Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fcc379f2-ced9-3d26-97f1-677f3e0887e0.roa
File: fcc379f2-ced9-3d26-97f1-677f3e0887e0.roa (raw, json)
Hash identifier: RIsiZmVzJwHqrBKbAvtKJbNsAD/un2fVjJB2Grw3b0I=
Subject key identifier: 76:C1:D6:90:DA:E0:CA:E7:F4:33:C8:28:82:FC:AD:BB:B1:99:DA:E4
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A8C971EC92B4784AEEC00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fcc379f2-ced9-3d26-97f1-677f3e0887e0.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 29890
IP address blocks: 173.197.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:8c:97:1e:c9:2b:47:84:ae:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=b193c62c-1d95-4915-ac8e-2bb479dd5aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7e:60:9d:11:04:8f:2c:31:bb:72:dc:58:5d:
2f:e0:09:74:15:d8:70:0d:8f:09:01:0d:ab:9b:17:
5f:8c:14:09:49:f4:66:0a:9d:e4:cf:ab:8c:5a:e3:
3b:b8:c9:70:ee:2e:df:8f:dc:ce:5a:8b:ef:e5:ff:
4d:5a:8b:4b:fb:6e:d9:66:42:96:97:ad:d3:44:70:
a2:1a:7f:91:ec:81:9c:33:b5:cb:e1:4e:88:42:6d:
eb:ee:ca:c1:ad:aa:58:af:c1:d8:1c:49:7a:d2:cf:
33:b7:a8:ec:cb:8f:5c:1c:be:e3:eb:f1:13:22:c2:
80:16:74:ad:50:33:a4:ed:df:ec:d8:84:83:1c:33:
16:c0:9f:9f:24:93:55:46:18:ac:5d:19:28:1b:15:
0f:7b:7e:bb:d0:8b:eb:ad:88:84:fb:d0:5f:8b:3d:
dd:a7:ed:05:2d:a2:42:30:8e:e9:21:a1:b4:b2:45:
9e:88:20:96:5a:68:83:59:47:f3:55:a6:a0:e9:9a:
f4:33:0e:12:cd:41:92:85:0e:82:b1:fb:2b:7f:51:
10:e4:76:0c:7e:08:22:bf:b2:b8:76:3c:f3:e3:95:
76:f9:78:48:59:0c:94:75:2f:ce:ab:81:5f:14:82:
82:e2:23:59:20:cb:26:64:17:97:8b:29:23:61:1f:
68:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C1:D6:90:DA:E0:CA:E7:F4:33:C8:28:82:FC:AD:BB:B1:99:DA:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fcc379f2-ced9-3d26-97f1-677f3e0887e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
173.197.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:c2:6f:f7:86:9b:74:9d:cd:db:ef:0b:a7:ec:3c:a4:b9:c2:
b4:95:f9:c8:39:64:73:91:c9:35:3e:02:01:63:ac:37:ba:8d:
95:9a:c3:76:e0:f1:3a:5b:48:c8:e1:29:1d:dc:2d:9b:d8:df:
07:c8:17:11:e5:08:8e:73:8a:48:07:b0:a4:cf:88:44:a1:52:
d4:4d:39:32:6d:f7:26:6b:db:55:28:66:b1:29:30:b4:47:46:
d0:06:15:f3:9f:7b:40:72:ef:94:a7:b0:1c:5b:8f:5a:67:2f:
d4:15:0a:51:80:06:ab:66:a9:4c:5f:95:25:9b:99:3f:82:5b:
20:85:cf:ff:8a:19:29:59:1f:01:9e:fd:4e:73:ed:f8:4e:05:
89:3d:14:3e:84:bd:15:d0:58:8b:76:ec:84:04:74:ae:1e:33:
09:64:30:58:ce:87:cc:39:e9:88:cf:f3:81:30:d4:6b:a6:24:
48:e9:07:9d:a7:b4:a8:dc:7d:eb:8e:b2:e3:90:e0:b9:dc:a0:
27:d1:c2:17:9b:22:3c:71:2c:9f:f8:a7:21:d3:e4:99:a6:e6:
49:81:26:98:0e:db:53:03:0b:8a:53:34:7b:9a:cc:03:70:34:
49:c5:86:ab:e0:bb:e1:bd:24:9d:82:c1:e8:90:cd:ff:3f:fe:
ad:f5:14:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:58:49 2025 by rpki-client