Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a5633246-37b3-325c-aa07-f107344e9e50.roa
File: a5633246-37b3-325c-aa07-f107344e9e50.roa (raw, json)
Hash identifier: yHoVQ8thyLRMYAyuknhniU6yWiqLht8kAQ/8MRaTQ2Y=
Subject key identifier: C8:A6:FF:CC:08:57:D2:8E:C3:5B:0C:BC:F3:2E:EA:51:3D:48:F4:03
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037B0489E44D4B439BB5B480
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a5633246-37b3-325c-aa07-f107344e9e50.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 11955
IP address blocks: 70.94.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:04:89:e4:4d:4b:43:9b:b5:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=a7c3c828-3ace-402b-9151-ef61d5eebedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a3:8f:34:11:77:e8:ce:59:0f:77:34:e6:2d:
18:b5:2d:83:ea:77:05:c4:06:26:ef:a0:c7:04:17:
e6:9a:50:ef:42:8c:82:ce:30:77:c1:90:4d:20:3a:
36:d8:ac:f3:e4:02:db:c6:fe:63:31:2f:e4:52:da:
39:0b:59:a0:8a:81:e3:ae:c1:d3:b7:b4:d0:40:bd:
2f:46:79:75:76:c7:2c:2e:d5:eb:83:76:cf:3a:4b:
d3:94:8a:49:fc:ec:36:fe:98:94:c8:f2:f0:7e:37:
aa:d4:e1:78:f4:9b:44:0b:f1:c1:12:f2:d4:09:2c:
f8:1b:39:f4:41:f0:18:cb:77:6d:11:ad:e4:bc:8e:
d1:4d:6b:f0:24:f3:19:47:5f:46:42:6f:ca:f2:f0:
d8:5b:4e:51:7b:9d:d7:84:6d:ef:0d:31:a1:63:4e:
44:25:15:6a:d2:35:ca:d0:3b:20:87:b7:4e:04:72:
7e:3d:68:c5:79:8f:72:c0:c7:46:0e:4c:31:69:04:
f1:e8:45:42:1e:6c:c7:5b:ab:26:61:7e:3c:92:a7:
60:a5:e0:9d:36:01:8f:2a:15:88:25:bf:7a:9a:5a:
95:eb:e4:34:ab:27:ec:b3:3f:97:cd:ab:42:d0:54:
ad:cc:99:35:d2:81:fe:c8:5c:39:01:b0:2e:80:dd:
2a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A6:FF:CC:08:57:D2:8E:C3:5B:0C:BC:F3:2E:EA:51:3D:48:F4:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a5633246-37b3-325c-aa07-f107344e9e50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
70.94.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:8d:fd:b9:40:fa:e6:b4:4c:c9:dd:90:49:2e:0c:41:31:cc:
be:e3:75:2a:46:51:ab:a2:09:fb:0d:3d:ed:52:ea:d9:71:5c:
1f:08:10:22:b4:0d:ac:67:97:33:53:44:a7:78:fb:f8:67:8a:
81:a0:e6:ea:70:b5:6e:b1:e3:a6:fb:fb:27:0f:09:03:d1:7b:
fa:85:c4:57:92:1c:d4:db:ca:21:d3:5c:64:3c:d7:06:1c:6e:
86:5d:d9:1d:67:cb:1f:3c:67:da:ff:e9:1a:47:38:38:bb:4b:
13:d1:e4:d7:23:96:cf:d0:80:98:a6:41:3a:cd:23:65:0d:27:
d3:d7:6f:ff:84:08:28:f9:33:7f:b6:52:c5:6b:78:6f:92:76:
d0:8b:28:ef:4d:c5:3e:3f:20:f1:13:1f:83:74:9e:9a:5a:e0:
b4:d8:fe:cd:50:98:00:c0:09:9a:af:bb:b5:00:0b:22:58:08:
70:e1:37:2b:99:57:88:db:ef:d2:f9:24:90:c4:73:52:81:a4:
c3:7d:21:4d:62:be:b7:6d:67:e6:ad:da:39:fe:23:ee:34:a7:
e2:af:05:70:3f:a9:17:21:90:59:a8:b8:24:82:99:11:a2:75:
fd:0c:fb:d7:90:56:c3:46:19:1f:67:7a:76:e3:0d:eb:fe:42:
87:49:e9:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDewSJ5E1LQ5u1tIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
YTdjM2M4MjgtM2FjZS00MDJiLTkxNTEtZWY2MWQ1ZWViZWRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKOPNBF36M5ZD3c05i0YtS2D6ncFxAYm76DH
BBfmmlDvQoyCzjB3wZBNIDo22Kzz5ALbxv5jMS/kUto5C1mgioHjrsHTt7TQQL0v
Rnl1dscsLtXrg3bPOkvTlIpJ/Ow2/piUyPLwfjeq1OF49JtEC/HBEvLUCSz4Gzn0
QfAYy3dtEa3kvI7RTWvwJPMZR19GQm/K8vDYW05Re53XhG3vDTGhY05EJRVq0jXK
0Dsgh7dOBHJ+PWjFeY9ywMdGDkwxaQTx6EVCHmzHW6smYX48kqdgpeCdNgGPKhWI
Jb96mlqV6+Q0qyfssz+XzatC0FStzJk10oH+yFw5AbAugN0qNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMim/8wIV9KOw1sMvPMu6lE9SPQDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYTU2MzMyNDYtMzdiMy0z
MjVjLWFhMDctZjEwNzM0NGU5ZTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERl7gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACqN/blA+ua0TMndkEkuDEExzL7jdSpGUauiCfsNPe1S6tlxXB8IECK0
DaxnlzNTRKd4+/hnioGg5upwtW6x46b7+ycPCQPRe/qFxFeSHNTbyiHTXGQ81wYc
boZd2R1nyx88Z9r/6RpHODi7SxPR5Ncjls/QgJimQTrNI2UNJ9PXb/+ECCj5M3+2
UsVreG+SdtCLKO9NxT4/IPETH4N0nppa4LTY/s1QmADACZqvu7UACyJYCHDhNyuZ
V4jb79L5JJDEc1KBpMN9IU1ivrdtZ+at2jn+I+40p+KvBXA/qRchkFmouCSCmRGi
df0M+9eQVsNGGR9nenbjDev+QodJ6bs=
-----END CERTIFICATE-----
Generated at Fri Apr 25 15:23:02 2025 by rpki-client