Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e33a6c8c-d7b1-34fc-b4d0-79a522cbe3bd.roa
File: e33a6c8c-d7b1-34fc-b4d0-79a522cbe3bd.roa (raw, json)
Hash identifier: SONpwnkjd/V+99iB8MXM13/brvaIGXYQjEiQlO9R2X8=
Subject key identifier: CB:AF:2B:48:6C:0F:A3:2A:53:36:6B:6E:88:D9:7A:03:0B:45:A3:7A
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A57964FE46842DA9ED700
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e33a6c8c-d7b1-34fc-b4d0-79a522cbe3bd.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 10796
IP address blocks: 72.133.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:57:96:4f:e4:68:42:da:9e:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=5f661a91-5606-4250-81a1-bbe4f824e7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4d:2e:da:1e:5c:5d:b5:e8:15:9e:11:93:75:
47:98:34:1f:04:c4:cf:b3:d2:66:38:27:dc:08:0c:
72:66:9f:06:57:b9:e1:17:dc:ed:ca:98:11:18:96:
91:63:7d:69:c7:a8:66:9e:86:8a:4e:77:5b:95:95:
1d:6e:f7:e7:9c:b6:3f:fa:e4:57:6e:00:0e:70:20:
23:78:21:88:cf:3c:9a:c2:d9:7c:ea:b4:3c:f9:be:
29:6c:11:6f:b0:81:77:c0:d5:56:f6:98:99:76:0f:
7e:9e:5f:1a:ac:6a:81:51:68:20:42:9a:51:fd:ae:
09:d4:e0:9f:2f:34:41:3a:81:b4:a1:02:d9:3f:7a:
cb:ab:9f:c4:5a:68:8b:61:a7:57:0b:ff:9d:fd:9b:
90:d0:c2:8e:40:42:63:a3:b2:f2:07:78:07:47:91:
08:68:97:7e:c3:ad:d8:07:32:5c:8c:2d:1e:1f:2e:
47:dc:be:0a:cf:87:a3:ed:b4:c3:bb:34:dc:56:b0:
4d:e0:37:d7:42:1c:53:8e:24:a1:d9:a8:64:a0:9c:
b0:00:b0:12:11:0b:78:e9:38:e4:f4:26:07:24:68:
cd:ce:19:e5:b1:58:db:a0:af:ce:31:5f:92:7f:0f:
01:2d:27:1d:c6:9f:32:1c:7c:dc:57:d6:e8:5d:5a:
4e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AF:2B:48:6C:0F:A3:2A:53:36:6B:6E:88:D9:7A:03:0B:45:A3:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e33a6c8c-d7b1-34fc-b4d0-79a522cbe3bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.133.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:5d:1a:bf:ff:9e:62:f8:93:e8:11:36:b9:c5:db:2c:5a:a3:
d1:3e:e1:b8:01:1e:f6:ba:89:f5:f1:90:a5:05:61:2b:ae:53:
d6:7b:a1:f2:47:e1:f3:37:22:2e:da:b5:ce:57:b7:e1:65:22:
f7:50:b6:55:89:34:fd:d2:3c:0d:2f:bb:2b:da:a6:8f:e6:6d:
e3:91:6d:3b:8e:7f:57:e0:33:86:48:25:57:87:64:20:a7:77:
44:f4:56:e3:f4:48:92:27:41:37:4f:5c:26:34:e6:7c:2b:d0:
80:de:57:1f:71:6d:28:59:0d:fd:23:7b:1c:6f:a4:fb:23:30:
53:6f:ae:4c:ad:df:93:6e:40:3c:50:6a:5c:49:d9:1b:ea:3a:
fa:cb:35:07:ea:66:34:ee:f2:26:d5:47:54:dd:92:02:62:2b:
fd:b6:08:1e:09:d7:fd:af:e2:c4:b0:7f:4c:22:18:d9:b1:9f:
31:2b:ba:a1:02:c5:9d:03:3d:15:1e:7b:b9:dc:c8:43:05:bb:
36:5e:74:91:be:d1:0f:4c:6a:1e:1d:83:7c:09:17:e7:aa:db:
77:c8:76:aa:d0:b1:1a:9b:6b:b7:ab:80:03:75:0b:45:c6:29:
13:bb:1f:1c:d9:51:4d:a7:57:f1:ee:8e:83:85:26:e4:3f:45:
8c:88:bb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:33:22 2025 by rpki-client