Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8ac99bd1-ed7c-34fe-b906-1e8297a33411.roa
File: 8ac99bd1-ed7c-34fe-b906-1e8297a33411.roa (raw, json)
Hash identifier: VmJsx+fdVIcOh5Qt/AZJ5QjQJMeHAOxUcCeInUneSFM=
Subject key identifier: B4:09:93:54:65:57:E6:BE:26:9A:82:27:5B:10:0D:1A:10:F6:31:6F
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D13574652AB8752FDF5C00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8ac99bd1-ed7c-34fe-b906-1e8297a33411.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 10796
IP address blocks: 71.65.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:35:74:65:2a:b8:75:2f:df:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=47906304-2769-4747-9df1-1d69fa83749d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:56:d0:7b:71:ae:e4:74:b8:59:60:c9:d5:2b:
f0:22:63:66:8a:fe:22:ce:be:5c:5e:45:bd:47:5d:
dd:16:4d:9c:51:49:77:9c:c4:39:62:4b:eb:e0:ae:
f7:cb:da:b9:ab:4e:46:57:17:f1:00:b0:ac:9d:c3:
fb:24:8d:ca:34:6a:5a:54:fc:10:05:19:76:b4:56:
20:da:c2:06:c0:f4:9a:85:79:fe:6f:26:39:ea:53:
7d:8a:ce:fb:62:e6:06:b4:4f:79:d7:ca:38:86:2d:
15:c0:1f:f7:b6:bf:1e:54:f6:64:67:a1:6d:ba:a8:
da:5c:e7:f5:b4:89:56:ae:c7:83:b6:62:8b:bd:8a:
1c:6d:d6:1c:7e:36:02:1f:e5:53:f2:14:cb:50:47:
36:5b:e2:8b:42:03:c9:74:78:4e:f3:8a:0b:fd:9d:
d2:32:e2:c1:17:03:18:4e:3e:cd:15:ca:0c:ed:ed:
1d:d5:d2:66:9a:22:31:e2:14:41:4e:42:e0:6b:d6:
cf:53:ea:3d:c8:bc:0f:b6:5e:c8:f1:01:f4:f7:3d:
4f:85:0d:b8:89:d1:83:0d:98:89:a8:6f:05:56:f3:
e2:90:93:8e:8e:c5:21:e5:68:f0:09:32:97:94:80:
78:9a:c7:22:e1:5c:4f:4b:e6:72:ed:c8:de:d0:89:
5b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:09:93:54:65:57:E6:BE:26:9A:82:27:5B:10:0D:1A:10:F6:31:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8ac99bd1-ed7c-34fe-b906-1e8297a33411.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
71.65.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:2d:53:b3:bd:a9:67:ee:07:db:6d:1f:6e:91:b5:25:40:f4:
bd:a0:0b:5b:ce:5c:51:16:01:c9:89:6f:fd:72:04:c6:57:b6:
09:b4:52:da:6e:79:3c:5d:49:b2:fc:4f:19:80:49:9e:36:5b:
75:d1:e6:58:dd:70:35:1b:6f:4f:71:e8:58:f6:f0:cf:b1:08:
af:77:30:76:4d:92:e3:c5:8c:10:9a:7b:76:f5:84:76:45:6c:
55:d4:9a:ee:a4:db:d5:ca:74:f8:48:71:90:09:87:b2:02:60:
dd:0c:e0:d9:57:ee:10:29:5c:4d:f0:03:27:c8:b5:8a:7d:e6:
7e:66:1e:9a:82:0a:b8:ab:d1:da:4f:ee:d6:e8:ad:41:18:74:
10:12:c0:7c:ea:53:79:e4:01:16:c2:52:07:32:b9:56:f7:a3:
1d:97:ec:98:67:7e:2a:85:5b:ff:e3:8c:39:32:46:d5:26:10:
34:d7:69:03:3a:15:ba:7e:ee:77:96:16:39:82:4b:4a:bd:bb:
63:76:ee:85:8a:30:b5:5d:f3:ef:0f:57:40:e2:5b:0e:82:29:
43:f7:3b:10:0b:3b:f0:4f:74:68:22:b6:e4:89:11:eb:b3:cd:
20:c5:f2:53:7a:dc:f0:7d:36:54:e5:c8:ca:44:47:81:4f:57:
41:e6:96:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0TV0ZSq4dS/fXAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
NDc5MDYzMDQtMjc2OS00NzQ3LTlkZjEtMWQ2OWZhODM3NDlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFbQe3Gu5HS4WWDJ1SvwImNmiv4izr5cXkW9
R13dFk2cUUl3nMQ5Ykvr4K73y9q5q05GVxfxALCsncP7JI3KNGpaVPwQBRl2tFYg
2sIGwPSahXn+byY56lN9is77YuYGtE9518o4hi0VwB/3tr8eVPZkZ6FtuqjaXOf1
tIlWrseDtmKLvYocbdYcfjYCH+VT8hTLUEc2W+KLQgPJdHhO84oL/Z3SMuLBFwMY
Tj7NFcoM7e0d1dJmmiIx4hRBTkLga9bPU+o9yLwPtl7I8QH09z1PhQ24idGDDZiJ
qG8FVvPikJOOjsUh5WjwCTKXlIB4msci4VxPS+Zy7cje0IlbuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLQJk1RlV+a+JpqCJ1sQDRoQ9jFvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvOGFjOTliZDEtZWQ3Yy0z
NGZlLWI5MDYtMWU4Mjk3YTMzNDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHR0EAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACotU7O9qWfuB9ttH26RtSVA9L2gC1vOXFEWAcmJb/1yBMZXtgm0Utpu
eTxdSbL8TxmASZ42W3XR5ljdcDUbb09x6Fj28M+xCK93MHZNkuPFjBCae3b1hHZF
bFXUmu6k29XKdPhIcZAJh7ICYN0M4NlX7hApXE3wAyfItYp95n5mHpqCCrir0dpP
7tborUEYdBASwHzqU3nkARbCUgcyuVb3ox2X7JhnfiqFW//jjDkyRtUmEDTXaQM6
Fbp+7neWFjmCS0q9u2N27oWKMLVd8+8PV0DiWw6CKUP3OxALO/BPdGgituSJEeuz
zSDF8lN63PB9NlTlyMpER4FPV0Hmlg8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:24:22 2025 by rpki-client