Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4c8617cb-9291-36d6-bcd3-ef85dc920779.roa
File: 4c8617cb-9291-36d6-bcd3-ef85dc920779.roa (raw, json)
Hash identifier: m5c91LLqBFHODNLjBqvp2G3T6ulQ+oc+Fs8v9F8JOws=
Subject key identifier: 38:5E:C6:8B:AE:7A:C8:39:39:28:B2:30:78:43:85:16:14:C1:CD:40
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D151E89494AA0966EE1980
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4c8617cb-9291-36d6-bcd3-ef85dc920779.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20001
IP address blocks: 67.52.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:51:e8:94:94:aa:09:66:ee:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=88001aba-8a33-4092-8387-73a38cc6b69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:92:0b:e6:a1:87:9a:3e:2a:7a:0c:28:35:87:
ca:99:ce:f8:65:5a:0d:d6:e9:49:d2:e2:f4:a8:18:
74:ba:99:64:33:a5:46:34:6a:31:db:2f:02:5e:0c:
e1:1c:cb:b6:ca:02:bf:c4:d6:c0:09:5f:47:87:d5:
2f:26:59:02:71:6c:ad:6c:e9:c5:ea:a3:b4:4f:97:
d2:4e:39:de:9f:9e:90:01:b7:28:4f:75:c5:c4:28:
1a:df:2d:41:78:f4:2d:08:23:92:9f:b0:ef:2b:0d:
28:05:64:03:6a:5d:85:87:1b:e4:72:23:83:bd:f6:
6e:1a:b5:c8:e9:cd:54:2c:b1:d6:1d:23:af:b9:93:
ff:8f:48:b5:6e:55:67:7c:25:a1:0a:d0:b2:98:b8:
da:2e:8b:5d:fe:a2:24:b6:82:8c:fe:aa:97:a5:95:
ea:54:6e:66:63:db:62:9f:cf:3c:a1:73:e9:4c:95:
66:03:ce:77:f3:94:04:93:f3:8f:4a:13:08:7f:1d:
61:7c:87:f2:3c:b5:32:8b:32:80:28:ec:c5:e5:25:
a7:c7:4b:f2:9e:1c:07:6b:48:a0:42:11:49:6f:03:
95:5c:7b:d3:d2:f6:6e:e9:87:d4:d2:97:75:6c:3e:
4a:52:2a:9f:af:74:89:a9:88:98:54:b9:e5:2e:ae:
c5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5E:C6:8B:AE:7A:C8:39:39:28:B2:30:78:43:85:16:14:C1:CD:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4c8617cb-9291-36d6-bcd3-ef85dc920779.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
67.52.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:4e:3e:f8:12:19:c7:e3:87:c1:f5:fc:fb:af:e8:69:89:92:
74:8d:d9:12:c3:ad:ba:42:27:83:c0:1f:48:f5:ac:e4:81:63:
f1:e0:d9:7d:45:21:62:66:9d:8f:f9:01:53:3a:33:33:a7:d5:
4f:7b:a8:66:13:65:17:c9:ca:54:cf:9e:bf:61:14:8d:a6:e0:
9b:c3:b0:dc:d3:9a:a2:d9:d9:39:3e:69:47:05:9e:cb:ec:e3:
09:72:39:de:dd:d8:54:ce:b0:d0:f9:c3:fa:a0:db:c3:d6:43:
9a:9b:41:72:42:05:e7:bd:62:e8:63:e1:54:cf:0b:a6:8a:4c:
3c:cb:86:49:e0:b6:8c:be:c5:fd:da:d6:ef:59:01:c3:40:1e:
26:d7:55:5e:67:1a:f4:8f:cc:dc:91:91:a2:64:81:ad:fe:54:
7c:09:1a:77:6f:e3:c2:9e:35:a7:50:35:7a:dc:08:66:51:4a:
6d:a6:0b:23:e6:d0:c2:87:af:7d:91:14:23:94:4e:95:bc:16:
fa:44:b3:bd:c1:f3:9e:0c:0a:f6:ae:5b:ab:6a:73:ff:99:a0:
22:55:68:c7:49:23:60:07:ae:28:da:9f:ea:ef:21:f3:df:12:
0c:6b:54:02:fd:83:f4:eb:b2:9a:c7:a5:42:8f:7f:0c:fc:07:
22:32:15:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0VHolJSqCWbuGYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
ODgwMDFhYmEtOGEzMy00MDkyLTgzODctNzNhMzhjYzZiNjlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpIL5qGHmj4qegwoNYfKmc74ZVoN1ulJ0uL0
qBh0uplkM6VGNGox2y8CXgzhHMu2ygK/xNbACV9Hh9UvJlkCcWytbOnF6qO0T5fS
Tjnen56QAbcoT3XFxCga3y1BePQtCCOSn7DvKw0oBWQDal2FhxvkciODvfZuGrXI
6c1ULLHWHSOvuZP/j0i1blVnfCWhCtCymLjaLotd/qIktoKM/qqXpZXqVG5mY9ti
n888oXPpTJVmA85385QEk/OPShMIfx1hfIfyPLUyizKAKOzF5SWnx0vynhwHa0ig
QhFJbwOVXHvT0vZu6YfU0pd1bD5KUiqfr3SJqYiYVLnlLq7FWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDhexouuesg5OSiyMHhDhRYUwc1AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNGM4NjE3Y2ItOTI5MS0z
NmQ2LWJjZDMtZWY4NWRjOTIwNzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQzRAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABZOPvgSGcfjh8H1/Puv6GmJknSN2RLDrbpCJ4PAH0j1rOSBY/Hg2X1F
IWJmnY/5AVM6MzOn1U97qGYTZRfJylTPnr9hFI2m4JvDsNzTmqLZ2Tk+aUcFnsvs
4wlyOd7d2FTOsND5w/qg28PWQ5qbQXJCBee9Yuhj4VTPC6aKTDzLhkngtoy+xf3a
1u9ZAcNAHibXVV5nGvSPzNyRkaJkga3+VHwJGndv48KeNadQNXrcCGZRSm2mCyPm
0MKHr32RFCOUTpW8FvpEs73B854MCvauW6tqc/+ZoCJVaMdJI2AHrijan+rvIfPf
EgxrVAL9g/TrsprHpUKPfwz8ByIyFQY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:07 2025 by rpki-client