Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/77207c47-7a7d-36ef-996b-4acf78f40caa.roa
File: 77207c47-7a7d-36ef-996b-4acf78f40caa.roa (raw, json)
Hash identifier: RnVBssnXkK1qx86i4msJ3/XeJRZP+j5cmNVH2eQjUVo=
Subject key identifier: DD:A5:5E:1C:14:7F:57:EA:5D:2F:07:2D:F3:E1:E1:AA:ED:7B:58:3A
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A81858E91FCC45FC63B00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/77207c47-7a7d-36ef-996b-4acf78f40caa.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20001
IP address blocks: 104.172.0.0/14 maxlen: 14
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:81:85:8e:91:fc:c4:5f:c6:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=4c275a33-72b8-45fa-bf6f-c42fb7950ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c5:cc:4f:3f:43:68:8f:c8:1e:c5:66:99:42:
80:4e:67:96:bd:98:ea:94:80:dd:03:19:50:bf:87:
67:fc:a3:d4:35:62:09:fc:2c:39:93:56:44:b6:4b:
54:d4:09:42:91:4c:52:47:df:76:75:7e:83:48:ae:
f3:90:3c:4b:c9:61:c9:17:5b:4c:c9:6a:a7:64:f5:
2a:6d:c5:53:4d:37:52:41:68:d0:c0:06:17:de:b2:
02:dc:d4:84:82:a0:32:53:0d:16:de:0c:52:c3:16:
00:19:5f:64:f3:84:9a:fc:a3:fb:cd:4a:48:74:7d:
bf:ae:15:07:19:92:89:29:3f:1a:3b:20:07:bc:eb:
3e:f8:1e:7b:b6:6e:54:92:30:ff:b2:f6:6b:89:a0:
53:e4:52:aa:5a:a9:bf:8d:a9:b6:7e:f1:27:f0:18:
df:f5:eb:84:8c:14:82:4a:af:63:d7:1f:03:35:e4:
d5:04:b7:b6:e2:ec:ba:57:c9:35:02:18:a1:78:9d:
5f:fc:d9:33:1c:54:9f:0a:e6:6c:a5:d2:3f:0b:a1:
66:ec:75:0b:7f:43:55:e1:12:f3:17:f8:3a:2d:8a:
67:6a:91:9f:76:a8:66:f8:b1:59:33:a8:d7:9c:83:
fe:35:df:2b:2e:be:92:0d:43:db:f6:eb:19:17:20:
d8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A5:5E:1C:14:7F:57:EA:5D:2F:07:2D:F3:E1:E1:AA:ED:7B:58:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/77207c47-7a7d-36ef-996b-4acf78f40caa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
104.172.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:43:12:86:41:16:e4:2d:fa:de:de:e6:73:84:61:1e:d3:55:
80:f8:a0:9f:4a:c8:d6:75:a5:31:de:dd:f5:b1:6f:16:16:78:
16:48:7e:dc:db:1c:6e:2b:35:37:8b:b3:4f:49:ff:80:3b:7f:
ff:06:79:84:4b:46:be:ef:ed:14:68:9c:fe:a9:73:88:66:89:
cf:39:b1:cc:a9:61:2b:a5:c0:e0:09:5e:5a:4f:d0:f7:24:79:
3d:4c:92:a5:5c:ec:9d:a9:7c:0a:1b:31:ba:7d:bb:2c:ea:dd:
3f:6c:f7:d4:68:57:42:c6:cc:7b:ab:ae:87:29:90:07:57:22:
aa:7e:0f:f3:de:42:66:d3:9c:43:f8:9c:b4:6b:ed:4d:f7:70:
f5:c7:fb:6b:66:d9:7e:c1:e0:ca:26:ff:3c:a6:2d:c7:11:8d:
30:12:9a:4e:ef:11:6b:fd:4b:de:5c:da:7c:4c:7d:83:e3:52:
a0:56:69:82:63:48:e1:cb:26:01:b0:93:2a:5f:24:5c:46:c7:
f2:27:82:87:74:2d:91:22:f3:fb:25:ad:4a:23:62:c9:7b:04:
fe:d4:07:68:43:ec:95:f0:5e:79:7e:44:16:3c:f1:d4:c3:72:
6b:66:8f:e2:be:c0:fc:6e:30:c5:04:da:fc:dc:54:38:22:64:
16:ba:04:b8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgDeoGFjpH8xF/GOwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
NGMyNzVhMzMtNzJiOC00NWZhLWJmNmYtYzQyZmI3OTUwY2U5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8XMTz9DaI/IHsVmmUKATmeWvZjqlIDdAxlQ
v4dn/KPUNWIJ/Cw5k1ZEtktU1AlCkUxSR992dX6DSK7zkDxLyWHJF1tMyWqnZPUq
bcVTTTdSQWjQwAYX3rIC3NSEgqAyUw0W3gxSwxYAGV9k84Sa/KP7zUpIdH2/rhUH
GZKJKT8aOyAHvOs++B57tm5UkjD/svZriaBT5FKqWqm/jam2fvEn8Bjf9euEjBSC
Sq9j1x8DNeTVBLe24uy6V8k1AhiheJ1f/NkzHFSfCuZspdI/C6Fm7HULf0NV4RLz
F/g6LYpnapGfdqhm+LFZM6jXnIP+Nd8rLr6SDUPb9usZFyDYtwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFN2lXhwUf1fqXS8HLfPh4arte1g6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNzcyMDdjNDctN2E3ZC0z
NmVmLTk5NmItNGFjZjc4ZjQwY2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCaKwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAGEMShkEW5C363t7mc4RhHtNVgPign0rI1nWlMd7d9bFvFhZ4Fkh+3Nsc
bis1N4uzT0n/gDt//wZ5hEtGvu/tFGic/qlziGaJzzmxzKlhK6XA4AleWk/Q9yR5
PUySpVzsnal8Chsxun27LOrdP2z31GhXQsbMe6uuhymQB1ciqn4P895CZtOcQ/ic
tGvtTfdw9cf7a2bZfsHgyib/PKYtxxGNMBKaTu8Ra/1L3lzafEx9g+NSoFZpgmNI
4csmAbCTKl8kXEbH8ieCh3QtkSLz+yWtSiNiyXsE/tQHaEPslfBeeX5EFjzx1MNy
a2aP4r7A/G4wxQTa/NxUOCJkFroEuA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 15:10:18 2025 by rpki-client