Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3f6b1476-0e93-3f5e-aeaa-a93e5df06616.roa
File: 3f6b1476-0e93-3f5e-aeaa-a93e5df06616.roa (raw, json)
Hash identifier: N6/HxdUZunlY6tKXNjlLX7pMPi+LNee4v+iluLwmtHw=
Subject key identifier: 44:98:16:C7:65:A8:D8:9A:B9:D4:D3:1D:6A:EE:EC:FE:9B:6F:06:EC
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D14DCC635BFB1A373F8E80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3f6b1476-0e93-3f5e-aeaa-a93e5df06616.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20001
IP address blocks: 76.172.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:4d:cc:63:5b:fb:1a:37:3f:8e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=536366c6-68ef-4bf4-88ef-4526cd1e3ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:33:b7:92:e9:92:96:7c:a3:4c:10:a8:53:51:
d1:dd:33:bb:7f:30:62:b8:9b:33:e6:ab:88:53:cf:
ca:25:2c:84:0b:b3:d9:59:23:77:98:c5:60:ec:c1:
7e:5b:3c:ee:0b:de:eb:f4:85:22:21:15:b9:51:01:
1d:f6:91:39:d4:59:28:a7:19:c4:92:1f:10:22:f2:
a3:a1:f2:1b:5e:ec:a8:a5:e2:ad:66:3b:5e:07:f3:
d2:aa:ec:7f:fc:5e:0a:c6:18:e9:73:c8:1f:14:f2:
a3:16:37:58:7a:3e:bf:26:6b:d6:be:d6:91:13:a0:
9d:62:b0:c2:66:99:58:a4:70:5b:6d:56:5b:7d:44:
d5:73:a3:03:4c:a5:ef:96:d7:8d:7f:5d:fc:2d:1c:
2e:cf:d2:a6:b7:f0:91:d3:61:e8:d3:a1:a7:7f:b7:
fa:f5:c7:17:47:cf:64:b5:6c:2b:32:32:f1:f8:1b:
1b:96:8d:9a:4d:c0:a6:79:94:58:02:cd:e3:ad:a4:
39:d7:0e:37:a9:c1:95:fa:e7:48:78:f9:b0:b4:2a:
bf:1a:9f:03:30:c4:25:c4:3e:1f:2d:8c:95:52:90:
96:74:e3:da:a0:db:28:e1:14:19:e9:de:d5:c3:e8:
b6:93:a2:99:fc:f8:88:73:33:35:11:e7:33:85:66:
fb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:98:16:C7:65:A8:D8:9A:B9:D4:D3:1D:6A:EE:EC:FE:9B:6F:06:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3f6b1476-0e93-3f5e-aeaa-a93e5df06616.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
76.172.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:b5:85:e9:a2:08:49:c9:98:dc:4d:6e:3f:23:cb:cf:d1:3d:
bc:c9:6b:12:90:1a:74:f3:21:f1:92:17:cf:a7:3c:8b:2a:8e:
0d:78:f2:7e:4e:22:a3:9a:b0:13:2a:2b:0d:80:92:2a:35:6f:
83:1f:01:4c:14:26:29:ab:93:72:f5:1b:bf:aa:57:78:d0:9c:
2e:97:66:04:d2:e0:de:f3:fb:2d:b7:75:7a:cc:7f:cd:ea:83:
ab:71:f0:98:40:57:31:12:7f:4d:25:42:d2:fc:62:67:3b:e8:
f9:c7:55:83:62:09:df:a7:d1:c2:e7:f5:06:1b:8e:84:e3:3e:
7c:6a:19:57:02:e0:98:44:1f:e7:13:e2:7b:60:c2:da:39:1a:
4f:7b:fd:95:ee:8a:89:2c:66:73:39:4e:25:73:c1:c8:46:23:
66:ae:fe:31:ee:28:89:67:45:5a:49:c5:aa:53:ee:24:cf:ab:
91:f4:fa:6f:46:a1:a3:1e:77:d1:60:81:d1:a0:d7:a5:c4:75:
6c:59:4a:0e:07:39:ec:92:84:0c:29:54:cb:2c:7f:7f:23:03:
fb:7e:ef:62:da:da:e3:38:ad:75:3f:05:53:c4:1c:de:09:99:
9a:98:c8:9f:63:fe:1d:69:f9:e4:e5:c6:5e:41:55:53:df:fb:
cc:52:ac:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0U3MY1v7Gjc/joAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
NTM2MzY2YzYtNjhlZi00YmY0LTg4ZWYtNDUyNmNkMWUzZGRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTO3kumSlnyjTBCoU1HR3TO7fzBiuJsz5quI
U8/KJSyEC7PZWSN3mMVg7MF+WzzuC97r9IUiIRW5UQEd9pE51FkopxnEkh8QIvKj
ofIbXuyopeKtZjteB/PSqux//F4Kxhjpc8gfFPKjFjdYej6/JmvWvtaRE6CdYrDC
ZplYpHBbbVZbfUTVc6MDTKXvlteNf138LRwuz9Kmt/CR02Ho06Gnf7f69ccXR89k
tWwrMjLx+Bsblo2aTcCmeZRYAs3jraQ51w43qcGV+udIePmwtCq/Gp8DMMQlxD4f
LYyVUpCWdOPaoNso4RQZ6d7Vw+i2k6KZ/PiIczM1EeczhWb7rQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFESYFsdlqNiaudTTHWru7P6bbwbsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvM2Y2YjE0NzYtMGU5My0z
ZjVlLWFlYWEtYTkzZTVkZjA2NjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTKxwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHO1hemiCEnJmNxNbj8jy8/RPbzJaxKQGnTzIfGSF8+nPIsqjg148n5O
IqOasBMqKw2Akio1b4MfAUwUJimrk3L1G7+qV3jQnC6XZgTS4N7z+y23dXrMf83q
g6tx8JhAVzESf00lQtL8Ymc76PnHVYNiCd+n0cLn9QYbjoTjPnxqGVcC4JhEH+cT
4ntgwto5Gk97/ZXuioksZnM5TiVzwchGI2au/jHuKIlnRVpJxapT7iTPq5H0+m9G
oaMed9FggdGg16XEdWxZSg4HOeyShAwpVMssf38jA/t+72La2uM4rXU/BVPEHN4J
mZqYyJ9j/h1p+eTlxl5BVVPf+8xSrJs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:42:41 2025 by rpki-client