Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4940253e-5c1f-3c42-8c4a-acf90d596176.roa
File: 4940253e-5c1f-3c42-8c4a-acf90d596176.roa (raw, json)
Hash identifier: 1loyiDCvh41rGEFnaU0/fQlT1cR8OSE1JLvjHmijPx0=
Subject key identifier: A4:B3:9F:FC:58:73:C3:5B:12:56:5D:72:6D:6A:03:66:45:31:94:47
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A63780FB09A4C95C28F00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4940253e-5c1f-3c42-8c4a-acf90d596176.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 10796
IP address blocks: 70.60.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:63:78:0f:b0:9a:4c:95:c2:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=e6701ba7-0709-49b6-b6fb-da1a70d402e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2f:f3:7b:b5:bd:de:1f:8e:83:90:b9:c0:db:
89:67:13:3e:64:a5:ac:10:17:86:32:1f:97:6e:9b:
d9:33:f1:e7:f7:fd:47:16:37:b4:93:03:4d:fe:9b:
50:03:35:18:0a:82:54:48:22:6c:06:26:b0:22:a6:
44:06:e4:71:13:7b:4c:05:d8:c1:90:e5:b4:6a:83:
8d:1a:3f:38:87:76:fb:96:67:34:84:15:39:15:c1:
52:a6:cc:c1:ab:31:53:4c:6a:b1:35:d5:fd:33:a4:
20:cc:44:ce:b4:5e:73:4b:da:47:1f:90:7a:5b:7e:
25:43:74:45:41:cd:56:50:17:6c:c8:93:6a:98:8c:
34:11:71:34:aa:95:36:b4:ee:49:3a:04:fc:13:dc:
8c:06:6f:e0:60:de:fd:6a:dc:f7:d4:7d:19:0a:6e:
d9:f1:eb:4b:46:04:87:d7:9b:6c:0a:61:23:a9:23:
20:a9:61:4b:69:74:f5:0b:35:c7:9c:d2:e2:7c:94:
32:af:81:30:11:d3:7a:ac:55:00:5d:44:94:11:8e:
eb:48:bd:ea:a8:cd:ad:56:1e:63:0b:92:12:a1:03:
7c:d9:0c:12:fc:87:7c:7d:97:5b:72:84:c5:74:51:
39:e9:5e:0a:c4:2b:8d:fd:36:34:73:c7:5f:83:8f:
10:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B3:9F:FC:58:73:C3:5B:12:56:5D:72:6D:6A:03:66:45:31:94:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4940253e-5c1f-3c42-8c4a-acf90d596176.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
70.60.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:43:b7:f7:c9:78:71:c0:4b:0d:5b:ec:d2:d9:85:20:3c:8a:
9a:3d:83:0d:52:e6:43:be:09:a5:58:7d:60:4a:c3:d5:c1:b5:
f3:e9:02:5c:47:46:c8:56:78:35:42:9b:c9:74:48:81:45:18:
5f:8a:e0:c8:24:97:0d:cd:f7:16:00:a3:5a:70:28:b2:6c:eb:
d4:51:9f:5b:63:cc:51:a0:fc:92:54:94:41:07:8d:75:c4:7c:
ae:19:b0:51:c2:61:0a:df:b5:f2:bf:da:03:0a:5f:d5:46:75:
a1:18:5b:32:84:44:25:0d:14:9a:a6:49:06:84:f7:87:e2:97:
85:58:0f:b9:89:b7:93:34:93:81:e9:0c:0b:81:06:dd:2d:9d:
31:24:b5:3a:00:38:27:fa:4e:aa:e1:68:a9:3d:61:35:3e:19:
4d:1b:41:b4:ae:06:36:8d:15:61:c4:2d:95:6f:95:43:d9:c4:
16:2a:f1:1e:62:77:1d:2a:e4:d3:28:c1:8b:ab:bd:b6:05:e9:
f4:e0:e4:2f:51:2f:ca:88:dd:66:72:13:aa:35:cb:35:b0:75:
d0:c5:f2:a6:c9:36:87:d8:46:a4:73:f5:95:29:fc:93:26:c2:
ba:65:52:a8:11:0a:a8:b2:f0:36:24:cb:5f:9d:86:7f:44:e8:
99:2d:02:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDemN4D7CaTJXCjwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
ZTY3MDFiYTctMDcwOS00OWI2LWI2ZmItZGExYTcwZDQwMmUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0i/ze7W93h+Og5C5wNuJZxM+ZKWsEBeGMh+X
bpvZM/Hn9/1HFje0kwNN/ptQAzUYCoJUSCJsBiawIqZEBuRxE3tMBdjBkOW0aoON
Gj84h3b7lmc0hBU5FcFSpszBqzFTTGqxNdX9M6QgzETOtF5zS9pHH5B6W34lQ3RF
Qc1WUBdsyJNqmIw0EXE0qpU2tO5JOgT8E9yMBm/gYN79atz31H0ZCm7Z8etLRgSH
15tsCmEjqSMgqWFLaXT1CzXHnNLifJQyr4EwEdN6rFUAXUSUEY7rSL3qqM2tVh5j
C5ISoQN82QwS/Id8fZdbcoTFdFE56V4KxCuN/TY0c8dfg48QHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKSzn/xYc8NbElZdcm1qA2ZFMZRHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNDk0MDI1M2UtNWMxZi0z
YzQyLThjNGEtYWNmOTBkNTk2MTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRjwgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEBDt/fJeHHASw1b7NLZhSA8ipo9gw1S5kO+CaVYfWBKw9XBtfPpAlxH
RshWeDVCm8l0SIFFGF+K4Mgklw3N9xYAo1pwKLJs69RRn1tjzFGg/JJUlEEHjXXE
fK4ZsFHCYQrftfK/2gMKX9VGdaEYWzKERCUNFJqmSQaE94fil4VYD7mJt5M0k4Hp
DAuBBt0tnTEktToAOCf6TqrhaKk9YTU+GU0bQbSuBjaNFWHELZVvlUPZxBYq8R5i
dx0q5NMowYurvbYF6fTg5C9RL8qI3WZyE6o1yzWwddDF8qbJNofYRqRz9ZUp/JMm
wrplUqgRCqiy8DYky1+dhn9E6JktAkA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:09:15 2025 by rpki-client