Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d661edf3-c3a3-3437-9d87-9410ad1124c1.roa
File: d661edf3-c3a3-3437-9d87-9410ad1124c1.roa (raw, json)
Hash identifier: xZF24m5rSY3lhwL1ziCfzMdBwSPzMnl+BdKnpp4GV9A=
Subject key identifier: 3D:FC:92:4C:7C:4B:C1:08:F3:79:74:9A:F4:EF:70:33:77:98:1C:5A
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D12253918B203A5C2F0D80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d661edf3-c3a3-3437-9d87-9410ad1124c1.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 7843
IP address blocks: 72.129.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:22:53:91:8b:20:3a:5c:2f:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=f7c52518-04cb-43fa-b8d6-2a35f26d5900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:18:e3:04:12:85:0a:f3:aa:c5:c1:07:df:40:
79:04:11:be:18:f4:9a:14:a0:19:70:47:94:8b:0d:
7c:11:4a:0f:ef:8e:1f:a2:4f:0b:56:0a:d7:93:4f:
7c:84:7d:42:58:cf:da:a9:51:95:8d:26:9d:81:c4:
c5:fa:f6:ff:c3:31:14:5a:e7:15:20:9b:49:a2:c9:
45:94:be:24:cf:da:05:72:91:3b:ac:b1:cf:fd:9b:
0b:2c:eb:49:ae:f1:42:43:b9:c3:c4:1f:09:22:40:
1c:d7:6b:f9:a2:28:e1:70:c7:ae:0b:17:a5:49:e2:
5d:d5:66:3b:5e:a4:2f:9f:3a:91:7b:db:1d:b7:a5:
cb:dc:85:c0:31:96:4c:24:35:a6:bb:02:e8:5f:37:
b5:64:4e:84:b3:9e:d9:57:e6:83:f6:c0:c8:32:2f:
da:58:94:17:6d:46:68:3c:b1:fa:0f:93:9a:ed:a8:
4b:8a:e3:4d:e4:3f:5e:ee:bc:5b:7f:32:dd:01:39:
de:29:fc:6a:a3:83:ea:0b:78:6d:a0:fb:a6:c4:ba:
44:af:ce:ce:e9:92:c0:21:88:99:7e:8e:1f:48:21:
01:94:58:fc:e4:0c:54:37:5c:a3:6b:d6:7c:af:74:
b3:84:e9:21:7f:4b:e6:46:3c:df:74:19:a0:d3:cb:
b5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FC:92:4C:7C:4B:C1:08:F3:79:74:9A:F4:EF:70:33:77:98:1C:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d661edf3-c3a3-3437-9d87-9410ad1124c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.129.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:40:e7:91:3d:c4:94:0b:1c:93:84:9b:7f:7f:7a:b0:53:c5:
e7:53:8d:5b:a3:69:0a:48:20:1c:37:db:74:df:29:11:5f:68:
71:67:74:5f:7d:cf:6d:f4:51:34:de:4b:65:ff:61:87:ed:ec:
7e:f3:82:25:5a:cb:5f:31:20:b8:ec:fb:39:99:92:72:bb:bb:
08:47:91:14:26:1b:bd:b9:06:2d:13:aa:29:b6:16:33:d1:71:
47:20:f0:9e:4a:d6:12:ce:81:ea:df:82:5f:33:6b:d3:3c:ce:
c1:e0:49:76:72:f9:1e:87:2b:4f:78:85:d8:ec:1a:e7:20:56:
14:7e:25:96:60:82:7b:7e:bc:b2:3f:ba:21:82:57:e0:a5:bf:
02:f5:e4:41:d4:19:e2:ef:70:e6:d8:3c:75:e8:21:c7:b4:44:
9b:35:2c:f9:ea:73:0a:e5:0d:79:c1:cf:e9:3f:f8:03:7d:53:
8c:b8:59:c6:b5:5f:37:1a:9f:74:15:53:cd:89:8a:60:44:89:
2a:75:18:32:e0:8b:62:33:d0:5b:f4:4b:0f:a1:da:cc:61:cd:
cc:2f:08:51:eb:d4:91:72:79:d0:32:4d:f7:4d:a3:01:f5:c8:
2f:fa:30:09:70:14:ed:a6:29:44:23:a6:a1:2f:3f:f9:fe:9b:
4e:d3:06:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0SJTkYsgOlwvDYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
ZjdjNTI1MTgtMDRjYi00M2ZhLWI4ZDYtMmEzNWYyNmQ1OTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxjjBBKFCvOqxcEH30B5BBG+GPSaFKAZcEeU
iw18EUoP744fok8LVgrXk098hH1CWM/aqVGVjSadgcTF+vb/wzEUWucVIJtJoslF
lL4kz9oFcpE7rLHP/ZsLLOtJrvFCQ7nDxB8JIkAc12v5oijhcMeuCxelSeJd1WY7
XqQvnzqRe9sdt6XL3IXAMZZMJDWmuwLoXze1ZE6Es57ZV+aD9sDIMi/aWJQXbUZo
PLH6D5Oa7ahLiuNN5D9e7rxbfzLdATneKfxqo4PqC3htoPumxLpEr87O6ZLAIYiZ
fo4fSCEBlFj85AxUN1yja9Z8r3SzhOkhf0vmRjzfdBmg08u15wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD38kkx8S8EI83l0mvTvcDN3mBxaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZDY2MWVkZjMtYzNhMy0z
NDM3LTlkODctOTQxMGFkMTEyNGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASIHcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAdA55E9xJQLHJOEm39/erBTxedTjVujaQpIIBw323TfKRFfaHFndF99
z230UTTeS2X/YYft7H7zgiVay18xILjs+zmZknK7uwhHkRQmG725Bi0Tqim2FjPR
cUcg8J5K1hLOgerfgl8za9M8zsHgSXZy+R6HK094hdjsGucgVhR+JZZggnt+vLI/
uiGCV+ClvwL15EHUGeLvcObYPHXoIce0RJs1LPnqcwrlDXnBz+k/+AN9U4y4Wca1
Xzcan3QVU82JimBEiSp1GDLgi2Iz0Fv0Sw+h2sxhzcwvCFHr1JFyedAyTfdNowH1
yC/6MAlwFO2mKUQjpqEvP/n+m07TBic=
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:00:03 2025 by rpki-client