Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4cd47b3f-5824-3c97-8e7d-8c525f6d3136.roa
File: 4cd47b3f-5824-3c97-8e7d-8c525f6d3136.roa (raw, json)
Hash identifier: NKkXovyUYmjjMS/DQ/jHE/5Cwu/mOT7APSDGZtgTz/Y=
Subject key identifier: 20:BD:DA:C1:58:9C:EE:3E:FA:C5:C9:E6:C4:F3:EC:95:ED:47:86:D4
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A54C5DBC66B4D77A18700
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4cd47b3f-5824-3c97-8e7d-8c525f6d3136.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 10796
IP address blocks: 24.29.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:54:c5:db:c6:6b:4d:77:a1:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=35910df9-4c81-4e4d-8571-040be3a4c5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d0:db:dd:f6:6a:15:71:37:c0:4d:5c:4f:43:
24:05:f3:11:b1:67:1b:ca:49:2e:c6:98:60:ef:87:
e3:dd:1e:bb:b6:dd:61:9e:17:1d:da:16:03:fd:cf:
83:8f:1a:44:c6:56:9a:ef:14:93:51:b1:88:e9:38:
5a:0d:b2:f3:83:2c:2d:d2:57:f3:20:47:1c:a3:c2:
31:1e:c3:af:35:39:a9:6d:48:e5:0a:35:51:bb:ab:
af:54:aa:af:40:26:83:ab:9b:a3:01:cb:ec:01:c6:
d2:df:88:d2:85:7f:fe:24:60:d8:87:b0:47:79:cd:
c4:c7:5e:c6:fc:17:e3:71:10:08:34:67:df:24:00:
a3:ee:ad:60:93:5a:57:76:fe:95:9a:a6:50:3b:bb:
34:0c:c7:21:ca:94:31:c7:b7:4c:d1:38:e3:76:c8:
b8:4f:6a:96:8a:a7:c1:be:01:4b:9e:1f:08:27:50:
28:c2:01:0c:9a:00:c2:0e:ac:aa:5b:f8:8c:4e:82:
e3:38:ed:06:d6:4a:48:eb:59:40:db:71:29:27:8e:
99:b7:1c:a9:06:7f:32:27:b5:19:ea:c0:e5:f8:09:
99:32:0b:79:ce:68:5f:ae:f0:01:40:bd:cb:28:4e:
b5:a9:08:96:57:2b:24:18:f4:21:78:63:7e:66:48:
c7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BD:DA:C1:58:9C:EE:3E:FA:C5:C9:E6:C4:F3:EC:95:ED:47:86:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4cd47b3f-5824-3c97-8e7d-8c525f6d3136.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.29.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:ce:7a:59:bb:63:3f:92:61:eb:49:d0:99:6e:8d:f0:19:30:
8f:de:a4:32:bf:60:ce:6a:11:eb:07:51:13:71:45:6c:ea:67:
8c:5e:55:00:50:d9:99:e2:8d:17:92:30:86:cc:8e:81:ea:47:
44:02:60:22:61:6c:aa:67:34:e3:ba:4d:bb:5f:89:c9:c8:94:
ca:66:69:1a:31:e5:49:0c:07:20:14:0a:45:97:7a:1a:58:96:
4b:05:2b:71:49:61:da:84:24:a1:76:53:03:94:73:4f:c8:01:
95:48:dc:de:06:c7:db:c8:a8:58:32:91:70:0c:2b:9f:6a:3e:
0a:b1:9c:19:b1:4c:84:fe:13:0c:e6:5e:e2:4a:77:66:1d:26:
de:c9:75:2a:77:b9:97:82:01:75:df:d9:f1:18:e1:60:bb:22:
d4:81:43:ee:5b:0d:ab:73:4f:f1:b0:6c:bf:7d:00:2c:af:6f:
93:35:20:00:8d:ee:b5:cb:ae:ff:2f:5c:9e:ac:bd:64:c2:4f:
e3:d8:2c:b1:1b:94:3b:ac:7e:05:fe:30:b5:9f:3f:05:77:bb:
3b:78:47:02:88:4a:79:12:ef:6d:fa:f2:27:6f:25:52:d5:01:
53:cc:13:b0:a1:46:b5:58:a1:41:bc:01:ca:dd:db:2c:da:28:
ce:ad:f5:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDelTF28ZrTXehhwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
MzU5MTBkZjktNGM4MS00ZTRkLTg1NzEtMDQwYmUzYTRjNWExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNDb3fZqFXE3wE1cT0MkBfMRsWcbykkuxphg
74fj3R67tt1hnhcd2hYD/c+DjxpExlaa7xSTUbGI6ThaDbLzgywt0lfzIEcco8Ix
HsOvNTmpbUjlCjVRu6uvVKqvQCaDq5ujAcvsAcbS34jShX/+JGDYh7BHec3Ex17G
/BfjcRAINGffJACj7q1gk1pXdv6VmqZQO7s0DMchypQxx7dM0Tjjdsi4T2qWiqfB
vgFLnh8IJ1AowgEMmgDCDqyqW/iMToLjOO0G1kpI61lA23EpJ46ZtxypBn8yJ7UZ
6sDl+AmZMgt5zmhfrvABQL3LKE61qQiWVyskGPQheGN+ZkjHiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCC92sFYnO4++sXJ5sTz7JXtR4bUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNGNkNDdiM2YtNTgyNC0z
Yzk3LThlN2QtOGM1MjVmNmQzMTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGB0AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFnOelm7Yz+SYetJ0JlujfAZMI/epDK/YM5qEesHURNxRWzqZ4xeVQBQ
2ZnijReSMIbMjoHqR0QCYCJhbKpnNOO6TbtficnIlMpmaRox5UkMByAUCkWXehpY
lksFK3FJYdqEJKF2UwOUc0/IAZVI3N4Gx9vIqFgykXAMK59qPgqxnBmxTIT+Ewzm
XuJKd2YdJt7JdSp3uZeCAXXf2fEY4WC7ItSBQ+5bDatzT/GwbL99ACyvb5M1IACN
7rXLrv8vXJ6svWTCT+PYLLEblDusfgX+MLWfPwV3uzt4RwKISnkS72368idvJVLV
AVPME7ChRrVYoUG8Acrd2yzaKM6t9c8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:09:00 2025 by rpki-client