Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ca72f112-1175-3efa-9f88-21fe5aeee864.roa
File: ca72f112-1175-3efa-9f88-21fe5aeee864.roa (raw, json)
Hash identifier: 95B9KS1CXIsSEHNC6DAlU2+w6rogjFGe38vSW0TMXmk=
Subject key identifier: 49:71:03:AE:33:D1:E0:A8:A3:44:67:27:D6:4E:CE:FD:06:AE:AF:69
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037B0B4990C630433DFB9900
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ca72f112-1175-3efa-9f88-21fe5aeee864.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20001
IP address blocks: 76.88.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:0b:49:90:c6:30:43:3d:fb:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=ebee1c9e-6bb8-4a31-99d5-99c2e58e445b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3d:84:1f:84:f9:db:22:93:5f:86:18:ae:0a:
25:83:90:fc:63:d8:f5:df:6b:ea:4d:60:b0:e8:6d:
be:55:02:44:52:fd:b1:c0:bd:a0:4a:b6:e3:cf:1e:
d2:08:ea:62:7d:6c:13:80:d3:00:52:b1:33:25:b8:
21:03:f3:df:19:94:a5:03:ab:f1:f6:61:41:40:6f:
10:2c:59:69:3b:57:a9:0e:30:9b:4a:cd:e2:16:84:
ff:9a:91:94:79:61:02:45:9c:a3:7f:5f:ff:52:49:
95:a9:ed:eb:ff:10:94:5c:ef:85:eb:50:09:96:11:
0c:99:0d:cc:2c:d6:90:69:65:7c:93:bd:0d:3c:7b:
09:54:9d:6c:10:3a:84:fa:dc:29:7a:6e:08:2d:00:
d5:44:e3:2c:9f:36:91:be:a0:59:bc:af:1f:af:e9:
12:bc:a3:91:12:e3:e7:53:dc:7f:14:a3:aa:ce:4e:
e6:28:27:b1:bc:82:15:87:2d:c0:76:66:9f:b2:a6:
33:23:66:7c:fb:7d:f5:ba:bd:8e:83:67:51:95:ac:
32:34:1b:31:94:50:ec:ca:33:24:66:6a:1e:c7:ee:
9e:56:03:2c:97:1c:1e:df:fa:3f:d3:30:97:2d:24:
70:77:6d:1e:69:87:a9:4a:2f:ba:da:70:98:88:28:
95:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:71:03:AE:33:D1:E0:A8:A3:44:67:27:D6:4E:CE:FD:06:AE:AF:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ca72f112-1175-3efa-9f88-21fe5aeee864.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
76.88.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:ac:ee:4f:83:1c:01:e1:e4:ff:c2:3d:a7:be:23:89:9c:7b:
3e:9b:c2:59:ea:45:cc:0b:d0:ff:1a:48:3e:c7:5b:42:bf:08:
af:88:f6:27:03:4e:9f:08:a4:74:93:a9:7f:1e:ac:ad:0d:6a:
29:cd:e3:a4:09:88:4f:8a:93:91:ba:1e:c0:f0:18:fc:73:14:
85:51:99:e5:ec:e8:e3:d5:08:46:ff:d1:d0:f3:62:eb:fd:63:
1d:64:42:8c:4c:4c:ef:4f:e4:2d:dd:3c:5c:3a:b4:dc:9f:03:
ad:81:6f:b1:85:26:4f:b6:50:69:93:ff:70:d6:62:d0:8b:fa:
6f:be:1e:b8:d4:5f:a1:24:45:10:6c:f9:91:81:08:2f:ce:49:
71:60:c1:9d:b0:68:d7:d4:1b:f5:d6:ba:14:cb:d9:aa:77:76:
86:67:11:01:d4:a2:c5:b2:24:b9:92:46:36:8f:eb:a6:84:da:
96:8c:d4:89:15:4f:23:54:ec:ee:ad:9a:fc:82:d0:4a:da:fa:
5c:60:5f:23:d2:df:3a:04:36:32:48:08:a3:03:ae:66:65:0c:
09:c5:41:68:f0:fd:cb:99:a7:c0:71:01:55:96:7c:3e:64:b2:
bc:72:a9:33:67:b3:0a:9f:90:79:b0:1a:3d:67:d2:98:af:87:
e9:55:8b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:03:24 2025 by rpki-client