Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f595b27d-842e-3d0e-a0f9-52f0a64f2fd9.roa
File: f595b27d-842e-3d0e-a0f9-52f0a64f2fd9.roa (raw, json)
Hash identifier: msBOhl6glM4HVSEj+rcx5pBFMkSFq7fU1QoGNWSt5Fw=
Subject key identifier: A7:65:11:E9:D8:C9:10:B7:84:97:8C:CD:FA:D2:4B:42:B3:FA:2F:4D
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037AFCD8F9399E73939E2C80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f595b27d-842e-3d0e-a0f9-52f0a64f2fd9.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 11426
IP address blocks: 24.199.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:fc:d8:f9:39:9e:73:93:9e:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=8c406475-49f3-4d03-a864-4d618d854f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e4:08:6b:47:de:df:43:fd:99:f9:c9:2d:8c:
88:a5:54:24:bb:f5:5d:b9:94:11:07:1a:e9:68:dd:
54:18:db:2e:74:bf:e6:42:74:27:68:81:30:d0:f3:
d1:27:43:3a:9c:53:16:f9:55:ea:d2:5c:9a:aa:d2:
18:8b:8d:b4:d4:05:24:52:79:f9:6c:92:f7:5e:0c:
3c:4b:0b:07:18:d0:f6:19:ad:1f:b4:2e:70:e8:ba:
66:04:06:df:e9:ed:06:e8:c4:ae:cd:38:70:47:a9:
a4:08:e5:95:59:02:e6:9f:13:4d:72:85:27:25:b0:
09:68:34:fc:bd:ea:2e:4f:88:3a:2c:f0:2f:87:40:
e9:64:28:b0:9d:28:f5:06:55:c2:0b:21:07:9a:26:
fd:37:a1:ab:f0:94:c6:c8:de:4c:a8:c1:54:a6:5f:
13:5c:da:14:cf:04:91:39:c4:bd:6c:ab:e6:0a:af:
f0:32:80:0d:72:18:b7:c2:7c:b7:b0:98:e8:8b:61:
09:67:46:00:c0:de:f7:a3:cb:4a:8c:a7:51:67:59:
8a:aa:ac:5f:bc:cf:4e:10:35:9f:49:3e:8e:09:82:
7a:b8:da:7c:5b:f5:6b:dd:ff:45:6b:5a:81:59:e1:
10:8e:e4:0c:1d:5c:88:fa:db:49:74:63:1a:83:a0:
54:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:65:11:E9:D8:C9:10:B7:84:97:8C:CD:FA:D2:4B:42:B3:FA:2F:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f595b27d-842e-3d0e-a0f9-52f0a64f2fd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.199.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:df:c4:23:9f:71:28:e3:26:7e:4b:3f:e2:4c:08:c0:ed:4f:
0a:32:2a:b9:3a:a1:b8:aa:66:75:1d:7f:61:a0:67:f1:78:dc:
33:ac:62:a4:78:94:f5:ac:19:22:25:da:17:47:90:a7:04:3a:
ec:02:6f:31:72:20:b4:72:46:d6:f1:e3:57:19:0b:7b:2f:37:
94:05:b8:9c:64:a0:a0:5b:94:13:ca:41:e2:82:93:5d:3e:7a:
5b:60:d1:14:9a:b9:92:63:a3:2b:e9:42:97:c4:0a:cb:5e:ce:
e9:f3:84:4c:d3:99:b0:47:56:f6:81:63:c5:98:1d:44:a7:bd:
f3:e4:db:c8:60:70:52:5a:85:4f:2b:de:d1:b4:cc:dd:ff:35:
0b:47:48:bf:b7:b2:bb:4c:21:ff:a0:c0:9f:cf:b3:82:05:3e:
d9:ea:81:d3:b2:39:4e:1a:4b:6a:f8:dc:60:f7:dc:6e:c2:13:
99:76:33:e5:c3:4a:49:f3:f6:43:a1:99:7a:50:c8:75:f8:19:
2d:90:c2:07:86:1c:cb:91:dd:43:32:3d:e5:af:8b:98:0b:c6:
a4:d5:58:60:99:0d:ce:2f:6d:83:f9:df:60:75:41:ed:27:ca:
ac:42:2f:17:f4:cc:15:7f:e0:49:a5:dd:e2:38:59:58:9f:ad:
02:38:a6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:37:02 2025 by rpki-client