Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d5a8adaa-db90-39ad-8afa-b5af5eab2edd.roa
File: d5a8adaa-db90-39ad-8afa-b5af5eab2edd.roa (raw, json)
Hash identifier: lfOiJAiKPS4lZ9+V+Ir5yUkrDAjI3+2ZJyguLdcQ7Dw=
Subject key identifier: A4:13:A4:77:E8:3C:21:F7:9D:40:98:BC:1B:BD:D6:8B:55:0B:72:1F
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037AF1F09327194E22B40D50
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d5a8adaa-db90-39ad-8afa-b5af5eab2edd.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 10796
IP address blocks: 67.52.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:f1:f0:93:27:19:4e:22:b4:0d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=f8d5c940-a388-447b-a388-3b017fda1cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:50:4c:68:7d:f2:b5:99:29:fe:05:b5:78:
17:ec:4d:65:8a:8c:35:ab:53:d4:90:16:6c:e6:4a:
6f:da:4a:77:31:7f:ac:8a:61:bf:fb:35:93:aa:78:
bf:2f:03:1d:ef:01:8b:98:59:89:8d:de:85:33:de:
78:67:a8:12:d9:78:b8:fd:39:83:18:9d:46:a5:1a:
31:85:15:23:ad:f7:d1:72:b6:af:26:8d:9e:b7:f3:
e9:30:09:01:bf:15:e1:47:a2:90:66:77:4a:b0:fe:
13:dc:57:d4:12:cf:d6:89:28:de:a9:8b:b0:72:e6:
30:95:db:a0:88:bf:1f:f1:13:5f:72:4a:7e:e2:c8:
51:4f:ed:28:77:1a:86:28:cf:81:54:1f:39:75:0e:
92:11:6a:83:16:ee:6d:09:cb:40:b5:71:eb:f8:94:
79:e8:44:df:82:21:b8:cc:9a:15:e6:78:f4:19:ba:
17:cd:09:fb:c9:e6:19:63:69:27:00:a4:3b:cd:20:
02:51:7b:7b:82:e4:50:e3:e0:1e:dd:36:ba:8c:ff:
fa:86:a3:8b:a4:ae:ad:b3:67:2f:f1:73:5b:b1:1b:
08:25:85:73:1f:51:37:47:b9:b1:06:06:83:ac:fb:
00:4e:91:50:a8:9f:f7:e7:1a:97:0e:ec:16:04:cd:
bc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:13:A4:77:E8:3C:21:F7:9D:40:98:BC:1B:BD:D6:8B:55:0B:72:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d5a8adaa-db90-39ad-8afa-b5af5eab2edd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
67.52.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:08:a3:46:76:0a:be:11:5e:4e:82:87:f2:ad:3b:03:58:af:
67:3f:1c:10:b5:36:fd:d8:74:ec:9d:15:df:92:dd:25:68:f6:
90:d4:8b:ed:76:fd:8e:b7:b8:b4:fc:2e:b9:3d:33:02:1c:0f:
85:48:c3:d3:a4:af:85:33:0a:66:c1:81:33:ca:33:33:42:26:
a7:75:1d:01:30:4e:5e:10:f9:a2:de:dc:da:72:ea:5b:b8:4f:
27:90:07:92:43:3e:28:bc:4d:19:20:b1:97:ea:72:09:cc:2a:
39:f7:db:ab:0e:eb:4c:f2:ee:f1:44:d0:db:37:25:7c:a7:c5:
6d:7d:49:6c:79:0d:be:d7:12:4e:1b:fc:47:be:42:30:64:e2:
4a:44:6f:c4:09:4a:0c:27:be:84:56:09:7b:6c:de:44:73:f9:
99:8a:78:31:ba:a1:64:06:ff:bc:fc:c1:63:ac:59:ab:dd:4b:
c9:12:41:96:9c:a0:f5:8e:78:f5:0d:ce:95:36:90:07:0c:c6:
1e:3d:99:2e:d1:cb:45:f2:7d:61:74:eb:a8:e6:43:7b:a4:c1:
3a:d9:f0:61:bd:0c:a2:0c:0e:f0:a1:31:ea:c8:ac:76:e7:0b:
4f:2b:55:f6:08:18:87:8b:c7:1c:83:ed:92:6c:39:92:da:bb:
d4:f4:7f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:00:33 2025 by rpki-client