Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e40dda08-561c-4fe1-bf7a-30557c86efa3/51e76be7-aaaf-383a-802c-73d3bbefc8f1.roa
File: 51e76be7-aaaf-383a-802c-73d3bbefc8f1.roa (raw, json)
Hash identifier: XJTlJSXOpp672SgTp5KPIb6+dyT6mCtlSWF5uXWREco=
Subject key identifier: C5:60:F0:70:25:CC:8B:F0:02:C1:E7:AF:B4:94:29:87:8B:45:86:EA
Certificate issuer: /CN=e40dda08-561c-4fe1-bf7a-30557c86efa3
Certificate serial: 010D0C9F43285848064502CBF9FCDE5E01D3F940
Authority key identifier: 13:D5:2D:AC:AD:2F:2E:52:DD:E6:E5:CC:CB:F5:58:53:D8:AD:A1:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e40dda08-561c-4fe1-bf7a-30557c86efa3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e40dda08-561c-4fe1-bf7a-30557c86efa3/51e76be7-aaaf-383a-802c-73d3bbefc8f1.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 11831
IP address blocks: 71.19.240.0/20 maxlen: 24
162.221.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:45:02:cb:f9:fc:de:5e:01:d3:f9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e40dda08-561c-4fe1-bf7a-30557c86efa3
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=1a61cd4f-946e-4bd5-ae50-c948164e4f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:25:34:27:05:d3:25:a6:1e:21:77:cf:28:
8c:d0:60:75:13:b4:73:b3:d2:b4:99:1c:e0:64:ba:
78:44:78:5b:63:49:1b:59:40:4f:e8:51:b8:dd:cb:
33:5c:de:64:4f:33:d5:b8:f9:4f:c3:8d:cf:1b:38:
c1:16:e2:ce:b9:bc:5d:a2:84:f0:d1:bf:bc:a9:be:
61:5c:dd:25:2a:03:cf:7e:fe:f4:6b:6d:9e:e2:3b:
73:f8:23:7a:8b:d8:06:f8:65:e1:60:87:9e:75:53:
b6:4e:5a:45:7c:68:eb:da:ca:b8:c7:d7:e9:87:1b:
96:a8:d1:87:b7:80:01:33:e8:c3:2c:a9:3b:04:b8:
06:22:d2:dd:b8:14:eb:54:b6:f0:bc:f7:fa:8c:e6:
c2:15:3c:6e:3d:0a:cd:57:f3:9b:ed:4a:8b:34:6b:
41:f4:ea:32:23:c4:af:c6:7a:7a:6f:99:83:72:11:
09:b6:2e:64:18:7f:92:61:83:1d:de:5c:d7:7d:16:
6e:fd:f8:12:cd:ea:47:80:d3:31:27:f9:a1:d4:39:
be:f9:fc:15:8b:a5:6d:ef:e8:58:5b:af:03:8a:eb:
c8:df:48:65:32:0a:bf:66:07:69:9a:d6:0f:46:83:
19:a2:f6:ff:46:a9:bd:02:12:6e:16:f8:ee:e8:fa:
c7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:60:F0:70:25:CC:8B:F0:02:C1:E7:AF:B4:94:29:87:8B:45:86:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e40dda08-561c-4fe1-bf7a-30557c86efa3/51e76be7-aaaf-383a-802c-73d3bbefc8f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e40dda08-561c-4fe1-bf7a-30557c86efa3/e40dda08-561c-4fe1-bf7a-30557c86efa3.crl
X509v3 Authority Key Identifier:
keyid:13:D5:2D:AC:AD:2F:2E:52:DD:E6:E5:CC:CB:F5:58:53:D8:AD:A1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e40dda08-561c-4fe1-bf7a-30557c86efa3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.19.240.0/20
162.221.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:ee:d3:9e:09:b5:1a:2f:ec:9a:52:10:39:32:4c:e1:f0:57:
2f:f0:26:f5:84:14:5f:b9:b7:17:f6:80:8c:ab:db:f3:f7:4c:
21:35:12:41:e6:13:12:f9:c8:35:3e:97:a3:50:89:ca:07:91:
7e:7f:c4:2c:a4:6b:b6:5c:e3:a3:e8:45:a7:3f:c8:0e:d1:48:
29:e4:9a:12:59:b4:1d:80:b5:16:4a:28:a3:29:94:4c:20:11:
b5:6f:53:a7:4b:9f:67:31:e0:16:b6:49:aa:0f:d9:59:e8:17:
ba:11:84:f1:98:13:d4:17:34:20:cf:72:07:12:95:e1:de:b1:
84:f4:fe:81:5c:fb:cd:07:a6:df:63:cd:99:8d:1c:6c:c9:00:
c8:13:25:b9:93:f1:61:ea:2c:19:d7:a8:44:09:64:89:5e:3f:
c3:81:16:c5:4a:ae:08:65:85:39:0a:77:71:50:70:1c:78:1f:
9d:92:94:17:77:9d:3f:84:e4:a5:65:bc:ae:39:d8:db:6c:d6:
27:1b:bc:21:a3:43:51:77:8a:cb:89:30:5a:a1:e0:32:43:04:
09:46:ce:e0:1e:c3:c2:65:92:6a:ea:ee:47:c2:2b:62:24:52:
af:d2:6d:27:89:a6:7a:d4:49:94:68:80:47:80:9f:e1:7f:43:
eb:02:ee:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:23:27 2025 by rpki-client