Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1f5afd7b-bd3a-327b-9147-6fa6d8a68740.roa
File: 1f5afd7b-bd3a-327b-9147-6fa6d8a68740.roa (raw, json)
Hash identifier: sAwZM2fpuH7y6X23aIMfuw8MQWBuuBE1xwbGRGlrDk8=
Subject key identifier: D4:52:93:73:53:0C:7E:ED:65:25:3B:21:16:69:EF:7A:E6:54:1A:A8
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A88CF732B9B2B5FF43FC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1f5afd7b-bd3a-327b-9147-6fa6d8a68740.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20001
IP address blocks: 67.49.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:88:cf:73:2b:9b:2b:5f:f4:3f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=f5ac74c3-2466-4610-98c4-78128cfb8362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:eb:78:a2:72:71:b6:9d:f8:f0:9b:bd:34:90:
ae:27:9d:57:b0:d1:8e:9c:57:80:c6:45:66:ac:71:
78:92:79:91:42:4f:e5:f1:f6:80:ee:56:df:1c:d2:
20:92:9f:c8:67:67:66:dc:de:9d:ec:07:ee:4e:48:
43:74:4f:f3:0e:3b:73:7f:26:69:2d:5e:b5:f9:34:
3f:90:3c:bf:0d:e5:da:4d:2b:e0:c6:39:f9:70:49:
13:6c:b4:62:fb:65:3e:ea:e5:e4:33:20:65:ad:f2:
cd:44:f2:38:e3:d8:cc:95:b4:9a:05:c6:83:2e:17:
27:eb:ef:6f:4e:74:27:b6:36:c8:03:8f:a1:ce:d6:
e5:f0:ff:f3:87:1f:c3:f7:8c:90:95:88:10:d0:de:
47:c1:61:b8:e2:73:5c:32:7d:70:7f:85:88:4d:08:
f5:b8:9f:77:4a:6e:62:72:93:4a:58:8f:83:ab:44:
d1:4c:e8:17:f8:a5:fd:c5:65:70:37:8d:1a:22:32:
08:0e:da:a3:1d:c4:df:c7:9d:bc:ba:f3:ab:b9:11:
59:fa:c2:55:aa:47:42:a5:a9:b7:98:c5:5a:e8:5e:
67:cd:01:25:01:67:ef:24:1e:d1:69:cb:28:82:2d:
55:95:7c:3e:35:54:40:f9:02:37:f4:cd:1e:37:33:
7f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:52:93:73:53:0C:7E:ED:65:25:3B:21:16:69:EF:7A:E6:54:1A:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1f5afd7b-bd3a-327b-9147-6fa6d8a68740.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
67.49.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:11:73:85:66:1d:86:a2:e4:68:e1:da:bc:b7:f3:aa:79:98:
e4:d5:f5:c3:f3:e8:87:60:4c:ab:2b:40:72:85:8e:b0:85:d0:
50:b5:e4:c2:49:cc:19:ae:99:99:5f:af:c9:e4:4c:4a:2c:2a:
de:57:c1:8c:32:e0:06:70:d4:fc:d2:da:d7:01:73:83:63:a4:
41:01:6b:13:25:97:71:06:35:7b:86:4b:6f:44:de:a9:ed:f9:
dd:ae:6d:73:4f:13:4a:9d:6c:ce:b0:3f:2a:34:63:64:0a:84:
e9:b8:bd:8d:5c:d1:4b:2d:3e:a5:83:69:c0:5e:29:be:a0:2f:
53:50:df:b4:00:7a:d5:35:76:96:3c:39:58:fb:d5:0e:be:7b:
f6:ca:0f:31:79:da:af:0d:64:a2:37:0a:00:f0:8d:76:c5:37:
09:80:2e:ed:1c:a5:aa:37:7c:fb:72:70:63:49:80:96:00:97:
d3:c9:8e:f9:ba:45:96:d8:ea:fc:e6:9e:f2:0d:92:dc:61:a1:
85:23:6d:3e:ad:b3:23:7b:bf:94:45:41:6a:ad:c5:db:5b:d7:
d9:46:e4:c1:09:cc:7d:56:92:13:32:1a:a6:ab:32:6c:be:20:
4b:23:fb:d5:be:c1:3f:e3:4d:42:f9:3e:a1:3c:3e:47:35:b3:
e1:de:f7:ee
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgDeojPcyubK1/0P8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
ZjVhYzc0YzMtMjQ2Ni00NjEwLTk4YzQtNzgxMjhjZmI4MzYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjut4onJxtp348Ju9NJCuJ51XsNGOnFeAxkVm
rHF4knmRQk/l8faA7lbfHNIgkp/IZ2dm3N6d7AfuTkhDdE/zDjtzfyZpLV61+TQ/
kDy/DeXaTSvgxjn5cEkTbLRi+2U+6uXkMyBlrfLNRPI449jMlbSaBcaDLhcn6+9v
TnQntjbIA4+hztbl8P/zhx/D94yQlYgQ0N5HwWG44nNcMn1wf4WITQj1uJ93Sm5i
cpNKWI+Dq0TRTOgX+KX9xWVwN40aIjIIDtqjHcTfx528uvOruRFZ+sJVqkdCpam3
mMVa6F5nzQElAWfvJB7Racsogi1VlXw+NVRA+QI39M0eNzN/AwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNRSk3NTDH7tZSU7IRZp73rmVBqoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMWY1YWZkN2ItYmQzYS0z
MjdiLTkxNDctNmZhNmQ4YTY4NzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQzEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAFhFzhWYdhqLkaOHavLfzqnmY5NX1w/Poh2BMqytAcoWOsIXQULXkwknM
Ga6ZmV+vyeRMSiwq3lfBjDLgBnDU/NLa1wFzg2OkQQFrEyWXcQY1e4ZLb0Teqe35
3a5tc08TSp1szrA/KjRjZAqE6bi9jVzRSy0+pYNpwF4pvqAvU1DftAB61TV2ljw5
WPvVDr579soPMXnarw1kojcKAPCNdsU3CYAu7Rylqjd8+3JwY0mAlgCX08mO+bpF
ltjq/Oae8g2S3GGhhSNtPq2zI3u/lEVBaq3F21vX2UbkwQnMfVaSEzIapqsybL4g
SyP71b7BP+NNQvk+oTw+RzWz4d737g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 15:26:54 2025 by rpki-client