Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d4021344-cc22-3018-ace9-7c208368bc79.roa
File: d4021344-cc22-3018-ace9-7c208368bc79.roa (raw, json)
Hash identifier: 1RuzGot1WSlQkeNRXD/SDHV4TAj8EoebnYJdkKwZhvg=
Subject key identifier: 7A:11:D4:6D:AC:B9:51:83:14:DC:7E:22:8D:62:12:1D:CA:BD:D7:48
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037AE223F59998058DD4A108
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d4021344-cc22-3018-ace9-7c208368bc79.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 3456
IP address blocks: 204.29.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:e2:23:f5:99:98:05:8d:d4:a1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=6f6e9118-ae28-40e4-acc3-f79ce76ddc6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:66:48:8e:99:62:61:f8:ef:e2:52:53:6c:87:
2f:eb:28:3d:a1:4a:48:d6:2d:8f:bc:42:ca:16:69:
01:8a:c5:74:62:16:63:91:9d:8b:cf:43:e4:b4:ed:
2d:d5:8a:86:89:ed:32:cb:09:0d:2f:35:b5:ee:89:
c0:6f:94:64:e0:e1:70:5a:05:5a:42:88:cf:7b:d9:
e5:84:fa:67:0b:15:67:97:3b:83:ae:e7:1b:33:33:
f0:97:3f:e5:83:f4:a5:84:2d:f7:33:f5:10:62:b4:
7d:58:4c:fa:cb:50:7b:bc:3d:e7:7a:39:3b:19:a9:
c6:e3:de:2a:ef:3b:54:55:89:e6:ee:04:13:bd:b4:
7d:ae:ea:0d:07:08:81:d2:01:2f:71:78:17:aa:9b:
70:c0:58:7e:ff:30:be:ff:e3:d7:88:e1:ae:67:fa:
94:d0:61:4d:f0:28:21:9d:0c:17:71:4f:fa:6d:2f:
00:38:46:2c:e5:2c:13:7e:e8:fc:44:5a:e8:05:aa:
c4:46:67:9e:5b:ca:66:dc:90:aa:ff:dd:70:75:70:
7b:37:c8:6c:86:0e:67:8b:88:0d:e8:09:1b:08:ea:
f9:de:8d:09:53:c9:cf:04:fa:85:18:79:d8:ab:c9:
4e:0b:6c:ea:55:30:9c:46:dd:40:25:96:c4:95:22:
16:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:11:D4:6D:AC:B9:51:83:14:DC:7E:22:8D:62:12:1D:CA:BD:D7:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d4021344-cc22-3018-ace9-7c208368bc79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
204.29.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:69:c7:38:a6:5c:b5:4f:10:cf:56:71:94:ba:56:da:62:e7:
94:4f:57:4f:38:de:a8:2a:1c:3d:42:d0:59:1e:b6:54:28:74:
7d:62:9c:1d:32:f1:b5:28:e0:c7:93:e3:05:9b:a6:f8:d4:8c:
93:d9:fd:f8:5c:80:55:2f:cb:e3:d1:72:3e:e7:f9:fa:b9:31:
e0:36:25:ba:e2:be:cf:78:8a:b2:d8:47:a7:5a:8a:c7:b5:a3:
bb:e5:ce:3d:ac:d4:6a:48:08:ba:2a:4a:01:2d:5d:16:c2:b4:
2e:2c:37:40:ba:95:1c:d1:ac:3a:0f:79:a3:5b:3b:30:db:44:
4f:71:e2:34:7c:bf:0d:a7:0c:91:cf:96:ef:c2:ea:78:53:fb:
4e:62:ea:65:ee:1a:55:f9:68:f9:74:62:67:e9:3e:eb:0f:d1:
80:7c:44:5e:25:44:85:b4:4c:08:8a:a3:ac:d9:99:47:01:9a:
e9:d4:65:2c:d8:97:ae:67:4e:ec:ff:d9:30:c3:a3:5e:48:d1:
b3:e5:ce:5f:66:52:07:01:27:a4:aa:27:20:af:00:1d:71:92:
75:ea:c5:67:fa:db:ab:60:56:77:1f:f9:78:83:f8:f1:37:e4:
6f:e1:d8:27:8a:cf:2d:d7:d3:84:23:e4:fd:3c:1f:36:47:61:
0a:82:de:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:36:22 2025 by rpki-client