Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0d4e614f-5477-3e1e-be90-fd34676f5f9d.roa
File: 0d4e614f-5477-3e1e-be90-fd34676f5f9d.roa (raw, json)
Hash identifier: YAcn7oTepDngcsQ/0vUyuWRuDKo1iqB5VRk1nBa8Jqc=
Subject key identifier: E4:D9:7E:21:B5:E2:11:D5:60:41:33:D5:38:6C:B2:8D:7D:6D:F1:24
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A7A256143AEF8E2CE7050
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0d4e614f-5477-3e1e-be90-fd34676f5f9d.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 12220
IP address blocks: 72.43.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:7a:25:61:43:ae:f8:e2:ce:70:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=d4025a91-d448-4834-85e5-94fdd1b39fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fc:f0:85:57:8f:08:b1:c6:e0:62:2b:c0:48:
fb:d0:22:06:9b:78:97:7f:b6:eb:6d:0f:43:8e:58:
52:69:ed:6d:51:34:d4:7f:24:b3:c4:14:41:b6:77:
b6:78:ec:a5:85:5f:a7:3b:66:a3:e6:f2:94:66:54:
cf:f7:d6:7f:33:a1:23:0c:b6:3b:d9:52:6b:39:4e:
47:5b:60:e5:43:4a:aa:14:79:2e:38:64:9c:4c:13:
b1:e5:21:10:a3:5f:38:2e:a2:9c:80:1b:39:23:3a:
98:08:f3:ba:58:8a:65:d9:9a:18:3e:9e:df:ca:bd:
f8:4e:f5:fd:6e:54:a7:3c:77:7c:69:73:59:d3:c4:
5c:80:ef:ab:94:01:0f:8b:86:8c:96:a4:ff:d0:86:
01:ea:17:f1:2f:f8:14:b1:7a:bf:5c:f1:4e:e3:04:
40:4b:dd:fc:bf:9a:0e:7d:58:c9:f4:0a:08:57:92:
5a:10:2e:03:01:17:0f:81:0d:f9:12:b6:00:49:cf:
60:29:57:02:47:d6:74:af:29:91:dd:b7:0e:11:25:
95:32:0f:0d:b1:2e:d4:fc:b9:74:3a:0b:a8:8f:81:
64:ed:05:cf:bb:73:7a:b3:3d:ac:17:3a:da:a7:05:
4f:0c:4a:6d:13:a2:37:81:3b:7b:34:d2:0f:da:f1:
7a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D9:7E:21:B5:E2:11:D5:60:41:33:D5:38:6C:B2:8D:7D:6D:F1:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0d4e614f-5477-3e1e-be90-fd34676f5f9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.43.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:3f:4b:94:ca:52:03:53:28:e1:91:ad:d1:01:84:8b:8b:44:
94:ba:13:f7:a6:69:ae:0b:b2:eb:78:d5:52:29:3d:62:3c:b3:
b6:fb:3d:99:13:5c:a6:9d:e3:4c:21:d0:b5:96:17:c5:6a:55:
2e:d8:c8:58:89:51:94:5f:0a:36:45:1c:be:af:5a:d6:ce:fa:
f2:68:c6:dc:80:28:3d:95:bf:15:fc:ed:0f:49:5b:37:bc:1b:
f2:bb:43:0e:d5:df:51:0a:49:5a:56:f3:56:fc:e3:a0:42:09:
a4:06:c2:e8:87:0d:73:27:93:28:56:68:e2:d6:1f:1f:41:c9:
a1:97:a9:06:e3:58:70:a5:64:bc:74:71:b4:15:bb:eb:be:23:
5d:7b:37:65:4f:88:7d:09:7e:a9:e2:36:25:14:68:15:0f:ac:
66:25:0b:77:96:c6:c0:b6:3d:6c:0e:c2:ec:21:17:a7:1d:0a:
05:5c:a3:a9:1c:01:70:5a:40:3b:91:9f:f2:a7:2a:e4:28:b1:
42:13:ad:e6:1f:86:5a:a3:ee:bc:bb:e9:67:75:f2:ea:92:b1:
ed:5d:b0:3f:e8:d5:4e:ed:1c:c4:c8:89:4e:ce:ee:e7:0f:8f:
37:7b:92:b8:41:79:df:37:3f:0f:99:ac:f7:57:ab:92:e3:b4:
6b:ca:68:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDenolYUOu+OLOcFAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
ZDQwMjVhOTEtZDQ0OC00ODM0LTg1ZTUtOTRmZGQxYjM5ZmRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvzwhVePCLHG4GIrwEj70CIGm3iXf7brbQ9D
jlhSae1tUTTUfySzxBRBtne2eOylhV+nO2aj5vKUZlTP99Z/M6EjDLY72VJrOU5H
W2DlQ0qqFHkuOGScTBOx5SEQo184LqKcgBs5IzqYCPO6WIpl2ZoYPp7fyr34TvX9
blSnPHd8aXNZ08RcgO+rlAEPi4aMlqT/0IYB6hfxL/gUsXq/XPFO4wRAS938v5oO
fVjJ9AoIV5JaEC4DARcPgQ35ErYASc9gKVcCR9Z0rymR3bcOESWVMg8NsS7U/Ll0
Oguoj4Fk7QXPu3N6sz2sFzrapwVPDEptE6I3gTt7NNIP2vF61QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOTZfiG14hHVYEEz1Thsso19bfEkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMGQ0ZTYxNGYtNTQ3Ny0z
ZTFlLWJlOTAtZmQzNDY3NmY1ZjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCvPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFs/S5TKUgNTKOGRrdEBhIuLRJS6E/emaa4Lsut41VIpPWI8s7b7PZkT
XKad40wh0LWWF8VqVS7YyFiJUZRfCjZFHL6vWtbO+vJoxtyAKD2VvxX87Q9JWze8
G/K7Qw7V31EKSVpW81b846BCCaQGwuiHDXMnkyhWaOLWHx9ByaGXqQbjWHClZLx0
cbQVu+u+I117N2VPiH0JfqniNiUUaBUPrGYlC3eWxsC2PWwOwuwhF6cdCgVco6kc
AXBaQDuRn/KnKuQosUITreYfhlqj7ry76Wd18uqSse1dsD/o1U7tHMTIiU7O7ucP
jzd7krhBed83Pw+ZrPdXq5LjtGvKaHg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:05:35 2025 by rpki-client