Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d1f33211-2ca1-3db2-abad-4108f17dfc43.roa
File: d1f33211-2ca1-3db2-abad-4108f17dfc43.roa (raw, json)
Hash identifier: IHUXVHxC5gk6Qq4Sm4/Sdr+BJgMNIFakxkDhNftzt7M=
Subject key identifier: A3:95:8E:9C:D9:55:FB:BE:3B:AD:52:CD:CB:17:6F:58:B0:F5:AC:1B
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1D3EC7BDA3EFD6F0D7B1C
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d1f33211-2ca1-3db2-abad-4108f17dfc43.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 33363
IP address blocks: 67.9.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:d3:ec:7b:da:3e:fd:6f:0d:7b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=3b0b0af7-be91-43c8-8a2c-3358e9f4569c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d7:b5:d2:cf:0a:2e:aa:01:35:b5:4a:45:00:
85:27:79:ea:6b:21:23:00:e3:80:6d:70:d9:f1:2e:
58:3b:bb:ad:f3:70:76:0d:f4:c3:2d:cf:74:98:3c:
d8:e0:10:da:61:1a:64:c9:06:94:05:00:8c:e3:4b:
60:3e:6b:6b:19:9c:af:ee:7e:18:fd:47:88:74:ee:
f8:7a:89:22:b8:0c:33:29:80:f8:28:69:a7:fd:91:
89:e1:11:a5:99:90:93:46:69:06:60:0f:0d:56:33:
34:44:46:4d:be:35:a0:e6:12:5f:20:81:eb:a1:d1:
99:79:03:79:37:43:9f:02:c7:64:ab:a5:22:e7:ab:
08:d3:7a:84:99:49:d1:f4:00:0e:5c:9f:56:30:a1:
45:71:e8:12:f9:b6:ea:74:38:d3:ad:d3:81:80:e6:
11:23:1b:a3:a4:32:44:06:af:ac:9a:6e:a9:12:03:
21:32:12:98:68:0e:09:bd:c4:9a:1b:4f:63:3d:e6:
90:b2:92:27:9c:89:41:e8:7d:47:6d:62:37:0c:40:
3c:57:2e:7e:35:6a:e7:7e:04:9e:78:16:3c:be:f9:
bb:30:b1:89:11:8b:ac:23:8e:63:12:df:df:8b:56:
2f:64:4f:39:5a:27:e8:a0:98:0e:f0:b3:0d:1f:51:
67:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:95:8E:9C:D9:55:FB:BE:3B:AD:52:CD:CB:17:6F:58:B0:F5:AC:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d1f33211-2ca1-3db2-abad-4108f17dfc43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
67.9.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:bb:5e:96:8c:4d:ee:6e:11:d4:8f:4e:32:32:5c:fb:8e:b0:
63:40:54:ba:b1:d6:98:ca:27:2e:05:cd:6e:56:79:f4:99:e7:
9d:67:7d:9a:2e:f5:d9:f5:8d:a2:3c:d6:87:db:85:5a:2a:b6:
62:39:b3:53:40:a4:2b:f7:b7:bb:a7:a8:fd:a6:99:82:a2:c7:
f0:27:59:6f:52:18:53:28:ad:54:dc:3f:8c:f4:4c:7d:ba:5d:
19:41:46:18:75:5d:21:a1:e8:e9:db:d3:21:5e:fb:8a:d0:ab:
07:5e:c8:ba:49:0e:01:c6:10:c9:d1:9c:8d:e0:b5:5b:12:6c:
40:82:7a:9c:31:16:0f:cd:1a:0d:67:a0:c6:83:ee:46:71:31:
b7:dc:64:a7:e7:a4:a2:19:00:49:2e:60:25:bf:ce:97:2e:67:
49:01:a1:4c:be:43:b6:41:c0:93:ca:cb:29:fc:00:17:d0:4f:
dc:da:d6:5e:34:e4:d2:bb:9d:91:3d:d1:62:be:bf:f8:4e:d0:
73:1b:32:73:a4:29:8c:98:67:b6:6e:64:59:b5:6e:a0:7b:7f:
48:dc:1a:e9:06:96:ba:d0:fb:fe:10:be:2d:ad:e3:1e:3d:f9:
bf:ba:aa:98:88:df:03:95:02:69:dd:bd:19:1c:66:a1:7c:d8:
9a:e4:71:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0dPse9o+/W8NexwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
M2IwYjBhZjctYmU5MS00M2M4LThhMmMtMzM1OGU5ZjQ1NjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09e10s8KLqoBNbVKRQCFJ3nqayEjAOOAbXDZ
8S5YO7ut83B2DfTDLc90mDzY4BDaYRpkyQaUBQCM40tgPmtrGZyv7n4Y/UeIdO74
eokiuAwzKYD4KGmn/ZGJ4RGlmZCTRmkGYA8NVjM0REZNvjWg5hJfIIHrodGZeQN5
N0OfAsdkq6Ui56sI03qEmUnR9AAOXJ9WMKFFcegS+bbqdDjTrdOBgOYRIxujpDJE
Bq+smm6pEgMhMhKYaA4JvcSaG09jPeaQspInnIlB6H1HbWI3DEA8Vy5+NWrnfgSe
eBY8vvm7MLGJEYusI45jEt/fi1YvZE85WifooJgO8LMNH1Fn5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKOVjpzZVfu+O61SzcsXb1iw9awbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZDFmMzMyMTEtMmNhMS0z
ZGIyLWFiYWQtNDEwOGYxN2RmYzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQwkgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEC7XpaMTe5uEdSPTjIyXPuOsGNAVLqx1pjKJy4FzW5WefSZ551nfZou
9dn1jaI81ofbhVoqtmI5s1NApCv3t7unqP2mmYKix/AnWW9SGFMorVTcP4z0TH26
XRlBRhh1XSGh6Onb0yFe+4rQqwdeyLpJDgHGEMnRnI3gtVsSbECCepwxFg/NGg1n
oMaD7kZxMbfcZKfnpKIZAEkuYCW/zpcuZ0kBoUy+Q7ZBwJPKyyn8ABfQT9za1l40
5NK7nZE90WK+v/hO0HMbMnOkKYyYZ7ZuZFm1bqB7f0jcGukGlrrQ+/4Qvi2t4x49
+b+6qpiI3wOVAmndvRkcZqF82JrkcZ0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:47:27 2025 by rpki-client