Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/37c14d4c-41a2-3220-a1a9-a51ace3e0189.roa
File: 37c14d4c-41a2-3220-a1a9-a51ace3e0189.roa (raw, json)
Hash identifier: puSd70sXFtdRvE5TP27FSgCdO8Jv0wVp6huV6H3C184=
Subject key identifier: 07:42:52:0D:9A:1B:45:9D:1A:89:A6:66:70:0F:1D:A8:34:91:9D:7D
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1599869C7FB2BE2B7DF00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/37c14d4c-41a2-3220-a1a9-a51ace3e0189.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 33363
IP address blocks: 97.104.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:59:98:69:c7:fb:2b:e2:b7:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=0bd34a6c-45ff-49df-ad2c-1a5087773c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4a:34:5d:90:6f:d0:e5:b9:28:b9:12:ec:79:
dc:56:69:fe:21:6d:40:31:94:64:46:bf:d5:db:02:
3b:4f:e9:41:50:1d:74:78:3a:cc:5c:59:f7:41:cf:
bb:7f:61:0b:b0:16:b8:32:b8:8f:92:19:62:6c:4b:
7a:cf:f6:b9:06:a0:ae:81:3a:54:f2:04:d0:36:60:
68:1a:a3:52:4a:82:a2:f9:e1:46:db:81:7b:07:93:
4f:21:5f:d1:45:dd:cf:a9:cf:d1:1c:b1:67:36:4b:
52:83:77:9a:1d:cc:b6:16:b1:86:b0:62:84:42:4e:
b8:85:29:ba:31:f8:46:b0:5e:15:fb:fe:f6:1a:ff:
46:1c:d8:6c:ed:c2:64:3a:02:c4:48:65:2a:56:66:
ff:64:3f:a4:00:9a:c3:81:91:b3:91:67:60:9c:8b:
aa:a4:af:71:79:b0:4c:ad:81:76:77:20:48:fe:94:
4f:13:09:66:c3:1a:51:36:77:0a:e2:48:2d:66:7e:
46:c5:70:6a:0a:59:92:c0:12:51:91:18:17:35:10:
f2:32:4e:d2:2b:3a:f0:c0:19:df:04:e8:52:20:45:
f9:cc:67:1e:31:fc:76:0e:5a:7a:22:bf:55:3d:fc:
b7:d5:ae:f5:2e:7e:32:22:3d:09:bc:61:04:5c:8a:
22:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:42:52:0D:9A:1B:45:9D:1A:89:A6:66:70:0F:1D:A8:34:91:9D:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/37c14d4c-41a2-3220-a1a9-a51ace3e0189.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
97.104.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:1a:43:1a:d0:e7:e0:b3:84:94:29:16:95:ee:76:60:e8:3f:
69:c7:bc:cf:6f:63:65:fb:6c:36:05:14:ad:40:5e:ca:cd:27:
34:42:78:95:0f:f3:8f:29:d1:d3:95:2b:c8:c5:64:ed:d2:11:
bb:6a:fa:dd:e5:73:d8:3e:b1:9d:d9:0d:59:7b:ad:db:40:20:
09:a5:7c:34:4e:7f:b4:3a:2a:61:b5:3e:c8:a0:88:8e:38:af:
ef:73:71:3a:be:17:a2:fa:83:03:59:6f:16:10:31:74:c6:ce:
df:02:9a:97:51:d4:8e:84:e0:bf:c2:18:5c:b2:16:5f:aa:2d:
c8:d2:3f:7b:bf:1e:22:f2:35:2a:af:98:0f:d2:e3:61:7e:11:
e1:d5:0b:8c:f1:e5:1c:56:b2:05:e4:d4:bd:35:cf:30:4e:50:
3c:48:1e:ed:4a:35:cb:24:4c:98:56:33:a8:62:46:e5:06:fa:
63:06:16:09:96:91:7e:a3:a7:52:75:34:94:fd:2e:c1:7d:b7:
de:3a:86:4c:19:0c:e8:47:5e:02:42:a8:7f:61:c2:65:d5:be:
6a:80:ff:d8:71:53:35:88:51:9c:47:35:b4:74:7b:f6:b7:88:
4c:f7:dd:a2:48:89:78:6e:36:ca:fd:20:ce:99:53:4c:c9:5c:
e8:eb:62:d0
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEji0VmYacf7K+K33wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
MGJkMzRhNmMtNDVmZi00OWRmLWFkMmMtMWE1MDg3NzczYzgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEo0XZBv0OW5KLkS7HncVmn+IW1AMZRkRr/V
2wI7T+lBUB10eDrMXFn3Qc+7f2ELsBa4MriPkhlibEt6z/a5BqCugTpU8gTQNmBo
GqNSSoKi+eFG24F7B5NPIV/RRd3Pqc/RHLFnNktSg3eaHcy2FrGGsGKEQk64hSm6
MfhGsF4V+/72Gv9GHNhs7cJkOgLESGUqVmb/ZD+kAJrDgZGzkWdgnIuqpK9xebBM
rYF2dyBI/pRPEwlmwxpRNncK4kgtZn5GxXBqClmSwBJRkRgXNRDyMk7SKzrwwBnf
BOhSIEX5zGceMfx2Dlp6Ir9VPfy31a71Ln4yIj0JvGEEXIoimQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAdCUg2aG0WdGommZnAPHag0kZ19MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMzdjMTRkNGMtNDFhMi0z
MjIwLWExYTktYTUxYWNlM2UwMTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYWgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAchpDGtDn4LOElCkWle52YOg/ace8z29jZftsNgUUrUBeys0nNEJ4lQ/z
jynR05UryMVk7dIRu2r63eVz2D6xndkNWXut20AgCaV8NE5/tDoqYbU+yKCIjjiv
73NxOr4XovqDA1lvFhAxdMbO3wKal1HUjoTgv8IYXLIWX6otyNI/e78eIvI1Kq+Y
D9LjYX4R4dULjPHlHFayBeTUvTXPME5QPEge7Uo1yyRMmFYzqGJG5Qb6YwYWCZaR
fqOnUnU0lP0uwX233jqGTBkM6EdeAkKof2HCZdW+aoD/2HFTNYhRnEc1tHR79reI
TPfdokiJeG42yv0gzplTTMlc6Oti0A==
-----END CERTIFICATE-----
Generated at Thu Apr 10 01:55:12 2025 by rpki-client