Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9d16cbb1-8883-3904-a810-2e4a97c2d391.roa
File: 9d16cbb1-8883-3904-a810-2e4a97c2d391.roa (raw, json)
Hash identifier: GWU9im+cXLH2IEzogBC0sr828SwICyg1H6s/GgJEamo=
Subject key identifier: F8:FF:41:50:7E:C4:FD:6B:90:60:9E:E8:0F:E5:10:0F:F5:D5:CC:40
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F4328583828DF5DB216B2725314E5AD28
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9d16cbb1-8883-3904-a810-2e4a97c2d391.roa
Signing time: Fri 04 Dec 2020 05:00:00 +0000
ROA not before: Fri 04 Dec 2020 05:00:00 +0000
ROA not after: Fri 27 Nov 2026 05:00:00 +0000
asID: 11427
IP address blocks: 108.167.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:28:df:5d:b2:16:b2:72:53:14:e5:ad:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Dec 4 05:00:00 2020 GMT
Not After : Nov 27 05:00:00 2026 GMT
Subject: CN=26ed9eb0-7de0-4fc8-8406-de03dc2d2792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:67:fc:39:fd:57:6d:74:94:0b:00:0c:ad:e6:
e7:46:67:9f:b8:39:3c:b3:da:82:0d:1c:72:9e:86:
92:6c:93:b8:90:e7:1e:df:1a:ce:e9:3d:6f:46:ac:
bd:63:94:c1:5e:f8:45:4c:02:da:b9:b1:91:d7:e5:
7b:0d:05:03:69:ef:81:2f:50:32:9a:b7:1e:30:d4:
33:a2:8b:41:e7:34:a3:8a:86:6c:82:67:69:c7:35:
75:7a:2d:3e:a4:fe:f0:a3:bf:39:76:f2:ad:67:2e:
b5:9f:5b:f2:25:a3:69:6e:56:3e:48:50:08:62:14:
f9:91:d2:1c:a2:c4:4f:6f:8f:b3:cc:ae:6a:fd:b1:
b3:9c:5c:01:ad:9e:39:a3:43:e7:fa:3c:0a:b9:e5:
a4:36:ec:15:a0:25:50:bd:02:1d:ae:91:1d:b0:ab:
58:77:68:b6:19:52:41:f1:bf:0d:07:a5:cf:40:26:
a3:68:d3:6b:9d:59:24:c7:6d:b5:c8:9f:be:4e:ad:
4e:19:00:af:78:07:ee:7f:40:2a:95:2c:14:40:aa:
26:f7:f1:2e:d0:9d:be:40:f7:50:fd:24:78:1f:62:
e5:69:49:f6:3e:a0:0f:2c:8a:9c:42:b0:99:7a:d7:
76:72:7a:d3:e6:74:07:f3:e6:02:dd:84:bf:b4:44:
fd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FF:41:50:7E:C4:FD:6B:90:60:9E:E8:0F:E5:10:0F:F5:D5:CC:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9d16cbb1-8883-3904-a810-2e4a97c2d391.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
108.167.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:d9:a8:f0:0d:ab:91:1f:30:f8:2b:ef:cd:79:60:60:17:45:
d4:b4:27:fa:5f:5a:ed:7b:89:98:d0:9a:7c:2b:f8:6f:c5:f9:
bf:be:e3:bb:93:b5:09:a5:55:3b:e7:69:21:4f:81:ae:d0:fb:
e5:0e:f7:7d:7f:c7:f2:3c:26:f5:80:86:3b:31:49:6d:3e:f4:
f0:b3:78:30:10:ba:7c:6f:f8:53:12:28:6f:b3:f0:eb:cb:d2:
5a:19:63:25:1d:0f:23:c8:2d:97:4c:e4:92:21:8c:2b:96:2d:
84:c3:40:b3:2e:10:1a:3c:38:67:ba:0d:cf:bc:7d:d9:42:48:
be:1a:4c:db:48:b4:ed:ec:37:a2:28:e0:30:8c:3a:8f:bf:d0:
21:56:31:bb:6b:8b:47:41:e9:f8:f6:f6:20:62:4c:7b:cb:6f:
96:9d:33:94:84:ef:72:eb:f0:62:5f:5d:9b:fb:6f:b3:3b:61:
07:c9:7f:7b:6f:61:91:54:1e:1a:a8:3a:80:ab:bb:53:20:aa:
21:1d:cc:1c:2b:37:12:bd:d2:33:a1:40:cb:ad:c8:52:06:02:
c7:1a:df:f4:42:d8:eb:8c:e6:42:33:59:26:37:9a:9e:a5:b5:
a0:61:29:53:47:6e:c1:19:65:a4:6c:c7:7b:14:62:6e:67:74:
f2:68:19:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDgo312yFrJyUxTlrSgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTIwMTIwNDA1MDAwMFoXDTI2MTEyNzA1MDAwMFowLzEtMCsGA1UEAxMk
MjZlZDllYjAtN2RlMC00ZmM4LTg0MDYtZGUwM2RjMmQyNzkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mf8Of1XbXSUCwAMrebnRmefuDk8s9qCDRxy
noaSbJO4kOce3xrO6T1vRqy9Y5TBXvhFTALaubGR1+V7DQUDae+BL1AymrceMNQz
ootB5zSjioZsgmdpxzV1ei0+pP7wo785dvKtZy61n1vyJaNpblY+SFAIYhT5kdIc
osRPb4+zzK5q/bGznFwBrZ45o0Pn+jwKueWkNuwVoCVQvQIdrpEdsKtYd2i2GVJB
8b8NB6XPQCajaNNrnVkkx221yJ++Tq1OGQCveAfuf0AqlSwUQKom9/Eu0J2+QPdQ
/SR4H2LlaUn2PqAPLIqcQrCZetd2cnrT5nQH8+YC3YS/tET9NQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPj/QVB+xP1rkGCe6A/lEA/11cxAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvOWQxNmNiYjEtODg4My0z
OTA0LWE4MTAtMmU0YTk3YzJkMzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbKdAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHLZqPANq5EfMPgr7815YGAXRdS0J/pfWu17iZjQmnwr+G/F+b++47uT
tQmlVTvnaSFPga7Q++UO931/x/I8JvWAhjsxSW0+9PCzeDAQunxv+FMSKG+z8OvL
0loZYyUdDyPILZdM5JIhjCuWLYTDQLMuEBo8OGe6Dc+8fdlCSL4aTNtItO3sN6Io
4DCMOo+/0CFWMbtri0dB6fj29iBiTHvLb5adM5SE73Lr8GJfXZv7b7M7YQfJf3tv
YZFUHhqoOoCru1MgqiEdzBwrNxK90jOhQMutyFIGAsca3/RC2OuM5kIzWSY3mp6l
taBhKVNHbsEZZaRsx3sUYm5ndPJoGZ8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:06 2025 by rpki-client