Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0b7c5231-2e1c-3278-b4f6-e17dd099ab57.roa
File: 0b7c5231-2e1c-3278-b4f6-e17dd099ab57.roa (raw, json)
Hash identifier: iZkSQ30vd9VcAFl02GOPGNiusl9hmxXxCzZESRhop/I=
Subject key identifier: 95:A6:0F:D3:7D:FB:5B:B1:EC:42:B9:D7:C2:39:A9:5D:B1:95:B5:53
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1CF55394A810AB6E9F3C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0b7c5231-2e1c-3278-b4f6-e17dd099ab57.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20001
IP address blocks: 70.95.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:cf:55:39:4a:81:0a:b6:e9:f3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=580879ba-4b74-43ff-ae79-ce97cd77e295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:20:ae:e0:97:77:93:2d:82:53:1a:d6:a5:
f5:73:83:cd:a9:87:98:cd:bd:3f:23:99:d1:84:90:
5b:5d:5e:eb:80:27:d3:d7:96:65:cc:a2:8a:9e:d9:
2a:98:8b:9b:7f:b6:34:b6:3f:22:cd:95:1f:d7:76:
97:10:27:05:59:fc:bd:e5:b6:4c:e0:55:b6:11:23:
9a:91:09:09:11:59:76:c3:e5:9d:d1:ce:9b:77:96:
89:04:98:27:81:22:cf:8b:22:73:fa:10:22:99:38:
64:5a:ff:16:85:47:bb:85:1d:03:04:60:be:6b:6d:
de:dc:4e:a9:e5:4f:f1:1e:07:1c:be:cf:98:00:7d:
47:c4:36:ae:a2:ab:c6:a0:93:69:4a:09:63:49:af:
9c:0c:9c:bc:8d:46:5e:48:af:83:92:9d:34:f7:36:
6a:07:4f:f9:b4:d4:c9:ce:8d:f1:5c:47:36:6b:78:
6d:ac:31:77:ad:a0:b8:11:26:0c:88:e3:cb:f1:0e:
62:9d:07:1b:4e:ed:5a:9c:15:c6:8b:8c:fa:6d:3b:
b2:0b:16:17:67:64:53:6f:8d:87:29:90:fb:dd:a8:
ff:c4:7f:ea:cc:fd:63:e8:dd:72:c7:34:fa:13:29:
47:b9:e9:40:0a:b4:6f:73:ae:38:0d:69:83:f4:dd:
fe:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A6:0F:D3:7D:FB:5B:B1:EC:42:B9:D7:C2:39:A9:5D:B1:95:B5:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0b7c5231-2e1c-3278-b4f6-e17dd099ab57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
70.95.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:a8:1d:53:7d:91:a5:60:81:aa:de:27:35:fe:3c:87:bd:bf:
52:91:a3:2b:3e:53:f1:02:b8:fd:3b:5e:74:a0:6f:c8:b1:52:
62:d1:ed:b2:ff:fa:6e:cc:55:b1:12:01:da:4a:5a:9b:f0:20:
c4:d3:32:5d:d3:69:22:26:88:3f:4c:46:e8:4c:01:5d:31:3e:
b6:fd:f0:8c:72:5c:fb:50:8c:26:fa:ea:20:62:d9:4f:0f:ee:
f5:18:bd:13:bc:1a:38:7c:82:6f:f9:fa:7c:c9:e9:ca:cb:13:
d1:92:d6:ff:a4:e1:c0:b6:c2:65:b0:5d:e8:88:09:0a:d2:44:
8b:cb:44:ac:99:2b:80:bf:11:af:eb:56:3e:37:9c:db:d0:7a:
a8:ad:f8:f3:38:f2:93:eb:ef:9a:17:94:3d:02:e7:23:54:ff:
c2:f8:3a:29:65:a1:5c:46:de:b6:db:65:7f:3a:15:8c:a5:74:
ab:fd:27:b3:bb:81:bf:b6:18:d8:dd:a9:20:ef:65:22:a8:ca:
53:03:2d:27:01:9e:e7:76:21:fd:e1:f8:1a:bd:8f:ed:46:5c:
e5:15:24:18:a4:81:7a:7d:76:8f:36:54:c3:9b:60:89:3f:a0:
c1:17:be:cb:a3:80:b0:ef:93:63:87:f8:2d:c7:21:c5:0b:99:
ee:eb:84:5a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEji0c9VOUqBCrbp88AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
NTgwODc5YmEtNGI3NC00M2ZmLWFlNzktY2U5N2NkNzdlMjk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq8gruCXd5MtglMa1qX1c4PNqYeYzb0/I5nR
hJBbXV7rgCfT15ZlzKKKntkqmIubf7Y0tj8izZUf13aXECcFWfy95bZM4FW2ESOa
kQkJEVl2w+Wd0c6bd5aJBJgngSLPiyJz+hAimThkWv8WhUe7hR0DBGC+a23e3E6p
5U/xHgccvs+YAH1HxDauoqvGoJNpSgljSa+cDJy8jUZeSK+Dkp009zZqB0/5tNTJ
zo3xXEc2a3htrDF3raC4ESYMiOPL8Q5inQcbTu1anBXGi4z6bTuyCxYXZ2RTb42H
KZD73aj/xH/qzP1j6N1yxzT6EylHuelACrRvc644DWmD9N3+QQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJWmD9N9+1ux7EK518I5qV2xlbVTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMGI3YzUyMzEtMmUxYy0z
Mjc4LWI0ZjYtZTE3ZGQwOTlhYjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARl8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEALKgdU32RpWCBqt4nNf48h72/UpGjKz5T8QK4/TtedKBvyLFSYtHtsv/6
bsxVsRIB2kpam/AgxNMyXdNpIiaIP0xG6EwBXTE+tv3wjHJc+1CMJvrqIGLZTw/u
9Ri9E7waOHyCb/n6fMnpyssT0ZLW/6ThwLbCZbBd6IgJCtJEi8tErJkrgL8Rr+tW
Pjec29B6qK348zjyk+vvmheUPQLnI1T/wvg6KWWhXEbetttlfzoVjKV0q/0ns7uB
v7YY2N2pIO9lIqjKUwMtJwGe53Yh/eH4Gr2P7UZc5RUkGKSBen12jzZUw5tgiT+g
wRe+y6OAsO+TY4f4LcchxQuZ7uuEWg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:34 2025 by rpki-client