Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f3cdb582-b5cb-3a2b-9698-dc8ff8a4f69c.roa
File: f3cdb582-b5cb-3a2b-9698-dc8ff8a4f69c.roa (raw, json)
Hash identifier: wOeM/dFFeVapcFc0QqGKSw8XblFQvTaX6f2AMNpKUv8=
Subject key identifier: DD:47:02:86:F9:D6:B8:74:F2:C0:AC:CD:38:FF:33:A8:F9:4C:B5:8E
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A95275C87768411075680
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f3cdb582-b5cb-3a2b-9698-dc8ff8a4f69c.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 393756
IP address blocks: 24.153.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:95:27:5c:87:76:84:11:07:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=74189eae-2be9-478e-9982-c271cf572845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9d:d7:12:2b:ed:1c:fb:e2:4c:b5:53:df:65:
51:5e:d1:45:f8:c3:41:59:e5:80:ce:d6:65:b4:9c:
c2:e5:c7:cc:25:5a:24:78:14:60:05:cf:72:d6:e6:
16:98:05:8a:38:9e:bb:b7:2d:e1:3c:5c:7c:ed:9e:
06:6b:2d:01:9a:2c:a7:7d:8b:f5:37:8a:a2:98:b7:
c2:03:3d:ff:fb:d1:7f:6f:ea:a7:24:19:c4:05:36:
bf:dc:8a:24:a6:cb:33:76:0c:a5:51:ec:f0:07:4b:
52:29:0b:15:92:6f:bc:67:88:9e:0d:d4:a1:6e:e8:
c3:2d:b4:30:1c:6b:05:43:c6:ff:47:3b:0f:68:35:
29:b0:3b:39:9e:c7:fc:32:4c:0e:3b:e3:0e:1f:b1:
d2:37:90:31:e3:95:3e:25:3c:da:eb:6a:88:1d:95:
e5:24:b0:97:71:f0:97:a0:da:e1:0c:87:60:d3:01:
7b:00:2b:fe:22:66:a9:a2:92:6e:29:18:f4:19:69:
66:46:d6:c3:06:1c:82:13:30:1b:27:19:f8:54:78:
03:64:22:5a:1b:d4:a2:a4:fd:2d:6f:30:88:62:18:
57:be:b6:29:00:0e:4d:49:f2:b1:e9:1a:bf:1c:1c:
96:65:a7:b9:94:91:27:7b:9a:df:1b:6c:2c:11:30:
d0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:47:02:86:F9:D6:B8:74:F2:C0:AC:CD:38:FF:33:A8:F9:4C:B5:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f3cdb582-b5cb-3a2b-9698-dc8ff8a4f69c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.153.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:78:02:88:e6:5b:c1:3c:3c:1c:4c:b9:9b:12:27:14:0c:a3:
54:e6:2c:2d:30:dd:d0:56:63:22:e4:71:63:27:4c:74:d9:96:
ef:fd:1b:1d:c3:d5:02:d0:51:99:1a:73:47:b9:af:9f:80:6a:
37:9f:27:f2:3b:45:1d:40:80:03:a1:eb:56:82:02:29:e6:cb:
80:9a:fc:02:86:20:af:5b:4d:10:e6:87:30:4c:ed:d4:e4:ae:
6a:78:07:0c:cf:2f:cf:ca:31:5b:77:69:6f:c8:12:b4:b1:2c:
7f:af:d7:b8:75:ea:16:73:dc:39:ab:88:18:f4:07:a9:94:a5:
bd:de:ae:f4:0b:42:8e:6d:65:4a:37:3a:14:ef:c8:8b:07:c7:
c7:e7:4f:48:8a:67:23:9a:96:72:90:b3:fc:c7:02:c0:83:b1:
83:61:10:ee:9d:53:4e:bf:63:70:f0:45:29:1c:93:7a:59:91:
e0:4e:f1:a8:85:c2:77:a5:fe:47:ab:d6:4d:91:4c:a3:24:d9:
01:a4:9b:97:0b:28:fe:11:05:fb:d9:7a:ca:58:d8:4c:50:85:
64:e2:b5:33:1a:f8:33:6d:99:1e:55:e9:da:ee:51:2a:ce:80:
f6:c6:bb:a5:0a:45:e7:c6:6d:42:ae:78:d0:f8:70:f2:75:bf:
31:d7:d5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:40:57 2025 by rpki-client