
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a4ffbafa-c1a2-3835-a1ac-4155779b6b1a.roa
File: a4ffbafa-c1a2-3835-a1ac-4155779b6b1a.roa (raw, json)
Hash identifier: N9EUsdjII4iDgykhZGQoh8NXXD4Vgonnz0efq5KzDb8=
Subject key identifier: 36:40:12:AD:E2:2D:8C:DB:4D:1C:01:23:3F:39:21:CE:74:43:9E:A3
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A8073383F9029F4047CA0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a4ffbafa-c1a2-3835-a1ac-4155779b6b1a.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 17388
IP address blocks: 72.45.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:80:73:38:3f:90:29:f4:04:7c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=862387b0-a1c7-4bea-9c60-11760f8f570c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a1:d4:14:2b:7d:76:cd:c8:6a:ee:9d:1f:2b:
5b:3f:12:0c:90:e4:e5:90:3f:1c:57:96:95:aa:fa:
38:c6:3a:31:36:53:68:23:16:a2:85:10:2c:7d:cd:
e9:f6:98:a7:3e:58:18:7f:6a:93:23:c2:dc:a6:68:
14:04:98:f1:3b:72:e8:48:ab:47:0a:5d:3a:44:00:
04:20:a4:2e:2a:51:98:c5:f1:c5:19:ed:f7:e7:4c:
cf:92:c8:c5:e6:55:f7:09:42:45:d5:a7:d1:b0:32:
05:23:11:d7:0f:3d:67:4c:0c:28:8a:e6:f1:64:6b:
20:28:a0:50:0a:45:fe:09:6c:60:20:db:a8:ac:4b:
a5:6e:17:40:09:3b:2e:82:4d:8d:55:e0:78:15:31:
b1:fc:d9:2c:35:e5:1b:c3:be:f8:97:8c:d5:6b:e0:
95:e0:f5:e6:80:5a:b2:14:99:0f:ec:cd:f9:81:69:
52:fe:ba:4f:12:3a:b9:db:06:d2:fa:ae:f9:fd:6f:
2f:2e:70:5c:72:0b:a5:5e:09:d4:d0:9b:2a:8d:f2:
cc:6e:a3:ac:56:c4:33:bc:9f:45:95:51:12:29:c1:
69:df:1a:fe:42:91:64:2a:35:c0:ad:7d:cc:fc:84:
1d:8d:fd:06:b0:10:ba:53:a2:4c:ce:22:eb:a6:59:
12:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:40:12:AD:E2:2D:8C:DB:4D:1C:01:23:3F:39:21:CE:74:43:9E:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a4ffbafa-c1a2-3835-a1ac-4155779b6b1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.45.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:a6:1b:2c:eb:60:3d:f0:89:2c:01:54:c7:d2:c3:ca:79:d0:
fc:92:cd:ad:c7:39:f1:60:e8:12:69:27:22:f3:87:a7:75:0f:
90:ac:68:10:70:a2:b9:39:0a:f7:b2:7a:a7:40:9d:9b:e2:3a:
0b:05:c7:ad:ba:76:fe:80:ca:c7:0b:4f:e2:e4:6c:a6:72:82:
ce:e7:2a:80:35:18:4d:0b:71:7d:8b:07:74:46:c1:eb:e6:9c:
8b:f8:ce:bc:5c:b2:85:88:c0:6b:e0:93:d5:6f:33:db:53:70:
d2:5d:a0:ba:d9:a9:14:a5:30:73:37:c7:19:8a:ef:9a:3f:ac:
c5:80:fa:ba:d2:0d:ee:88:4e:b5:7c:e8:ef:ad:bf:03:ad:1f:
08:d8:66:d5:81:e9:00:a1:b3:84:75:ea:89:b4:ba:aa:9d:8e:
c9:88:21:93:33:ae:b7:45:fe:67:d2:ba:d6:61:31:3d:1b:e5:
b3:6e:1c:e9:2a:58:a5:d4:c7:8d:e5:e3:2f:13:56:24:40:81:
7b:73:3a:db:d7:b8:e2:6d:dc:3d:4a:0f:a6:ec:27:a1:8a:5e:
0b:7e:63:77:ff:b6:03:13:42:ad:bb:07:76:08:bd:5c:e7:16:
5e:3c:e0:0a:a5:42:ce:9a:4b:2b:3e:f9:82:b5:65:77:37:64:
33:f4:e6:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDeoBzOD+QKfQEfKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
ODYyMzg3YjAtYTFjNy00YmVhLTljNjAtMTE3NjBmOGY1NzBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKHUFCt9ds3Iau6dHytbPxIMkOTlkD8cV5aV
qvo4xjoxNlNoIxaihRAsfc3p9pinPlgYf2qTI8LcpmgUBJjxO3LoSKtHCl06RAAE
IKQuKlGYxfHFGe3350zPksjF5lX3CUJF1afRsDIFIxHXDz1nTAwoiubxZGsgKKBQ
CkX+CWxgINuorEulbhdACTsugk2NVeB4FTGx/NksNeUbw774l4zVa+CV4PXmgFqy
FJkP7M35gWlS/rpPEjq52wbS+q75/W8vLnBccgulXgnU0JsqjfLMbqOsVsQzvJ9F
lVESKcFp3xr+QpFkKjXArX3M/IQdjf0GsBC6U6JMziLrplkSPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDZAEq3iLYzbTRwBIz85Ic50Q56jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYTRmZmJhZmEtYzFhMi0z
ODM1LWExYWMtNDE1NTc3OWI2YjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASC3bMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG2mGyzrYD3wiSwBVMfSw8p50PySza3HOfFg6BJpJyLzh6d1D5CsaBBw
ork5CveyeqdAnZviOgsFx626dv6AyscLT+LkbKZygs7nKoA1GE0LcX2LB3RGwevm
nIv4zrxcsoWIwGvgk9VvM9tTcNJdoLrZqRSlMHM3xxmK75o/rMWA+rrSDe6ITrV8
6O+tvwOtHwjYZtWB6QChs4R16om0uqqdjsmIIZMzrrdF/mfSutZhMT0b5bNuHOkq
WKXUx43l4y8TViRAgXtzOtvXuOJt3D1KD6bsJ6GKXgt+Y3f/tgMTQq27B3YIvVzn
Fl484AqlQs6aSys++YK1ZXc3ZDP05qY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:13:44 2025 by rpki-client