Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b128ef30-650d-3b8e-8940-d6e3ada8e633.roa
File: b128ef30-650d-3b8e-8940-d6e3ada8e633.roa (raw, json)
Hash identifier: ewzGIkBlly6/ZfxQDEap2rheGeuTSMMLzD9EE6MtGYE=
Subject key identifier: 8E:EB:BA:8E:EC:8A:04:4B:6A:04:B3:21:57:00:F8:6B:D1:4E:2A:15
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037B0BC38C7EC0FB8B7CED80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b128ef30-650d-3b8e-8940-d6e3ada8e633.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20001
IP address blocks: 65.185.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:0b:c3:8c:7e:c0:fb:8b:7c:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=e4b950dd-de8e-4c0e-8bc1-c048d28cab40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:59:56:36:fb:42:ac:6a:0f:aa:9a:2e:e3:34:
5e:8b:f0:8f:85:cc:87:ac:ae:d9:bb:8d:ae:7d:14:
20:6e:e3:e0:95:b6:cf:2e:b8:3b:1d:31:42:e8:1c:
b0:e4:68:c9:6f:46:53:7d:62:89:1d:38:b5:7f:17:
78:85:43:68:76:89:b0:1c:1b:15:9c:3b:a4:2a:19:
c0:24:d7:5c:65:ec:2a:98:3b:8d:0c:d3:37:80:2e:
f6:b9:49:e3:d6:ac:30:00:7c:02:0d:d3:49:47:4b:
f8:ab:04:09:d5:47:fe:7b:a1:16:e8:3b:5f:09:e4:
da:d1:ad:7f:38:46:55:f6:b1:30:87:c1:78:af:87:
d7:ed:74:c8:a7:2d:c8:f1:69:2a:5a:9e:f0:17:71:
35:23:2f:18:b3:7c:71:5b:3f:07:29:85:f9:ef:c7:
aa:d3:8d:64:1c:d2:8c:f7:bb:0e:dd:1d:45:ee:6a:
73:cd:aa:9e:af:c0:83:b1:2b:05:42:97:3d:41:b4:
2b:e1:16:75:d7:e3:3f:4a:82:25:19:c9:bf:e1:7d:
24:7f:c6:3c:35:c0:39:a1:a0:7c:a4:58:15:02:fb:
6f:0d:58:c1:54:dc:9a:4f:b1:e2:03:80:2f:00:f8:
1d:af:49:9d:ba:2f:d5:ff:59:44:b3:99:bd:96:e8:
d6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EB:BA:8E:EC:8A:04:4B:6A:04:B3:21:57:00:F8:6B:D1:4E:2A:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b128ef30-650d-3b8e-8940-d6e3ada8e633.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
65.185.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:d6:0b:1f:c6:f8:26:c1:1f:89:e6:13:cd:b5:52:b6:6a:83:
4b:cc:1f:4c:9a:35:bd:78:c5:92:25:12:3b:57:cf:99:e6:02:
5f:d5:45:52:a2:5f:a6:41:2f:c1:86:ee:d1:b1:0d:c1:01:d8:
21:20:ac:3d:32:2b:84:05:71:bc:c9:11:1f:d5:d8:25:d1:1d:
d1:32:3c:17:da:bb:6d:e2:33:bd:e0:d5:6b:b9:f5:ba:a0:b3:
a5:eb:3a:3d:80:d5:61:aa:53:7c:ff:61:26:25:4a:6a:53:8a:
81:1d:25:99:9f:0f:66:a1:28:b0:82:a1:96:2d:61:37:82:38:
26:e2:64:45:aa:be:3c:8e:43:3f:16:6e:1c:cb:18:e8:3b:07:
2f:36:31:5b:4f:45:e6:e2:91:73:ff:34:f4:f6:cc:3f:77:52:
e2:82:24:c8:4b:f2:54:8a:20:11:39:8b:fa:9e:f8:10:ee:9b:
e6:20:c1:b8:b5:94:33:af:97:41:8c:c6:d9:ab:45:a5:01:ad:
f9:84:52:d5:ab:6d:b7:11:31:ac:c7:f0:15:67:1b:39:9c:bc:
17:c5:63:86:53:bd:e4:81:e8:a1:09:b9:ba:fb:e1:d6:26:3b:
5c:04:c2:28:77:a1:ab:9e:cd:a3:52:51:0b:1d:70:7b:64:c9:
d4:01:4c:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDewvDjH7A+4t87YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
ZTRiOTUwZGQtZGU4ZS00YzBlLThiYzEtYzA0OGQyOGNhYjQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFlWNvtCrGoPqpou4zRei/CPhcyHrK7Zu42u
fRQgbuPglbbPLrg7HTFC6Byw5GjJb0ZTfWKJHTi1fxd4hUNodomwHBsVnDukKhnA
JNdcZewqmDuNDNM3gC72uUnj1qwwAHwCDdNJR0v4qwQJ1Uf+e6EW6DtfCeTa0a1/
OEZV9rEwh8F4r4fX7XTIpy3I8WkqWp7wF3E1Iy8Ys3xxWz8HKYX578eq041kHNKM
97sO3R1F7mpzzaqer8CDsSsFQpc9QbQr4RZ11+M/SoIlGcm/4X0kf8Y8NcA5oaB8
pFgVAvtvDVjBVNyaT7HiA4AvAPgdr0mdui/V/1lEs5m9lujWRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI7ruo7sigRLagSzIVcA+GvRTioVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYjEyOGVmMzAtNjUwZC0z
YjhlLTg5NDAtZDZlM2FkYThlNjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQbn/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH7WCx/G+CbBH4nmE821UrZqg0vMH0yaNb14xZIlEjtXz5nmAl/VRVKi
X6ZBL8GG7tGxDcEB2CEgrD0yK4QFcbzJER/V2CXRHdEyPBfau23iM73g1Wu59bqg
s6XrOj2A1WGqU3z/YSYlSmpTioEdJZmfD2ahKLCCoZYtYTeCOCbiZEWqvjyOQz8W
bhzLGOg7By82MVtPRebikXP/NPT2zD93UuKCJMhL8lSKIBE5i/qe+BDum+Ygwbi1
lDOvl0GMxtmrRaUBrfmEUtWrbbcRMazH8BVnGzmcvBfFY4ZTveSB6KEJubr74dYm
O1wEwih3oauezaNSUQsdcHtkydQBTDM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:10:42 2025 by rpki-client