Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8e174a15-2016-333f-a72e-8d0a93e4ffc4.roa
File: 8e174a15-2016-333f-a72e-8d0a93e4ffc4.roa (raw, json)
Hash identifier: jv2AIitrvzpjA/TvSKud5GubdEVPCbb/TJOYaCC+aWY=
Subject key identifier: C5:22:3F:DE:B7:AA:90:22:D5:2D:EE:E5:7A:44:D3:59:1A:4B:05:91
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D13A73C0A5D81DD5454500
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8e174a15-2016-333f-a72e-8d0a93e4ffc4.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 11351
IP address blocks: 67.240.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:3a:73:c0:a5:d8:1d:d5:45:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=8b85ebed-53c5-4963-b88f-9aa5223e2cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:96:38:31:3f:57:40:76:26:b4:d8:8f:34:69:
4d:e0:6b:b3:b5:2d:26:b3:1c:c7:c4:74:20:25:32:
00:ec:4f:14:5a:23:57:85:81:3b:32:c7:57:f0:5d:
c4:5b:3a:21:f6:87:27:e7:cb:ff:c8:0b:7b:89:32:
ec:cb:d7:14:a6:db:56:7a:ed:76:73:c5:b9:32:31:
e5:93:5c:82:94:af:32:56:0a:5d:63:34:21:9e:aa:
05:d6:82:01:d7:95:73:97:d5:ad:b8:aa:b5:c1:91:
5a:44:f9:ef:86:7a:ba:9d:8f:71:9c:0c:53:e6:b4:
52:72:cb:03:85:df:05:e0:80:21:09:31:09:bc:8b:
e8:77:2e:84:15:6b:96:1d:1f:29:0d:7b:b6:b4:29:
6f:4d:ee:11:f4:dd:89:ef:04:f5:8b:9e:f5:f3:52:
47:64:14:ec:fc:4a:09:98:ce:fa:cf:da:6b:bb:7f:
08:b1:1d:0e:3a:70:d7:ee:28:a4:86:bd:44:4c:61:
7d:df:23:4e:08:9f:3b:1e:30:1e:09:0b:d8:57:98:
83:20:a0:59:51:d6:ff:1e:1c:55:ce:1f:33:8c:2d:
79:8c:a0:eb:ec:ef:58:af:0f:df:13:3a:48:98:23:
27:39:d1:6c:5c:d7:ea:28:87:bf:26:67:bd:4f:a2:
36:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:22:3F:DE:B7:AA:90:22:D5:2D:EE:E5:7A:44:D3:59:1A:4B:05:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8e174a15-2016-333f-a72e-8d0a93e4ffc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
67.240.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:00:05:0b:40:27:50:34:06:f1:fd:85:4c:d1:c9:ed:90:ff:
87:6c:01:5b:8d:a5:0d:81:58:46:a9:51:79:01:94:fa:96:8a:
5a:66:c1:20:ad:a2:28:ee:e1:c4:2d:74:f2:5a:e5:64:e8:77:
07:e5:df:b4:5d:65:af:a5:36:9d:7d:aa:be:28:95:9c:ed:67:
03:a7:78:c7:f6:29:6a:1e:e7:c6:e6:7d:bc:e2:09:30:0c:77:
80:e3:42:c9:4f:ac:0a:cd:e0:38:ff:fb:3a:c3:e4:e8:67:af:
63:05:b9:04:98:ea:a2:90:63:14:29:90:e9:b0:6d:76:e1:60:
44:f3:6f:95:be:e6:57:c2:bb:38:c8:15:41:c2:b4:88:35:88:
2c:c4:45:d6:09:bb:d4:6e:6f:50:78:fe:bf:e4:49:df:c6:6b:
db:c3:9b:1f:b1:cb:21:2e:04:53:0b:0f:76:f8:dd:96:5f:ea:
9e:eb:19:89:9d:48:ae:c1:15:09:ac:0f:41:42:0b:ad:49:d6:
30:3e:a1:1e:92:61:20:81:e9:44:e5:2e:ac:b2:4b:2f:2f:b0:
a6:1f:0f:35:cf:9a:81:07:dc:36:8f:8f:ab:0e:74:08:b4:d0:
3a:10:43:ea:e4:87:0a:e3:5c:6a:d8:e6:c3:3c:bb:33:c1:79:
b0:fd:9e:b5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEji0TpzwKXYHdVFRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
OGI4NWViZWQtNTNjNS00OTYzLWI4OGYtOWFhNTIyM2UyY2QyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JY4MT9XQHYmtNiPNGlN4GuztS0msxzHxHQg
JTIA7E8UWiNXhYE7MsdX8F3EWzoh9ocn58v/yAt7iTLsy9cUpttWeu12c8W5MjHl
k1yClK8yVgpdYzQhnqoF1oIB15Vzl9WtuKq1wZFaRPnvhnq6nY9xnAxT5rRScssD
hd8F4IAhCTEJvIvody6EFWuWHR8pDXu2tClvTe4R9N2J7wT1i57181JHZBTs/EoJ
mM76z9pru38IsR0OOnDX7iikhr1ETGF93yNOCJ87HjAeCQvYV5iDIKBZUdb/HhxV
zh8zjC15jKDr7O9Yrw/fEzpImCMnOdFsXNfqKIe/Jme9T6I2ewIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMUiP963qpAi1S3u5XpE01kaSwWRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvOGUxNzRhMTUtMjAxNi0z
MzNmLWE3MmUtOGQwYTkzZTRmZmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBQ/AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAQAAFC0AnUDQG8f2FTNHJ7ZD/h2wBW42lDYFYRqlReQGU+paKWmbBIK2i
KO7hxC108lrlZOh3B+XftF1lr6U2nX2qviiVnO1nA6d4x/Ypah7nxuZ9vOIJMAx3
gONCyU+sCs3gOP/7OsPk6GevYwW5BJjqopBjFCmQ6bBtduFgRPNvlb7mV8K7OMgV
QcK0iDWILMRF1gm71G5vUHj+v+RJ38Zr28ObH7HLIS4EUwsPdvjdll/qnusZiZ1I
rsEVCawPQUILrUnWMD6hHpJhIIHpROUurLJLLy+wph8PNc+agQfcNo+Pqw50CLTQ
OhBD6uSHCuNcatjmwzy7M8F5sP2etQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:33 2025 by rpki-client