Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df917ed4-e5df-3a02-b420-36fbcf4f9511.roa
File: df917ed4-e5df-3a02-b420-36fbcf4f9511.roa (raw, json)
Hash identifier: 3SIuuVjMdC82NWweTaUc8bNp3VjxFigkd32LGZ+eUyY=
Subject key identifier: C2:B2:5E:E5:22:C3:5A:37:F7:24:76:2C:EB:1B:60:3B:89:99:CD:AB
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A8D5E075AD2BD1F3AC250
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df917ed4-e5df-3a02-b420-36fbcf4f9511.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 33363
IP address blocks: 97.96.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:8d:5e:07:5a:d2:bd:1f:3a:c2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=a0fc2d0e-6f75-4fbd-8c54-4a0ef43eb3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:00:ee:d5:96:28:3e:3c:33:93:08:bc:7e:81:
b4:f5:01:75:a7:ae:41:70:75:25:ef:2e:21:8a:4b:
9b:e6:a0:19:82:5f:63:ed:17:02:5c:b1:a3:db:c6:
f7:f7:1f:20:67:e4:a9:55:2f:45:09:6f:42:24:2c:
bf:22:e7:35:48:32:04:21:54:3b:ea:68:2f:07:3a:
79:cd:90:f4:67:18:91:61:b3:12:6c:70:45:3d:a7:
fd:1e:a6:68:e5:c1:7d:d9:be:51:8f:de:c4:2c:99:
dc:e5:be:9e:aa:96:b6:7b:d1:e6:4b:83:03:40:8c:
22:59:2b:ab:fd:c2:c4:8b:e9:ca:ca:79:c5:03:11:
67:c8:4d:05:6c:9c:53:ae:f2:6d:3b:cf:50:f4:42:
a3:fb:a5:ac:4d:b8:60:54:1a:39:fa:87:dd:33:33:
9c:e5:df:1c:93:ef:24:b6:e3:33:2f:36:d8:05:0d:
7c:f3:0a:72:66:08:5d:aa:1b:ee:b8:b4:f6:5d:c3:
c2:b0:0a:f1:49:25:8f:59:6b:49:4e:d9:f1:9f:63:
66:4c:41:03:f3:03:ab:19:a9:f3:10:85:82:cf:44:
e1:a5:6b:90:86:76:e4:77:40:97:7b:99:fd:39:b3:
c4:47:47:18:c0:11:5b:34:c1:48:40:e4:8f:28:86:
4e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B2:5E:E5:22:C3:5A:37:F7:24:76:2C:EB:1B:60:3B:89:99:CD:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df917ed4-e5df-3a02-b420-36fbcf4f9511.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
97.96.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:49:b8:ce:ef:bf:15:80:9f:3e:2a:bb:f5:87:24:0e:4b:40:
39:fc:f9:10:cf:2e:b3:0b:4a:e3:86:32:de:1f:f7:08:25:0f:
fb:79:23:60:cd:e0:8f:5c:cb:9f:61:96:4e:4b:58:d0:d9:ef:
0b:6e:69:7a:8f:9a:d9:97:88:c4:fb:21:50:af:89:ad:3f:90:
c6:78:e6:60:1f:96:57:c8:6e:a6:5c:94:b2:aa:ca:2c:ef:ec:
93:de:8a:6b:13:bf:96:c4:55:b7:07:e3:5b:b8:02:12:76:03:
f8:c9:32:57:64:05:ee:b5:d0:04:e6:ca:b0:2d:c7:ce:d9:e9:
97:ac:34:b2:fe:5e:9c:04:da:88:6a:4a:31:d3:ce:ee:32:8a:
e4:ba:63:01:ad:b0:45:d4:28:7b:03:76:aa:45:0b:71:f7:9e:
6d:07:3d:75:19:b1:74:f5:ec:82:56:a6:c1:ff:cd:0e:7d:6e:
c6:35:cb:56:09:5f:4c:ea:4d:b6:b7:fa:f2:51:73:1c:34:20:
36:82:f9:23:d4:de:3e:b2:33:36:3d:99:f2:6e:ba:12:38:26:
ea:31:0c:b0:45:25:5b:e9:6b:85:fb:6f:d1:a2:68:83:07:7b:
d3:18:c2:b8:2c:ed:43:08:62:1b:00:af:46:b0:e9:a8:1b:80:
38:64:c3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:13:01 2025 by rpki-client