Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7c65a23e-58ec-359f-9580-5b320652aa9d.roa
File: 7c65a23e-58ec-359f-9580-5b320652aa9d.roa (raw, json)
Hash identifier: KvhbEBQ7byO7UnORS6hfcUzFcBrqOUE9Dd9m0QM+vCc=
Subject key identifier: 0D:26:FC:17:EE:ED:7D:87:CE:4B:F2:F4:8F:C7:54:6B:19:D2:34:3A
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D14211A573B5441D1F5668
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7c65a23e-58ec-359f-9580-5b320652aa9d.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 11427
IP address blocks: 24.166.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:42:11:a5:73:b5:44:1d:1f:56:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=d1de8db2-c659-4c15-94a1-791d63ce9c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ba:27:a5:fe:cc:9a:52:37:f1:21:eb:61:53:
d6:d1:1d:cf:a3:cc:09:ab:98:df:5b:4d:98:3f:71:
fc:4b:38:d1:a6:a2:54:1a:3b:20:05:78:cc:7a:d6:
9b:1e:d2:83:dc:9e:06:d4:08:17:f0:c1:e9:76:e9:
ca:b8:bd:9e:4d:4c:08:17:e9:3c:39:8a:3c:49:0f:
6c:c6:8d:66:eb:7a:2a:00:b1:0d:17:34:92:62:ac:
f8:be:e8:63:b8:2b:82:61:cb:06:fc:f1:03:41:9f:
d8:2a:8e:fe:89:2e:23:14:5c:cf:d5:39:e4:54:56:
ac:71:b5:60:cc:2e:8f:10:6a:a8:a7:f6:da:e3:a9:
8e:55:fe:a4:7a:0c:19:9d:d4:7d:77:e6:1a:81:38:
79:a1:fb:a3:69:ed:97:cf:d2:5b:f2:97:48:b8:62:
1f:e1:cd:82:96:11:e3:49:31:83:ee:66:d0:66:77:
26:af:ff:26:7c:48:ef:7e:3b:a0:97:cb:8f:78:8a:
67:ee:97:02:b2:61:f0:3a:2b:e9:3d:d2:25:90:b6:
ff:ed:b1:a5:ab:78:87:0e:08:13:da:b3:d2:b5:ff:
b3:59:54:fd:b2:54:99:76:b5:25:38:a1:49:6f:55:
9d:4a:dc:7c:7d:70:1c:97:1a:71:90:74:af:45:36:
c5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:26:FC:17:EE:ED:7D:87:CE:4B:F2:F4:8F:C7:54:6B:19:D2:34:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7c65a23e-58ec-359f-9580-5b320652aa9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.166.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:50:11:29:19:e2:8c:08:9e:43:35:a3:2c:99:e9:fc:da:b0:
32:0c:76:cd:20:27:50:a6:4e:7d:d5:fc:39:dd:d0:0b:04:62:
0e:24:d9:e2:a2:00:21:8f:17:9e:31:8c:ea:91:71:55:af:33:
34:ce:ff:5d:94:9f:57:92:04:44:b4:bb:05:c5:92:54:33:69:
cf:d8:60:c3:23:bb:4d:82:f8:17:01:9a:3b:43:82:89:c2:40:
2c:b4:62:fc:66:1e:f5:c5:ad:56:49:03:cc:7e:3a:bc:82:d6:
95:8f:35:83:18:bd:cc:18:f0:41:0b:89:dc:2e:2e:2f:23:1e:
da:49:ec:19:9f:fd:6b:26:f2:87:b7:ce:d5:e1:34:48:c4:3f:
04:a6:14:7e:39:d1:ef:d9:e7:b5:37:b3:64:3b:ed:c0:e2:27:
2f:a6:3e:ee:2c:ac:c7:dc:31:f4:0c:ca:be:83:f0:81:da:0d:
00:4d:67:82:d7:56:7b:b2:a6:fd:74:28:36:76:8a:1e:bd:67:
6b:2c:a7:d6:fa:db:38:f5:b9:17:52:44:46:dc:53:95:6d:50:
30:5b:11:93:54:f5:a8:89:2c:cb:b5:c2:fe:b9:72:b0:1d:9c:
d8:35:a6:7c:d9:59:7a:a4:98:d6:b4:7f:c2:9e:6c:e3:5d:ef:
9f:ea:59:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0UIRpXO1RB0fVmgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
ZDFkZThkYjItYzY1OS00YzE1LTk0YTEtNzkxZDYzY2U5YzI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Lonpf7MmlI38SHrYVPW0R3Po8wJq5jfW02Y
P3H8SzjRpqJUGjsgBXjMetabHtKD3J4G1AgX8MHpdunKuL2eTUwIF+k8OYo8SQ9s
xo1m63oqALENFzSSYqz4vuhjuCuCYcsG/PEDQZ/YKo7+iS4jFFzP1TnkVFascbVg
zC6PEGqop/ba46mOVf6kegwZndR9d+YagTh5ofujae2Xz9Jb8pdIuGIf4c2ClhHj
STGD7mbQZncmr/8mfEjvfjugl8uPeIpn7pcCsmHwOivpPdIlkLb/7bGlq3iHDggT
2rPStf+zWVT9slSZdrUlOKFJb1WdStx8fXAclxpxkHSvRTbFhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA0m/Bfu7X2Hzkvy9I/HVGsZ0jQ6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvN2M2NWEyM2UtNThlYy0z
NTlmLTk1ODAtNWIzMjA2NTJhYTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGKaoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG5QESkZ4owInkM1oyyZ6fzasDIMds0gJ1CmTn3V/Dnd0AsEYg4k2eKi
ACGPF54xjOqRcVWvMzTO/12Un1eSBES0uwXFklQzac/YYMMju02C+BcBmjtDgonC
QCy0YvxmHvXFrVZJA8x+OryC1pWPNYMYvcwY8EELidwuLi8jHtpJ7Bmf/Wsm8oe3
ztXhNEjEPwSmFH450e/Z57U3s2Q77cDiJy+mPu4srMfcMfQMyr6D8IHaDQBNZ4LX
Vnuypv10KDZ2ih69Z2ssp9b62zj1uRdSREbcU5VtUDBbEZNU9aiJLMu1wv65crAd
nNg1pnzZWXqkmNa0f8KebONd75/qWbQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:50 2025 by rpki-client