Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/928b4d83-0d4a-3a26-ba51-ae126ca7f36f.roa
File: 928b4d83-0d4a-3a26-ba51-ae126ca7f36f.roa (raw, json)
Hash identifier: DnUqVn6FZJrwWT1WgkpTZXxfKG77i+VCNMfPaZNWOiE=
Subject key identifier: 8A:AE:20:78:55:D9:55:E2:F5:5A:02:87:A9:53:00:98:FE:9A:CB:2F
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A6B8E596572E73125A380
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/928b4d83-0d4a-3a26-ba51-ae126ca7f36f.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 11351
IP address blocks: 68.172.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:6b:8e:59:65:72:e7:31:25:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=61b9cd9a-2e9c-4f29-88fc-783adf5f81a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:ec:1a:58:d8:2f:de:e2:db:09:2f:ec:34:
53:23:f5:a4:12:53:a2:8f:8e:41:54:98:52:e2:3b:
e6:a5:de:52:94:7a:5f:b5:a7:65:96:ef:b7:2e:80:
aa:cd:82:42:d0:42:97:20:ce:c9:f1:f5:16:0a:54:
11:9c:66:9d:aa:34:87:fe:5f:ad:35:a2:76:f3:3d:
56:8e:95:ad:9d:11:67:91:59:58:03:58:46:1e:47:
e9:74:20:27:4e:e1:44:7e:1c:3d:37:25:6d:46:ec:
97:12:96:34:31:5a:6b:8d:eb:58:36:45:de:a3:fe:
d4:84:2c:dc:72:0b:7a:be:80:82:5f:87:5b:b1:13:
3f:23:38:73:3b:6b:7c:a2:16:a9:82:e0:e7:bb:c7:
2f:50:79:95:7b:b2:e2:c0:cd:3f:36:e4:74:31:15:
2b:75:9e:1a:7e:44:77:31:44:d2:38:2f:f5:a7:af:
d7:bf:8a:c2:7f:a5:a1:ff:65:37:94:6e:58:b4:ae:
72:55:bf:7b:f2:fa:7c:06:42:9f:fc:c9:9f:cb:46:
2a:d9:70:75:02:79:a8:14:05:0d:86:ae:f4:12:ba:
c2:59:72:ca:00:b6:c6:1a:32:a7:21:0f:02:5f:a7:
68:dd:af:75:51:99:13:82:00:d8:ce:f5:cc:23:8d:
90:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AE:20:78:55:D9:55:E2:F5:5A:02:87:A9:53:00:98:FE:9A:CB:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/928b4d83-0d4a-3a26-ba51-ae126ca7f36f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
68.172.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:b1:bc:71:bc:81:2b:3e:a3:0a:cb:2b:1c:19:2f:46:98:8b:
15:19:9d:b1:c6:8a:2d:2e:42:b9:eb:f8:53:34:18:9b:cb:1b:
24:a4:9d:b5:03:40:59:87:0a:f8:28:80:c5:39:3e:86:d8:1f:
13:47:4d:de:f9:a9:c2:dd:df:55:85:a9:02:bf:99:ba:fc:6b:
5a:fc:20:3c:48:3a:8e:13:11:8f:c2:15:7e:ff:c5:80:87:8e:
ce:c3:bf:d2:75:78:f0:11:44:57:29:60:87:82:f2:77:b0:4c:
34:0e:6d:70:6a:ad:a4:da:81:fe:f7:4e:d1:05:28:6f:9f:a6:
e2:66:a3:c2:a8:61:9d:fe:38:99:93:dc:8a:66:b1:18:c9:c0:
f8:a2:19:9d:34:2c:37:30:c5:e3:bb:13:b5:29:bf:2d:4f:59:
3c:fd:46:a1:3c:52:6f:32:cd:3c:1d:e8:be:20:7d:53:08:b8:
38:f3:52:e3:a6:37:f9:b6:94:f8:ef:3d:4c:d0:fd:06:40:26:
0a:80:bd:8e:d6:d0:c7:3d:01:f4:3c:e0:d8:b9:8f:3a:89:f9:
92:ca:07:c3:37:17:b4:b8:3c:62:21:a7:33:bb:3f:24:65:4c:
30:af:0f:d2:86:9d:83:f1:cf:53:39:d0:45:7b:dd:77:d3:0d:
64:ca:f1:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDemuOWWVy5zElo4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
NjFiOWNkOWEtMmU5Yy00ZjI5LTg4ZmMtNzgzYWRmNWY4MWE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlHsGljYL97i2wkv7DRTI/WkElOij45BVJhS
4jvmpd5SlHpftadllu+3LoCqzYJC0EKXIM7J8fUWClQRnGadqjSH/l+tNaJ28z1W
jpWtnRFnkVlYA1hGHkfpdCAnTuFEfhw9NyVtRuyXEpY0MVprjetYNkXeo/7UhCzc
cgt6voCCX4dbsRM/IzhzO2t8ohapguDnu8cvUHmVe7LiwM0/NuR0MRUrdZ4afkR3
MUTSOC/1p6/Xv4rCf6Wh/2U3lG5YtK5yVb978vp8BkKf/Mmfy0Yq2XB1AnmoFAUN
hq70ErrCWXLKALbGGjKnIQ8CX6do3a91UZkTggDYzvXMI42QBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIquIHhV2VXi9VoCh6lTAJj+mssvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvOTI4YjRkODMtMGQ0YS0z
YTI2LWJhNTEtYWUxMjZjYTdmMzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERKzAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFmxvHG8gSs+owrLKxwZL0aYixUZnbHGii0uQrnr+FM0GJvLGySknbUD
QFmHCvgogMU5PobYHxNHTd75qcLd31WFqQK/mbr8a1r8IDxIOo4TEY/CFX7/xYCH
js7Dv9J1ePARRFcpYIeC8newTDQObXBqraTagf73TtEFKG+fpuJmo8KoYZ3+OJmT
3IpmsRjJwPiiGZ00LDcwxeO7E7Upvy1PWTz9RqE8Um8yzTwd6L4gfVMIuDjzUuOm
N/m2lPjvPUzQ/QZAJgqAvY7W0Mc9AfQ84Ni5jzqJ+ZLKB8M3F7S4PGIhpzO7PyRl
TDCvD9KGnYPxz1M50EV73XfTDWTK8Uo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 15:25:02 2025 by rpki-client