Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5a9c77d6-c658-34b7-bcb8-8c1ec36e9931.roa
File: 5a9c77d6-c658-34b7-bcb8-8c1ec36e9931.roa (raw, json)
Hash identifier: nL6+5p7OKJqhOZd0FfyYNPilgwDJDsPZ5JurjuzEb74=
Subject key identifier: 50:10:62:3E:43:4A:8B:3C:DD:DF:2F:AC:79:F5:AA:8F:E9:BF:4A:1A
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1CF10EF2526E4A51D9F80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5a9c77d6-c658-34b7-bcb8-8c1ec36e9931.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20001
IP address blocks: 24.165.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:cf:10:ef:25:26:e4:a5:1d:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=c68d0c8e-2925-4a7c-899b-7c8df310966a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d9:79:59:48:f6:7b:f3:72:37:20:5c:25:92:
68:15:93:3f:71:c4:f9:93:b3:93:bb:58:62:3d:ec:
54:d4:68:51:59:38:06:f6:4b:41:b1:f5:4f:9e:f6:
c3:a3:ff:8f:f0:ef:1b:96:c8:20:ea:1b:d4:ad:b0:
8f:1a:29:d7:f0:3a:d0:87:38:c6:ef:4b:da:42:fe:
a6:76:62:b8:57:4f:41:83:50:9e:3f:cf:49:7b:18:
52:18:f6:ec:ca:5e:fc:94:ad:0a:fc:5d:46:f8:72:
6c:8f:1f:18:1f:86:02:f2:c4:e3:30:77:dd:96:9d:
5d:b7:04:3b:89:67:79:17:40:d6:52:25:c9:40:ea:
63:a6:aa:a1:cf:d0:c8:62:6d:ba:5c:cf:8a:11:d3:
7e:c8:9b:31:6d:98:a7:9e:b4:50:7b:cf:07:e8:79:
57:64:6b:7d:67:32:41:c0:2d:c5:dd:4e:e2:bd:77:
26:2c:9f:d3:2d:85:bf:10:57:a4:c8:78:56:fc:2a:
40:75:25:49:8a:17:66:14:7d:6b:2d:ae:a1:4b:8c:
e1:0d:27:97:76:90:90:c6:3b:38:4e:66:8e:e7:1a:
15:f0:84:90:d1:97:76:fd:41:e1:86:a6:c4:6d:39:
cc:0d:22:fe:e7:90:c2:5d:76:10:f4:4d:18:50:05:
f2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:10:62:3E:43:4A:8B:3C:DD:DF:2F:AC:79:F5:AA:8F:E9:BF:4A:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5a9c77d6-c658-34b7-bcb8-8c1ec36e9931.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.165.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:a7:7d:3b:51:36:d3:5e:6b:c1:f5:80:fb:4e:98:f4:d7:76:
eb:7f:6c:52:a8:f5:b0:6d:d3:83:cf:c5:9d:d7:2e:75:60:ec:
17:10:f4:8e:25:ea:d9:6f:43:0d:99:f5:cb:d2:b5:5d:89:cb:
e8:f5:79:6a:3b:03:4c:2c:1c:e6:48:1e:0d:33:52:1f:63:aa:
cf:18:31:42:0d:78:ce:45:2b:cd:65:c5:f5:ef:60:8b:dc:56:
3e:45:ca:fc:42:ba:26:c4:0f:d4:f4:8a:db:67:6e:96:d0:bb:
a1:59:01:79:d8:a3:44:b9:0d:45:d9:56:f5:9a:bf:47:0a:60:
c6:ea:24:4b:19:aa:89:f4:54:b2:04:86:2d:2e:e3:86:63:75:
33:9f:34:c9:74:41:db:c3:d3:9f:7e:ad:e8:63:d5:23:bb:f0:
0a:4a:e0:6c:4c:70:2d:01:5a:67:3b:4a:e9:a7:42:9b:1b:8b:
32:a2:79:73:6d:01:3d:1a:d4:8d:86:8a:d4:55:76:80:b2:cb:
70:21:8d:9e:06:ba:73:c1:df:e0:eb:7a:88:f4:9e:7e:5c:72:
1d:ca:07:38:a7:09:3e:b8:03:9a:9f:29:4b:61:c1:b7:50:c3:
cc:d8:9a:9f:99:35:e6:1e:69:b5:53:af:f9:d4:57:af:57:67:
53:f5:d8:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0c8Q7yUm5KUdn4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
YzY4ZDBjOGUtMjkyNS00YTdjLTg5OWItN2M4ZGYzMTA5NjZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Nl5WUj2e/NyNyBcJZJoFZM/ccT5k7OTu1hi
PexU1GhRWTgG9ktBsfVPnvbDo/+P8O8blsgg6hvUrbCPGinX8DrQhzjG70vaQv6m
dmK4V09Bg1CeP89JexhSGPbsyl78lK0K/F1G+HJsjx8YH4YC8sTjMHfdlp1dtwQ7
iWd5F0DWUiXJQOpjpqqhz9DIYm26XM+KEdN+yJsxbZinnrRQe88H6HlXZGt9ZzJB
wC3F3U7ivXcmLJ/TLYW/EFekyHhW/CpAdSVJihdmFH1rLa6hS4zhDSeXdpCQxjs4
TmaO5xoV8ISQ0Zd2/UHhhqbEbTnMDSL+55DCXXYQ9E0YUAXyJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFAQYj5DSos83d8vrHn1qo/pv0oaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNWE5Yzc3ZDYtYzY1OC0z
NGI3LWJjYjgtOGMxZWMzNmU5OTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGKUAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE6nfTtRNtNea8H1gPtOmPTXdut/bFKo9bBt04PPxZ3XLnVg7BcQ9I4l
6tlvQw2Z9cvStV2Jy+j1eWo7A0wsHOZIHg0zUh9jqs8YMUINeM5FK81lxfXvYIvc
Vj5FyvxCuibED9T0ittnbpbQu6FZAXnYo0S5DUXZVvWav0cKYMbqJEsZqon0VLIE
hi0u44ZjdTOfNMl0QdvD059+rehj1SO78ApK4GxMcC0BWmc7SumnQpsbizKieXNt
AT0a1I2GitRVdoCyy3AhjZ4GunPB3+Dreoj0nn5cch3KBzinCT64A5qfKUthwbdQ
w8zYmp+ZNeYeabVTr/nUV69XZ1P12Mo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:42:01 2025 by rpki-client