Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d572e557-517f-3b23-9a45-f4f6cbdb6c3e.roa
File: d572e557-517f-3b23-9a45-f4f6cbdb6c3e.roa (raw, json)
Hash identifier: zfCPYZVBL97JrbYCVAlIS4I29CEJlGmjNyxWXZakFJY=
Subject key identifier: E1:9B:05:57:DA:D2:FF:18:DC:B1:0F:86:67:73:C0:DD:46:89:54:56
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F432858384FF2224ADFB2363C5530D210
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d572e557-517f-3b23-9a45-f4f6cbdb6c3e.roa
Signing time: Fri 18 Dec 2020 05:00:00 +0000
ROA not before: Fri 18 Dec 2020 05:00:00 +0000
ROA not after: Fri 11 Dec 2026 05:00:00 +0000
asID: 11426
IP address blocks: 24.167.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:4f:f2:22:4a:df:b2:36:3c:55:30:d2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Dec 18 05:00:00 2020 GMT
Not After : Dec 11 05:00:00 2026 GMT
Subject: CN=ca56ee9d-a725-41bb-8a96-cbd19a233905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:da:4a:80:6f:3f:e4:da:b7:69:b8:24:64:94:
be:c7:7f:c4:21:f4:0f:8f:60:c7:bf:85:22:aa:ed:
69:db:cf:90:40:8d:3c:38:4a:f7:7f:ca:46:e2:f0:
af:2c:35:28:0c:0b:55:cb:5c:8f:1e:31:4b:af:f7:
6b:f3:6b:35:de:2b:96:f9:65:8e:6e:8e:46:63:e7:
31:af:5c:ae:e4:d9:aa:94:06:f7:3d:b8:f0:6e:46:
a5:79:80:35:14:e7:8d:2a:12:da:d1:a8:36:26:16:
f4:11:eb:0a:ed:ad:4c:26:3c:fa:45:88:04:0c:55:
1f:cf:92:14:f5:a0:94:bb:4d:72:8a:be:ec:19:69:
a4:80:33:ef:6a:66:e5:ba:ea:a4:91:b3:24:ea:3e:
05:77:17:b7:7b:e0:0b:e6:09:e2:5b:77:f8:0e:50:
76:c7:67:99:bc:28:32:d3:49:0e:38:27:36:c8:d3:
83:cb:58:eb:56:4a:08:74:c7:3b:90:15:86:91:c1:
b0:c6:38:93:18:1c:ea:b4:53:cf:2d:fe:f6:0b:fe:
7b:cb:a4:f3:d4:3b:e7:9e:18:70:f5:95:7d:4a:91:
90:05:bc:a7:d0:19:d3:af:ca:43:cb:ae:c5:ab:18:
f3:53:f5:4a:4c:11:f1:52:60:62:6d:7f:0f:46:63:
46:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9B:05:57:DA:D2:FF:18:DC:B1:0F:86:67:73:C0:DD:46:89:54:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d572e557-517f-3b23-9a45-f4f6cbdb6c3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.167.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:0c:3c:e8:f2:1f:e6:30:7d:cc:77:d9:e7:94:c3:51:b3:f0:
99:cc:b9:a8:11:43:45:07:13:b1:42:41:f3:2b:ab:5d:74:42:
c7:50:b6:09:fe:60:d5:63:22:4e:62:de:12:3d:e4:1b:5e:d8:
a5:b4:c4:da:1d:07:07:e2:8b:96:61:0d:2c:2e:bb:bc:fc:41:
d7:72:7e:a8:f3:93:98:38:34:5f:7d:79:18:f7:02:ca:2d:af:
60:ac:b0:92:f1:a8:04:e6:61:18:24:c3:e1:ba:86:05:a5:45:
22:76:19:70:10:a6:58:fd:0d:8a:01:7e:9e:51:bc:d8:14:c2:
59:5d:d0:b7:b6:e0:68:fd:49:66:4d:ba:5a:cc:de:9d:f1:5d:
e0:bd:a8:16:20:f7:a8:07:19:0e:10:2c:2a:14:e2:fb:ee:6c:
d6:8f:d0:05:1b:fa:7e:db:ee:28:e3:f3:eb:6a:fa:70:1c:1c:
fd:91:55:d4:1d:bf:0a:85:bb:15:9a:d5:73:2c:df:f2:36:3d:
48:54:0a:48:af:cc:6c:19:75:f2:f9:e6:7e:05:aa:8a:a9:7f:
c7:27:b3:4e:29:a8:83:80:f9:b2:f5:07:e1:6b:b3:71:64:5c:
cc:94:65:dc:89:1a:e8:c7:4c:1c:58:66:0f:c4:51:51:3d:cd:
86:db:a3:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDhP8iJK37I2PFUw0hAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTIwMTIxODA1MDAwMFoXDTI2MTIxMTA1MDAwMFowLzEtMCsGA1UEAxMk
Y2E1NmVlOWQtYTcyNS00MWJiLThhOTYtY2JkMTlhMjMzOTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9pKgG8/5Nq3abgkZJS+x3/EIfQPj2DHv4Ui
qu1p28+QQI08OEr3f8pG4vCvLDUoDAtVy1yPHjFLr/dr82s13iuW+WWObo5GY+cx
r1yu5NmqlAb3PbjwbkaleYA1FOeNKhLa0ag2Jhb0EesK7a1MJjz6RYgEDFUfz5IU
9aCUu01yir7sGWmkgDPvambluuqkkbMk6j4Fdxe3e+AL5gniW3f4DlB2x2eZvCgy
00kOOCc2yNODy1jrVkoIdMc7kBWGkcGwxjiTGBzqtFPPLf72C/57y6Tz1Dvnnhhw
9ZV9SpGQBbyn0BnTr8pDy67FqxjzU/VKTBHxUmBibX8PRmNGDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOGbBVfa0v8Y3LEPhmdzwN1GiVRWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZDU3MmU1NTctNTE3Zi0z
YjIzLTlhNDUtZjRmNmNiZGI2YzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGKeAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGkMPOjyH+Ywfcx32eeUw1Gz8JnMuagRQ0UHE7FCQfMrq110QsdQtgn+
YNVjIk5i3hI95Bte2KW0xNodBwfii5ZhDSwuu7z8Qddyfqjzk5g4NF99eRj3Asot
r2CssJLxqATmYRgkw+G6hgWlRSJ2GXAQplj9DYoBfp5RvNgUwlld0Le24Gj9SWZN
ulrM3p3xXeC9qBYg96gHGQ4QLCoU4vvubNaP0AUb+n7b7ijj8+tq+nAcHP2RVdQd
vwqFuxWa1XMs3/I2PUhUCkivzGwZdfL55n4Fqoqpf8cns04pqIOA+bL1B+Frs3Fk
XMyUZdyJGujHTBxYZg/EUVE9zYbbowI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:42:22 2025 by rpki-client