Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/655b095c-27e5-3274-8c11-ef9ecd15c11e.roa
File: 655b095c-27e5-3274-8c11-ef9ecd15c11e.roa (raw, json)
Hash identifier: DbIV3zSTmuhJhBUPEIW7o1T7TcDx6L6d4cb96QYO1tI=
Subject key identifier: EB:AE:B0:4D:39:74:AC:6E:AE:F2:C7:B5:C9:D3:AB:89:DB:E3:B1:6E
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A52B439B2209E4716DD80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/655b095c-27e5-3274-8c11-ef9ecd15c11e.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 7843
IP address blocks: 24.143.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:52:b4:39:b2:20:9e:47:16:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=2aed719a-d776-4c21-984a-7107df8cfc85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:92:d9:e1:2b:7a:ea:07:7c:d9:95:dd:a3:04:
8e:ab:68:f0:1a:87:f8:c6:7c:b9:57:52:4a:d1:fc:
2c:0c:92:8d:02:05:b7:cf:b9:eb:f1:f5:33:85:a5:
43:b2:59:a5:04:ce:63:62:42:aa:97:39:e0:2b:58:
b4:67:c2:a3:7d:25:60:9d:d6:8f:57:4c:d7:44:ee:
37:a8:09:a7:1b:6f:17:c9:71:87:fe:76:af:0d:17:
39:c2:70:59:e5:e9:f7:f3:b6:76:44:1c:62:87:98:
08:9a:9e:60:c2:de:73:43:86:8a:44:27:2f:b5:fb:
78:2c:a4:cb:35:3b:eb:d6:dd:2c:15:48:39:05:07:
2f:ec:5f:ff:ce:00:30:63:8d:1f:bd:b8:07:e6:29:
59:a6:38:2b:f3:6a:7c:93:a2:af:ee:1c:d7:85:7a:
cd:6b:42:69:e2:04:45:18:46:b4:6f:ff:e8:ec:09:
81:85:d8:a0:c5:24:09:c4:00:c7:4e:70:52:65:ac:
1f:bb:c9:c9:63:5c:a1:79:ec:0e:8f:af:2b:35:b1:
c6:b1:03:6c:0f:c3:0e:a8:89:a3:fb:ec:5d:59:02:
bc:c5:31:e7:a6:2a:3e:13:af:9e:5c:a0:4e:73:7e:
0d:33:64:a5:bc:cf:38:91:76:1b:d5:97:29:44:89:
7b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AE:B0:4D:39:74:AC:6E:AE:F2:C7:B5:C9:D3:AB:89:DB:E3:B1:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/655b095c-27e5-3274-8c11-ef9ecd15c11e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.143.193.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:bd:61:4c:28:00:b5:44:ca:c9:c0:bc:d7:97:29:ab:6d:e4:
a1:a3:43:4e:6e:f6:a1:0c:d3:2f:1f:f9:75:07:73:6e:82:2b:
6a:51:b6:39:ae:53:74:4d:45:2f:b2:48:2a:a6:ee:38:9f:03:
7d:01:d0:13:a1:a9:f7:b1:9d:1e:fd:3f:36:fc:a9:42:db:cf:
a3:20:a7:c6:a6:92:31:84:8d:89:49:6e:4c:64:ad:db:a2:84:
33:6e:bd:3b:64:2c:36:37:cc:e2:6e:e5:14:17:b0:59:9d:21:
ef:49:77:cc:ad:cc:49:95:4e:b5:0e:35:ae:a5:7a:46:6a:93:
45:3e:3f:c5:ac:0c:b6:ea:4d:d0:20:47:9d:24:d2:91:15:1c:
8f:38:17:8c:c5:d6:30:9f:29:4d:84:0d:1a:9b:3f:e4:8b:61:
c5:08:4e:11:46:2f:b1:72:27:f3:a4:a1:7d:4f:cf:12:86:01:
44:91:ec:6e:bd:6b:89:6e:50:03:21:4f:bc:c2:8c:a0:97:61:
8c:fe:18:93:d9:1a:21:6f:76:54:25:71:df:cd:aa:87:8b:e8:
39:ed:01:5a:8c:26:bf:3d:ac:d1:e1:60:26:e3:2c:9f:95:c6:
85:c5:1c:6a:19:e9:b1:d6:51:9f:d5:e8:76:ba:b1:e8:31:a0:
58:7d:b7:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDelK0ObIgnkcW3YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
MmFlZDcxOWEtZDc3Ni00YzIxLTk4NGEtNzEwN2RmOGNmYzg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpLZ4St66gd82ZXdowSOq2jwGof4xny5V1JK
0fwsDJKNAgW3z7nr8fUzhaVDslmlBM5jYkKqlzngK1i0Z8KjfSVgndaPV0zXRO43
qAmnG28XyXGH/navDRc5wnBZ5en387Z2RBxih5gImp5gwt5zQ4aKRCcvtft4LKTL
NTvr1t0sFUg5BQcv7F//zgAwY40fvbgH5ilZpjgr82p8k6Kv7hzXhXrNa0Jp4gRF
GEa0b//o7AmBhdigxSQJxADHTnBSZawfu8nJY1yheewOj68rNbHGsQNsD8MOqImj
++xdWQK8xTHnpio+E6+eXKBOc34NM2SlvM84kXYb1ZcpRIl7EwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOuusE05dKxurvLHtcnTq4nb47FuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNjU1YjA5NWMtMjdlNS0z
Mjc0LThjMTEtZWY5ZWNkMTVjMTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGI/BMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEO9YUwoALVEysnAvNeXKatt5KGjQ05u9qEM0y8f+XUHc26CK2pRtjmu
U3RNRS+ySCqm7jifA30B0BOhqfexnR79Pzb8qULbz6Mgp8amkjGEjYlJbkxkrdui
hDNuvTtkLDY3zOJu5RQXsFmdIe9Jd8ytzEmVTrUONa6lekZqk0U+P8WsDLbqTdAg
R50k0pEVHI84F4zF1jCfKU2EDRqbP+SLYcUIThFGL7FyJ/OkoX1PzxKGAUSR7G69
a4luUAMhT7zCjKCXYYz+GJPZGiFvdlQlcd/NqoeL6DntAVqMJr89rNHhYCbjLJ+V
xoXFHGoZ6bHWUZ/V6Ha6segxoFh9t3Q=
-----END CERTIFICATE-----
Generated at Fri Apr 25 15:29:05 2025 by rpki-client