Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9e6ad873-0e0b-3fa9-9d17-624d68ec4d6b.roa
File: 9e6ad873-0e0b-3fa9-9d17-624d68ec4d6b.roa (raw, json)
Hash identifier: l9YSu+NHu/6A0nFD4K66On7SZx+sbpKXgoP7QT611R0=
Subject key identifier: 42:97:B6:9C:E4:3B:8A:40:6E:D2:1D:05:56:1A:64:E9:73:A3:C4:4B
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D13313926AE27822D42A00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9e6ad873-0e0b-3fa9-9d17-624d68ec4d6b.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 10796
IP address blocks: 70.60.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:33:13:92:6a:e2:78:22:d4:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=b3062ebb-45c8-40a3-800f-daf3f2977c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bd:22:72:e0:4f:bb:24:bd:0f:64:9c:7a:e1:
f4:be:ea:09:9e:5c:dc:e3:51:63:c2:7e:af:87:e3:
dd:e0:8f:23:7a:68:fb:88:77:c8:01:7b:86:fa:78:
ed:f3:69:95:e6:f4:db:04:45:24:f4:27:40:cb:42:
ac:7f:54:7b:37:4c:ad:76:59:ff:07:de:79:5c:e5:
28:56:35:d7:a6:ad:e4:7a:de:af:0c:8d:3e:a0:bf:
58:87:f9:fe:09:70:10:92:fa:ae:9f:68:15:53:2e:
03:9b:23:15:3f:a1:da:e4:94:24:41:ca:78:a7:d3:
93:b7:b7:4e:a5:53:be:28:a6:3f:f3:1c:e0:d5:f2:
1d:48:19:0b:52:79:a1:b0:b7:c9:0c:97:d3:fb:a2:
d2:c4:1e:8f:12:69:fd:13:b0:14:11:d5:e5:a3:a6:
4d:55:5d:19:dc:3c:53:6a:53:3a:c2:2f:72:57:70:
d3:fb:2d:f3:c6:4d:5b:4c:26:f2:a1:5e:4b:16:30:
0e:d7:82:71:7a:f5:53:d5:71:2b:92:90:57:bc:1e:
0d:e2:8b:dd:0d:ac:5e:0b:87:87:7a:a7:7c:b8:29:
5d:6c:ef:b6:4a:2d:b8:33:fa:e2:50:d9:8e:cb:37:
19:b4:4f:33:25:71:37:f3:5b:3c:10:96:a6:23:26:
a8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:97:B6:9C:E4:3B:8A:40:6E:D2:1D:05:56:1A:64:E9:73:A3:C4:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9e6ad873-0e0b-3fa9-9d17-624d68ec4d6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
70.60.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:5d:c8:7c:94:77:d0:9d:ea:7f:3e:58:15:21:51:e4:e3:5f:
7e:31:57:5d:5d:0f:40:0e:87:b9:75:25:d3:c0:40:87:e0:e4:
4e:63:a8:8e:91:99:57:c0:31:1a:01:b6:04:57:c1:30:11:6f:
41:18:5f:79:9f:08:8b:41:0e:fd:a6:ec:33:a9:57:dd:61:f7:
fe:21:72:7d:06:66:ac:34:8f:44:52:2e:cf:c0:80:c1:b8:bc:
8e:d6:de:1e:c3:f1:24:f6:a2:b7:a7:da:3c:a7:c0:2e:60:1b:
91:b3:3f:8c:67:76:a8:a8:e5:96:3d:58:93:71:1e:e1:a4:ce:
93:9c:b5:b3:69:28:0e:20:e9:11:8f:a2:dc:8f:d8:91:00:d3:
fe:3a:29:6b:bf:34:ff:70:c0:ba:72:cd:e8:1f:41:14:b2:e5:
23:bd:fb:cd:ec:52:c3:db:c5:90:66:e5:ed:94:17:97:fb:23:
5d:2f:a9:8a:45:bf:74:5d:9a:a8:8c:45:d7:e1:29:45:91:33:
cf:88:fc:2c:d4:e1:7b:6d:ce:22:2c:a1:f9:50:23:2a:4d:e8:
c8:79:1c:4b:78:e5:10:46:5e:a4:b0:c9:d3:e6:50:89:9e:37:
3a:d3:1d:85:a8:0c:62:50:31:4a:a4:76:89:53:03:45:3e:83:
47:cd:b4:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0TMTkmrieCLUKgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
YjMwNjJlYmItNDVjOC00MGEzLTgwMGYtZGFmM2YyOTc3Yzc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4b0icuBPuyS9D2SceuH0vuoJnlzc41Fjwn6v
h+Pd4I8jemj7iHfIAXuG+njt82mV5vTbBEUk9CdAy0Ksf1R7N0ytdln/B955XOUo
VjXXpq3ket6vDI0+oL9Yh/n+CXAQkvqun2gVUy4DmyMVP6Ha5JQkQcp4p9OTt7dO
pVO+KKY/8xzg1fIdSBkLUnmhsLfJDJfT+6LSxB6PEmn9E7AUEdXlo6ZNVV0Z3DxT
alM6wi9yV3DT+y3zxk1bTCbyoV5LFjAO14JxevVT1XErkpBXvB4N4ovdDaxeC4eH
eqd8uCldbO+2Si24M/riUNmOyzcZtE8zJXE381s8EJamIyaoRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEKXtpzkO4pAbtIdBVYaZOlzo8RLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvOWU2YWQ4NzMtMGUwYi0z
ZmE5LTlkMTctNjI0ZDY4ZWM0ZDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRjwoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH9dyHyUd9Cd6n8+WBUhUeTjX34xV11dD0AOh7l1JdPAQIfg5E5jqI6R
mVfAMRoBtgRXwTARb0EYX3mfCItBDv2m7DOpV91h9/4hcn0GZqw0j0RSLs/AgMG4
vI7W3h7D8ST2oren2jynwC5gG5GzP4xndqio5ZY9WJNxHuGkzpOctbNpKA4g6RGP
otyP2JEA0/46KWu/NP9wwLpyzegfQRSy5SO9+83sUsPbxZBm5e2UF5f7I10vqYpF
v3RdmqiMRdfhKUWRM8+I/CzU4XttziIsoflQIypN6Mh5HEt45RBGXqSwydPmUIme
NzrTHYWoDGJQMUqkdolTA0U+g0fNtHk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:51 2025 by rpki-client