Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d9591d74-2577-3498-a9ce-6694e2f9e754.roa
File: d9591d74-2577-3498-a9ce-6694e2f9e754.roa (raw, json)
Hash identifier: hNWYDfogkGJgaufPbSMkCE45ucUREaH8Hn/jki7isJM=
Subject key identifier: 5F:0B:70:55:0A:DC:7E:40:4E:BA:A5:DF:70:9B:6A:FF:20:B8:1C:3A
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037A8FD0BD814A5373DEC980
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d9591d74-2577-3498-a9ce-6694e2f9e754.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 33363
IP address blocks: 24.227.104.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:8f:d0:bd:81:4a:53:73:de:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=2e72cef7-c940-4ac5-8bc3-67a5b82b3b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:72:01:8e:e8:e0:5e:49:44:e6:e4:a1:f9:52:
b0:ce:68:34:af:00:8a:68:63:ad:63:30:cf:a6:bc:
1e:db:5f:1d:62:89:45:ac:8a:07:0c:a6:14:cb:07:
7c:d3:72:c2:77:34:f2:17:e3:fb:f0:49:79:f5:1e:
d9:9b:85:e2:00:ca:44:0a:05:63:3d:cd:53:4a:b5:
b3:af:67:05:6e:57:fd:d6:24:8e:f8:64:fe:0e:a9:
7d:fd:79:97:5f:d8:1e:78:7b:e9:21:08:d0:38:b4:
c9:80:5b:fc:12:3e:32:80:13:32:cc:9a:00:74:6a:
cb:36:23:35:3f:d3:a8:e8:73:ea:b3:d3:95:f1:2b:
9f:9a:30:5d:25:38:0a:54:74:9d:86:9a:94:39:b3:
9c:83:91:00:b8:c9:41:7c:2d:61:bd:ce:36:4b:bc:
41:74:aa:aa:72:a2:6d:58:e9:b1:1f:f9:5f:77:45:
41:ba:af:da:78:51:ce:40:7a:dc:98:7a:97:98:d3:
20:45:19:ce:a0:cb:6f:36:b1:3c:f2:20:24:9d:f1:
a2:dd:dc:99:64:73:88:3d:59:6e:18:7a:e5:73:bf:
96:6c:38:cd:2c:3f:51:14:fc:9b:0f:01:0d:28:4d:
4c:b7:3c:76:5f:df:5f:6c:9d:6c:63:7d:8e:8e:96:
1d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0B:70:55:0A:DC:7E:40:4E:BA:A5:DF:70:9B:6A:FF:20:B8:1C:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d9591d74-2577-3498-a9ce-6694e2f9e754.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.227.104.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:c4:75:65:37:d4:c7:c1:a4:bc:35:e7:e2:6d:80:5d:50:96:
a8:4c:9b:9f:0b:d8:37:d8:ac:26:46:8d:52:07:b5:10:35:aa:
c8:c3:a5:39:43:55:9b:b0:c7:30:94:bc:69:d9:e5:84:ee:ae:
05:69:ab:93:17:52:ec:e0:75:f5:f8:3b:45:c7:69:88:c9:10:
86:f8:e6:51:3e:3b:6b:6c:4f:28:3a:95:3e:a5:5c:47:a7:78:
75:de:82:fc:45:8e:9e:aa:43:21:94:16:63:55:fc:15:32:72:
cd:f5:14:e7:9b:01:fc:b3:cb:fd:0e:dc:61:60:ca:32:d1:be:
1f:64:11:92:7f:d8:07:de:6c:90:2d:6c:35:b7:0f:7c:22:4e:
4f:e0:bf:c6:5c:77:67:79:0a:13:c3:4b:39:cc:d6:c6:1a:db:
e3:7c:0f:db:7f:4b:24:41:8f:57:2a:d8:96:57:8c:9e:05:41:
86:09:58:be:31:dd:8a:91:a3:0b:d6:94:dd:3a:cb:06:0e:7d:
fd:b5:4b:e2:fb:f0:a6:90:8e:8f:26:cf:06:5c:97:d2:16:6c:
db:39:45:b6:f4:36:2e:47:a9:d8:1d:f9:b9:c9:a1:e0:2c:f7:
4c:47:0f:62:07:6c:81:0f:35:a6:ef:ce:fd:13:ec:9c:65:8d:
e8:e1:d9:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDeo/QvYFKU3PeyYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
MmU3MmNlZjctYzk0MC00YWM1LThiYzMtNjdhNWI4MmIzYjQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHIBjujgXklE5uSh+VKwzmg0rwCKaGOtYzDP
prwe218dYolFrIoHDKYUywd803LCdzTyF+P78El59R7Zm4XiAMpECgVjPc1TSrWz
r2cFblf91iSO+GT+Dql9/XmXX9geeHvpIQjQOLTJgFv8Ej4ygBMyzJoAdGrLNiM1
P9Oo6HPqs9OV8SufmjBdJTgKVHSdhpqUObOcg5EAuMlBfC1hvc42S7xBdKqqcqJt
WOmxH/lfd0VBuq/aeFHOQHrcmHqXmNMgRRnOoMtvNrE88iAknfGi3dyZZHOIPVlu
GHrlc7+WbDjNLD9RFPybDwENKE1Mtzx2X99fbJ1sY32OjpYdiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF8LcFUK3H5ATrql33Cbav8guBw6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZDk1OTFkNzQtMjU3Ny0z
NDk4LWE5Y2UtNjY5NGUyZjllNzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGONoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHfEdWU31MfBpLw15+JtgF1QlqhMm58L2DfYrCZGjVIHtRA1qsjDpTlD
VZuwxzCUvGnZ5YTurgVpq5MXUuzgdfX4O0XHaYjJEIb45lE+O2tsTyg6lT6lXEen
eHXegvxFjp6qQyGUFmNV/BUycs31FOebAfyzy/0O3GFgyjLRvh9kEZJ/2AfebJAt
bDW3D3wiTk/gv8Zcd2d5ChPDSznM1sYa2+N8D9t/SyRBj1cq2JZXjJ4FQYYJWL4x
3YqRowvWlN06ywYOff21S+L78KaQjo8mzwZcl9IWbNs5Rbb0Ni5Hqdgd+bnJoeAs
90xHD2IHbIEPNabvzv0T7Jxljejh2Wc=
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:51:18 2025 by rpki-client