Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c8f1d145-2c7b-3c7a-98e3-c1e5cca6b79f.roa
File: c8f1d145-2c7b-3c7a-98e3-c1e5cca6b79f.roa (raw, json)
Hash identifier: T2fzjdhkef97tQovTAq3hCe0wF9yLkZUPr/UzQivIfc=
Subject key identifier: 6A:23:9A:2F:AC:B7:73:40:39:A8:F8:36:03:C9:3A:25:31:CF:A1:57
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037B0CAFDA593816040A2636
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c8f1d145-2c7b-3c7a-98e3-c1e5cca6b79f.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20001
IP address blocks: 76.81.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:0c:af:da:59:38:16:04:0a:26:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=bb17957e-408c-4d9d-ac53-52cbc3af0626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c0:36:f5:ae:2d:01:56:95:33:92:64:3f:b4:
24:6b:77:4d:49:9b:20:84:1c:94:3d:c6:b8:15:59:
8d:f1:a8:25:99:36:86:ac:70:a9:e3:82:7c:56:e5:
28:69:fa:d8:e8:f9:65:2e:fd:c1:82:44:36:d6:b0:
68:b5:65:2a:53:45:43:1b:3a:7a:82:a0:e2:67:c8:
bb:56:02:52:51:e8:1e:07:01:eb:8a:67:46:97:cf:
a5:a4:eb:c6:1d:82:3e:9d:9e:35:2e:e5:c6:31:1e:
88:5b:d7:d3:66:b3:fa:47:96:aa:5d:f4:64:5b:8f:
00:df:6a:71:a6:f4:a3:ed:1b:2c:4c:30:86:cd:24:
26:90:ab:62:29:d2:36:d0:32:cc:aa:7a:a7:60:03:
ae:47:56:99:f5:a9:6f:2f:03:1a:aa:32:55:43:c9:
4d:d2:84:4b:ba:0e:83:aa:c4:f4:8d:63:2d:2f:24:
f8:9b:c6:ff:77:37:20:01:6d:fd:c1:56:4c:38:66:
5f:5b:08:e3:1d:a8:b1:43:17:b8:78:71:dd:51:84:
85:17:ad:bc:86:c9:b6:97:61:f2:43:04:6a:05:23:
44:5b:a4:6a:8c:94:17:3e:8a:9b:03:15:f2:c0:64:
80:48:64:03:fa:8e:db:ed:d0:5c:3a:49:c1:30:26:
df:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:23:9A:2F:AC:B7:73:40:39:A8:F8:36:03:C9:3A:25:31:CF:A1:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c8f1d145-2c7b-3c7a-98e3-c1e5cca6b79f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
76.81.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:6f:a2:0a:31:fe:5b:a2:49:12:61:87:d5:1b:9c:d9:32:e5:
af:9e:8e:6c:ac:a2:10:01:e6:18:63:12:81:d1:8e:32:43:ce:
8e:41:4a:71:98:c0:79:84:51:96:00:cb:81:d5:92:00:df:da:
77:7c:b5:fb:e0:43:e8:78:55:ba:6b:4e:fe:ca:86:c2:71:f6:
c2:12:bc:58:10:d5:09:89:04:0e:d5:47:f5:83:21:bf:b5:a7:
f7:9c:74:db:94:d0:e9:52:70:6d:93:5b:ff:ca:61:42:02:95:
c0:b0:eb:2a:35:3e:69:54:20:b9:ee:f8:39:b2:33:89:1e:e0:
2a:e0:70:5d:dd:37:e9:aa:58:ad:22:ea:45:fb:13:33:45:e3:
53:7e:20:62:6c:00:c4:9c:d3:34:25:ad:57:44:fc:0e:13:ca:
51:c5:6d:06:5f:f5:41:e8:0c:43:b9:96:1f:6f:a0:27:3b:8c:
09:e6:ba:f9:16:38:be:26:ba:40:f8:e3:97:58:be:e8:e9:43:
d0:43:47:5f:72:75:1a:97:ec:99:e1:17:4e:00:5e:1b:e8:a5:
34:88:95:5a:75:0c:4c:ed:28:72:f5:7e:b2:37:e7:51:87:4f:
0c:cd:2e:a4:f6:f1:5b:da:77:17:14:02:29:94:72:19:fd:0a:
95:2f:d4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:13 2025 by rpki-client