Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f38cddc3-1521-37eb-9b50-3f31ae1f0185.roa
File: f38cddc3-1521-37eb-9b50-3f31ae1f0185.roa (raw, json)
Hash identifier: 1X7S8u0EzpDfKUTLOG0s428efhBqla2J+lWCBDg4Hzw=
Subject key identifier: D2:8D:B5:9F:8E:9B:53:5A:D6:AF:D9:83:7A:C5:8D:E8:E2:A7:F1:3D
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A92A6071FB328508CE660
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f38cddc3-1521-37eb-9b50-3f31ae1f0185.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 33363
IP address blocks: 71.43.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:92:a6:07:1f:b3:28:50:8c:e6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=d818acb0-e763-43a5-ad64-7b61c25b129e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:16:9c:e8:ce:c3:6a:68:ee:09:41:89:83:66:
99:64:cf:f4:cb:06:56:5d:af:ae:55:fa:2c:71:17:
51:76:86:20:7e:6d:15:5a:a4:2b:a1:9c:3f:1d:df:
1c:99:0b:aa:f3:cc:50:11:63:21:16:8b:f9:74:14:
a1:41:e5:34:dd:97:3c:de:dd:63:67:62:8d:7a:db:
60:ed:80:a3:6f:b1:36:e1:77:52:57:2b:94:0a:e3:
75:e7:1b:d8:d5:67:95:77:e2:6f:5c:09:c2:17:6e:
c3:dc:00:dc:fd:d6:79:6c:dd:bf:c1:c5:7e:0a:47:
41:ce:85:d2:cd:3b:f3:ab:73:9f:9b:2d:ac:bd:17:
f1:3b:b0:e9:c3:bb:e5:df:fa:3a:cc:14:19:a2:bf:
e8:b6:64:40:41:f9:3f:c0:87:bc:00:a1:03:52:ef:
7d:fa:63:7c:8a:d1:36:b3:f4:ff:f0:1c:b8:75:35:
06:45:0f:cb:39:bd:af:11:b4:49:da:36:bf:87:94:
ae:5e:d4:f6:88:3e:86:58:c9:53:4a:fb:03:b7:f3:
42:72:37:ad:fb:ce:5b:a9:a9:34:29:82:26:95:2e:
8a:7f:61:41:c6:02:59:d7:7f:cd:5d:87:97:52:4e:
93:20:90:cc:ab:50:fd:cb:0f:13:39:b8:95:fe:d2:
d5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8D:B5:9F:8E:9B:53:5A:D6:AF:D9:83:7A:C5:8D:E8:E2:A7:F1:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f38cddc3-1521-37eb-9b50-3f31ae1f0185.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
71.43.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:95:ae:e1:f9:26:5f:87:b4:f1:51:16:18:b5:f3:cd:21:b9:
a2:c7:dc:fd:27:41:28:85:36:a3:de:d7:e8:31:d1:c9:fd:b5:
ba:7c:e2:de:2e:2e:14:5c:01:13:b9:1c:b2:97:2a:be:c4:9b:
a1:fd:2f:8d:85:90:86:75:46:d1:07:57:14:9e:be:17:f6:83:
78:e4:71:34:ba:88:73:28:19:d6:cb:0f:8f:01:59:d9:60:30:
02:d2:1e:2c:97:d0:7d:7b:ba:1e:f7:bb:4b:c9:d0:37:d3:21:
ca:e9:ec:fd:fa:49:b3:03:a9:06:49:d7:02:03:1a:7d:4e:aa:
67:b1:73:4d:3b:c2:8d:40:d1:77:d0:74:35:32:16:93:15:13:
a2:dc:8e:41:f9:cc:a6:9b:46:3c:3e:62:95:99:69:55:0a:49:
8b:85:1b:a6:68:fe:0e:96:da:da:c8:07:63:a9:3b:67:27:d1:
db:e7:26:71:df:69:a6:2b:84:e4:39:33:77:b7:1b:c8:92:4d:
67:8d:fd:78:86:cb:fa:4a:01:d8:49:6d:dc:46:a6:f3:4d:9a:
28:b1:5f:a7:06:bd:1a:33:d3:97:a4:a8:f1:67:90:a0:e2:51:
a5:74:52:90:dd:ec:70:f8:8c:ac:0a:56:9e:8f:ef:30:47:5b:
75:44:93:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:24:27 2025 by rpki-client