Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0f81e128-417a-34ca-b952-a55f23198937.roa
File: 0f81e128-417a-34ca-b952-a55f23198937.roa (raw, json)
Hash identifier: bYlRB/Nn+6VJekTCwoPHWIazM9K5vbC11rV1P5bTPb4=
Subject key identifier: 98:49:E3:07:7D:E4:AC:71:48:70:58:72:9E:E8:A7:9C:2E:4E:75:0A
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037B0A9FDC847D0D73A08A80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0f81e128-417a-34ca-b952-a55f23198937.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20001
IP address blocks: 142.254.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:0a:9f:dc:84:7d:0d:73:a0:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=4176c52f-f908-4547-bf17-8d048dc6df3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:56:e2:99:b4:62:7d:3a:de:d5:1e:4f:42:f3:
59:7f:1a:cf:33:be:11:25:0d:e4:b5:c6:df:2f:23:
b1:d1:c2:2e:d7:cd:7e:43:84:b5:45:08:fa:35:3f:
59:65:2c:a7:9c:c3:82:6a:14:58:fc:d2:e9:09:3f:
31:ba:78:0f:f7:7d:1b:c7:53:e0:72:51:a1:96:6f:
46:10:c0:f3:41:87:92:14:a1:9d:db:ab:6d:5e:6e:
24:b0:2f:1e:a1:77:e1:3e:1e:86:74:97:c9:9a:f4:
af:9b:86:fd:be:d7:eb:a1:90:5a:0b:38:34:bc:e9:
7b:23:3d:86:81:51:70:f9:1c:c9:2a:f1:b9:92:29:
32:6f:d7:2f:a7:ce:e0:55:be:42:68:a2:07:b9:29:
de:00:aa:94:40:57:d0:a3:9f:a1:74:88:17:42:54:
37:b0:1e:0a:ac:a6:92:62:43:f2:06:65:19:88:1c:
71:fe:86:52:6a:38:33:70:8c:d2:fa:6e:a9:4d:14:
c9:23:b3:6f:5e:ea:7a:1e:bd:a3:84:b9:75:48:da:
3d:50:44:b0:6b:2b:9b:88:7f:7f:b6:4f:e5:e5:66:
c5:8b:d4:65:52:65:cf:c9:bc:69:55:4a:51:3f:df:
6a:d1:62:00:26:c4:b7:79:26:42:dc:8e:86:ab:09:
5e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:49:E3:07:7D:E4:AC:71:48:70:58:72:9E:E8:A7:9C:2E:4E:75:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0f81e128-417a-34ca-b952-a55f23198937.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
142.254.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:62:e9:58:98:77:f8:8c:57:75:0c:98:9d:e1:0f:26:ee:2a:
28:b3:1a:55:eb:6d:f4:98:9b:f2:e4:5a:ce:4a:60:e4:e1:47:
c3:9d:c2:70:2a:20:ab:93:5b:c5:22:b0:6f:30:b5:af:72:18:
29:46:fb:f7:4a:cb:02:a1:02:9b:7d:39:44:04:04:d6:42:08:
d3:52:b1:f5:20:05:ae:ac:d8:9d:2b:00:ea:c0:c9:f6:50:8b:
e6:76:d2:a3:b1:bb:49:33:88:bd:23:28:b1:7f:6e:35:cf:f3:
4d:57:fc:18:ed:43:1a:68:ca:b4:6f:bf:3f:04:54:ef:16:e0:
69:ad:4a:ec:9b:d1:3a:67:d5:2e:ab:4e:c6:d7:31:6a:09:e6:
19:5b:69:65:84:75:06:99:da:cb:09:7d:17:0c:dc:fa:ef:45:
e7:6c:ec:45:e6:b6:93:55:ec:46:bb:2a:24:77:19:a5:63:9c:
a6:b9:2e:2a:5a:ee:0b:43:9e:51:ef:39:ca:4f:05:cd:3f:61:
3d:88:a4:23:7e:f7:59:db:ec:9e:cb:0f:9f:e0:bd:f0:63:5a:
17:38:8e:b7:09:31:f8:fd:dc:39:c2:b5:c8:d2:94:4a:45:32:
f6:46:eb:05:41:1c:78:8e:6f:48:32:c1:f7:d6:35:92:52:ae:
3b:73:c3:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDewqf3IR9DXOgioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
NDE3NmM1MmYtZjkwOC00NTQ3LWJmMTctOGQwNDhkYzZkZjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglbimbRifTre1R5PQvNZfxrPM74RJQ3ktcbf
LyOx0cIu181+Q4S1RQj6NT9ZZSynnMOCahRY/NLpCT8xungP930bx1PgclGhlm9G
EMDzQYeSFKGd26ttXm4ksC8eoXfhPh6GdJfJmvSvm4b9vtfroZBaCzg0vOl7Iz2G
gVFw+RzJKvG5kikyb9cvp87gVb5CaKIHuSneAKqUQFfQo5+hdIgXQlQ3sB4KrKaS
YkPyBmUZiBxx/oZSajgzcIzS+m6pTRTJI7NvXup6Hr2jhLl1SNo9UESwayubiH9/
tk/l5WbFi9RlUmXPybxpVUpRP99q0WIAJsS3eSZC3I6GqwleUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJhJ4wd95KxxSHBYcp7op5wuTnUKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMGY4MWUxMjgtNDE3YS0z
NGNhLWI5NTItYTU1ZjIzMTk4OTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjv7sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEJi6ViYd/iMV3UMmJ3hDybuKiizGlXrbfSYm/LkWs5KYOThR8OdwnAq
IKuTW8UisG8wta9yGClG+/dKywKhApt9OUQEBNZCCNNSsfUgBa6s2J0rAOrAyfZQ
i+Z20qOxu0kziL0jKLF/bjXP801X/BjtQxpoyrRvvz8EVO8W4GmtSuyb0Tpn1S6r
TsbXMWoJ5hlbaWWEdQaZ2ssJfRcM3PrvReds7EXmtpNV7Ea7KiR3GaVjnKa5Lipa
7gtDnlHvOcpPBc0/YT2IpCN+91nb7J7LD5/gvfBjWhc4jrcJMfj93DnCtcjSlEpF
MvZG6wVBHHiOb0gywffWNZJSrjtzw5Y=
-----END CERTIFICATE-----
Generated at Fri Apr 25 15:34:25 2025 by rpki-client