Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/387afd4f-041d-363d-864a-92472a705686.roa
File: 387afd4f-041d-363d-864a-92472a705686.roa (raw, json)
Hash identifier: Ig/rQo+z4SC5HjdWKHIVJx+JentY7ViEIGTPH929K4M=
Subject key identifier: 32:82:95:73:54:96:8D:51:BE:B6:58:30:DA:AA:18:00:12:11:10:AA
Certificate issuer: /CN=7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d
Certificate serial: 010D0C9F43285848854B4F5024F8603DE2B9AA40
Authority key identifier: 02:12:9E:33:36:D4:F0:86:D2:34:08:2D:A1:0D:B2:98:F9:26:A3:A4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/387afd4f-041d-363d-864a-92472a705686.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 11068
IP address blocks: 192.200.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:4f:50:24:f8:60:3d:e2:b9:aa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=b9887f6b-4a8e-4919-8301-9f41f07d14e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:29:f5:37:d9:fa:7f:4e:67:2d:7a:d6:25:9b:
cb:3e:eb:a3:24:5d:9c:5f:05:d3:c4:00:52:9d:b4:
cd:93:2b:fe:af:7b:5d:38:e8:f6:c9:6c:b4:da:09:
d0:0b:2b:e0:32:8e:06:9c:4a:cb:9e:8c:f8:f9:c4:
7d:d0:6e:77:1c:04:54:c5:60:49:76:00:99:09:cb:
27:4a:24:0d:f1:1b:d7:70:c8:f3:58:9a:c0:b9:31:
e5:a0:3e:3d:16:57:c6:fa:fe:71:48:ff:5a:31:eb:
df:ae:e7:81:56:39:d7:bf:28:07:1d:85:78:b1:08:
8b:d4:0a:35:c0:0f:40:85:87:eb:7d:6f:64:0b:01:
bb:71:21:32:7e:0b:e6:3f:82:dc:43:61:11:a8:f3:
91:2b:16:d9:04:fd:58:f9:4a:0f:83:07:48:ca:64:
62:32:42:29:16:9b:5b:5e:47:44:07:a6:47:b5:af:
e8:55:b8:90:9a:c6:06:29:0c:de:dd:57:b1:d0:07:
58:e8:d0:fa:de:b5:17:a3:96:9d:1e:dc:5d:67:c6:
84:cc:0f:6e:a7:b3:17:23:e3:2e:6d:5e:f2:34:7a:
0e:9e:29:71:63:19:46:ce:5c:46:90:e8:d8:b9:08:
2b:7f:e2:b5:71:96:55:04:f7:44:fe:a1:7c:52:18:
43:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:82:95:73:54:96:8D:51:BE:B6:58:30:DA:AA:18:00:12:11:10:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/387afd4f-041d-363d-864a-92472a705686.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.crl
X509v3 Authority Key Identifier:
keyid:02:12:9E:33:36:D4:F0:86:D2:34:08:2D:A1:0D:B2:98:F9:26:A3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.cer
sbgp-ipAddrBlock: critical
IPv4:
192.200.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:51:96:8f:57:b8:d8:91:7b:b1:a2:82:d9:19:5d:8c:b2:89:
ef:40:6e:89:51:2c:d0:2f:63:ef:e4:5f:a2:29:81:2d:6e:0c:
bf:0a:9e:d9:ab:b8:52:9f:a6:0e:ac:78:5f:27:c6:8f:1a:04:
af:59:80:2b:a5:b8:a1:34:7f:7c:d3:63:32:0f:68:f6:69:b8:
33:75:96:9d:14:d9:05:68:68:2c:2d:0b:cb:a2:29:82:04:98:
48:0d:6d:3a:02:43:44:d6:90:aa:24:37:3b:f0:3c:c1:d7:f4:
d8:a2:80:d0:1c:62:67:98:a8:d0:6e:71:46:da:89:59:66:41:
6a:99:21:ad:2c:40:0b:17:5a:08:7b:83:3c:20:f6:39:75:d1:
c5:1a:5a:0d:32:e1:31:c6:eb:b5:72:3b:c1:25:3f:24:73:50:
3d:a9:85:c7:4a:e2:b5:6c:5c:d4:6d:af:47:a4:a6:f7:03:50:
3c:ba:b6:eb:f1:93:df:be:1d:fd:a0:97:3e:0a:04:16:5e:93:
93:46:76:c8:d4:4e:97:5f:67:8c:aa:7b:d2:89:65:b1:02:2c:
5c:e6:85:45:6c:81:31:74:2d:fc:43:df:8e:e0:f6:28:8d:80:
ff:86:b4:aa:2a:1b:d7:12:cc:e9:97:a8:33:6b:37:aa:f7:0c:
66:7f:6c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:50:55 2025 by rpki-client