:39:78:0c:3c:c4:33:56:14:d0:38:83:f5:a3:e9:
58:87:d5:2c:41:85:cb:42:77:38:cc:16:94:d2:54:
9b:20:c2:64:f1:bb:ca:46:64:c5:18:15:85:d5:09:
db:e8:bd:93:07:7f:db:a5:d5:fe:46:d2:b9:1b:8e:
19:4b:07:7c:72:7a:32:cd:45:fc:c2:b5:8e:38:58:
78:b5:d9:76:ca:e9:3e:9e:5c:e4:4c:d1:22:92:47:
c9:36:fa:ea:f5:0e:9b:ac:fa:c1:87:b9:36:90:f4:
41:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F0:5E:84:E2:A7:E8:00:3F:DB:A0:14:31:D1:0B:A3:46:3E:56:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bef55cf1-33ca-3581-b5d2-c162378fe467.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
66.8.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:a2:b8:d9:55:93:2f:c5:ef:e1:fe:32:e6:32:33:b6:9e:69:
93:21:04:0a:a3:94:cf:7a:f1:eb:29:49:64:e3:e1:75:dd:55:
2c:dd:f5:6f:58:9a:3c:d2:30:54:78:66:f7:54:f7:57:de:2c:
fe:bf:e7:6a:7a:97:a0:a7:60:28:da:9e:50:2d:84:29:3f:98:
db:97:51:0e:de:28:e8:5c:8e:92:6f:c0:58:51:17:aa:ab:fd:
8f:6e:2b:e0:25:82:b5:8f:cd:fc:72:c7:2f:42:53:1a:46:b6:
f4:30:a5:f1:a6:48:86:6f:a9:03:e4:cf:c4:f6:51:bb:0d:ad:
de:6f:23:b7:ec:c4:9b:ee:fd:69:f2:bd:38:23:99:69:fc:42:
60:2d:49:a9:fc:ae:49:a3:9b:a8:1b:40:cb:58:a0:32:1a:98:
4e:be:35:b0:2e:79:4a:b3:fa:7e:f7:f5:a0:00:6c:d1:94:e0:
2b:10:74:fe:de:ae:52:51:92:18:9a:fc:e8:27:e7:57:a6:f6:
3b:77:53:57:07:4b:c5:e1:b0:22:fe:8b:ae:7d:5d:5c:3f:c2:
0c:ed:23:37:e8:5a:a2:e2:7a:b3:b1:df:d1:52:f4:d8:ee:90:
31:21:83:0e:be:c8:1e:83:a7:fc:9e:1b:88:e7:2e:57:b4:69:
6b:d0:75:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:37:17 2025 by rpki-client