Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d52cab0b-52b6-30e0-8f35-594af227c3ac.roa
File: d52cab0b-52b6-30e0-8f35-594af227c3ac.roa (raw, json)
Hash identifier: dLRPhTt7lrQacfqlZCnvH/4PKgiA9il5gf8Ma9PC2A8=
Subject key identifier: 76:FC:64:2D:0C:6F:F2:C2:A6:FD:F3:A3:1B:C0:00:0B:94:18:FA:69
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037B086592FB20A1AEEE8700
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d52cab0b-52b6-30e0-8f35-594af227c3ac.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 16787
IP address blocks: 107.14.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:08:65:92:fb:20:a1:ae:ee:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=ed483271-bee2-431e-9485-e7500cf4b587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:27:ad:b4:4b:3f:3a:4b:36:92:1c:69:c6:0f:
c5:ea:bf:c9:de:56:68:27:03:2c:c5:cd:c4:e4:a6:
a4:58:77:4f:4a:ea:26:80:a3:40:dd:31:fc:40:c1:
e5:ff:05:b2:91:e6:15:da:e4:cb:89:c5:82:3c:72:
24:01:18:3c:4a:eb:e3:9f:b5:d0:a5:f1:54:3e:27:
e6:a7:98:c5:3c:91:d0:b6:00:db:86:ee:c6:12:4d:
04:1e:bd:e6:a7:14:da:b3:4e:90:f4:6d:2c:64:81:
d1:d4:21:87:ac:61:e4:6c:11:2d:bd:a4:ed:4f:2a:
16:29:66:24:c0:c1:f6:e4:67:08:b6:a3:0c:f7:53:
25:bd:f4:f6:db:70:a2:b9:f1:e2:23:d6:ef:f3:b3:
92:de:51:d3:84:90:29:a8:60:43:bc:70:f1:02:27:
e4:7d:9b:e0:73:41:b7:0d:8f:99:99:f7:9e:35:78:
e7:fe:8d:d2:f0:05:28:7b:e7:a3:4d:f1:89:81:fc:
2d:16:32:29:a2:f3:e4:84:1b:27:8c:af:72:c9:d2:
3d:25:49:2e:32:45:9d:f2:66:ae:72:42:8b:d6:81:
36:9d:0e:ce:02:82:f1:49:63:81:6c:4b:71:47:24:
10:88:96:2c:20:51:4e:de:21:cc:ff:a5:df:eb:d5:
f7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FC:64:2D:0C:6F:F2:C2:A6:FD:F3:A3:1B:C0:00:0B:94:18:FA:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d52cab0b-52b6-30e0-8f35-594af227c3ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.14.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:3f:30:f2:55:34:cb:27:36:e0:8e:3e:d0:2d:22:0d:e3:00:
7a:80:89:85:bc:7d:97:53:20:83:d5:c1:a1:a2:fa:66:95:e2:
d8:6d:33:c7:2c:ac:af:d6:1f:6f:c8:c8:85:48:d6:df:1f:ff:
a6:8b:58:36:d6:7d:61:e7:64:19:bb:38:b6:cc:71:3f:89:4d:
73:90:31:3d:5f:60:c1:6b:91:34:cf:59:b8:4e:e5:e6:40:9f:
46:40:50:84:73:25:31:16:7a:d1:37:65:8a:77:4a:d8:7b:8c:
11:b3:76:3a:7b:e8:98:4e:5e:df:4c:f4:c7:33:32:86:99:85:
2e:a9:d0:c8:79:04:3d:00:08:ad:a2:dd:a9:b2:c2:f0:6a:c3:
21:e7:15:8c:a7:26:2f:a4:16:ba:52:c1:00:44:8f:38:2f:cb:
6b:ee:61:45:5e:3b:a5:ef:31:0d:67:5f:bf:ce:9d:c7:23:42:
88:1a:37:a9:90:1e:00:4b:bb:62:3a:58:80:ac:38:d4:05:1d:
b9:57:48:b1:09:9a:cc:7f:37:63:45:a6:27:6e:3f:49:5c:44:
92:eb:a3:61:76:1d:a6:d2:e1:4d:f8:2c:f3:72:fc:af:df:45:
ff:d7:0d:3d:fe:98:6f:36:84:fe:13:3f:4c:57:fc:bb:6d:16:
7c:96:7b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:33:41 2025 by rpki-client