Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/507fb3e6-e758-31ca-b872-c37747e86265.roa
File: 507fb3e6-e758-31ca-b872-c37747e86265.roa (raw, json)
Hash identifier: BEHcXoXiUJP+2JnEo0NQ4cQ0WJvGbMlYld6s05KnkmQ=
Subject key identifier: 5B:5E:AD:C1:42:03:00:77:28:FF:B4:75:F4:71:9A:1F:A3:72:0F:8D
Certificate issuer: /CN=dfe98912-51fc-490e-b52f-0f6db9a2847e
Certificate serial: 010D0C9F432858486960B65C90D40070EC848180
Authority key identifier: EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/507fb3e6-e758-31ca-b872-c37747e86265.roa
Signing time: Thu 02 Jan 2025 14:01:38 +0000
ROA not before: Thu 02 Jan 2025 14:01:38 +0000
ROA not after: Wed 02 Apr 2025 13:01:38 +0000
asID: 834
IP address blocks: 209.240.28.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:b6:5c:90:d4:00:70:ec:84:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe98912-51fc-490e-b52f-0f6db9a2847e
Validity
Not Before: Jan 2 14:01:38 2025 GMT
Not After : Apr 2 13:01:38 2025 GMT
Subject: CN=25afb0a5-da87-4498-a18c-39c816b4c915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:eb:68:d3:f1:60:17:fd:1d:b4:1b:78:62:33:
8b:4d:c0:fa:ea:c1:a6:52:cf:18:f5:aa:20:4e:9e:
23:bb:a5:65:ec:69:57:6a:a6:f2:b9:25:62:7f:1c:
7f:0a:11:a9:52:a9:8d:f5:9d:c3:39:c7:83:3d:07:
5e:fa:cb:0a:5e:4d:45:12:99:6f:5e:75:3f:3f:df:
ab:00:b8:e4:a1:2f:b4:3b:2d:5e:68:b9:27:09:b1:
45:e9:d9:a5:d7:e0:93:28:60:d6:2a:2c:b2:17:57:
e9:52:75:25:ec:12:7f:d8:3d:76:65:55:58:69:c2:
58:07:7c:36:05:28:1a:84:ee:eb:ba:b8:03:5c:96:
6c:b7:7b:e2:61:cb:c2:e5:58:30:f1:9d:a4:1d:59:
a9:87:45:9b:b8:f9:ab:33:4f:60:84:2e:5d:fd:12:
6c:4c:44:30:9a:36:4d:4c:8f:6f:f6:91:5b:3a:34:
9b:67:b1:a8:0e:6e:22:23:60:90:b1:5d:8c:50:27:
c6:c9:9c:18:44:d5:be:57:6e:b7:46:5e:df:8b:1b:
02:40:51:ca:cd:9b:18:be:ef:89:e9:47:65:26:91:
00:76:19:bf:3c:2a:69:60:1a:4e:4d:80:a7:d8:93:
4a:ee:96:5f:44:d2:b1:47:71:15:fa:70:d4:e9:e8:
9d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5E:AD:C1:42:03:00:77:28:FF:B4:75:F4:71:9A:1F:A3:72:0F:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/507fb3e6-e758-31ca-b872-c37747e86265.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl
X509v3 Authority Key Identifier:
keyid:EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer
sbgp-ipAddrBlock: critical
IPv4:
209.240.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:52:21:16:7e:21:83:d6:13:02:2c:70:d5:0f:af:60:7c:55:
43:48:0e:b6:97:a9:6d:74:85:60:3c:67:be:57:82:19:c4:8b:
b8:be:89:64:95:e7:9a:dc:0c:6f:5f:51:ff:6a:07:98:9f:04:
8f:63:de:af:07:45:0d:c8:62:a0:4e:61:17:93:66:70:bc:82:
49:b5:f0:50:a8:e8:9b:63:4b:65:35:58:d1:b3:b3:c8:a1:35:
41:41:e4:7f:b6:76:02:ad:7e:4a:bb:cf:a3:9f:e6:5b:28:98:
21:8e:06:36:5d:d6:13:19:b2:3b:b3:70:6e:75:c9:fe:ad:4e:
1a:ba:73:9d:8e:1e:3c:26:cd:6c:aa:ac:4b:31:cf:8b:46:4e:
20:eb:98:71:77:ca:f2:4d:63:a5:56:f6:72:cd:0b:43:49:a0:
27:92:83:75:bd:87:47:bf:5c:81:99:be:d9:4d:b6:29:e3:a0:
6b:e3:b0:1f:a2:0e:7b:30:89:02:e7:d7:8e:45:9b:5b:14:79:
8a:ae:fa:e1:1f:48:7a:fc:b9:86:69:d8:c3:60:c9:db:3b:6e:
94:c2:34:ce:5c:36:0c:3b:52:08:8a:50:d6:93:5c:78:98:cd:
16:f9:02:80:b0:f6:af:f5:ec:0e:29:3c:bd:d7:53:33:02:32:
94:8d:b6:5d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhpYLZckNQAcOyEgYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGZlOTg5MTItNTFmYy00OTBlLWI1MmYtMGY2ZGI5YTI4
NDdlMB4XDTI1MDEwMjE0MDEzOFoXDTI1MDQwMjEzMDEzOFowLzEtMCsGA1UEAxMk
MjVhZmIwYTUtZGE4Ny00NDk4LWExOGMtMzljODE2YjRjOTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOto0/FgF/0dtBt4YjOLTcD66sGmUs8Y9aog
Tp4ju6Vl7GlXaqbyuSVifxx/ChGpUqmN9Z3DOceDPQde+ssKXk1FEplvXnU/P9+r
ALjkoS+0Oy1eaLknCbFF6dml1+CTKGDWKiyyF1fpUnUl7BJ/2D12ZVVYacJYB3w2
BSgahO7rurgDXJZst3viYcvC5Vgw8Z2kHVmph0WbuPmrM09ghC5d/RJsTEQwmjZN
TI9v9pFbOjSbZ7GoDm4iI2CQsV2MUCfGyZwYRNW+V263Rl7fixsCQFHKzZsYvu+J
6UdlJpEAdhm/PCppYBpOTYCn2JNK7pZfRNKxR3EV+nDU6eidNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFtercFCAwB3KP+0dfRxmh+jcg+NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5
ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZkYjlhMjg0N2UvNTA3ZmIzZTYtZTc1OC0z
MWNhLWI4NzItYzM3NzQ3ZTg2MjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZlOTg5MTItNTFmYy00OTBlLWI1
MmYtMGY2ZGI5YTI4NDdlL2RmZTk4OTEyLTUxZmMtNDkwZS1iNTJmLTBmNmRiOWEy
ODQ3ZS5jcmwwHwYDVR0jBBgwFoAU7IFTNMBbGPl+30NKbxqXz6CvV2kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZk
YjlhMjg0N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0fAcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJRSIRZ+IYPWEwIscNUPr2B8VUNIDraXqW10hWA8Z75XghnEi7i+iWSV
55rcDG9fUf9qB5ifBI9j3q8HRQ3IYqBOYReTZnC8gkm18FCo6JtjS2U1WNGzs8ih
NUFB5H+2dgKtfkq7z6Of5lsomCGOBjZd1hMZsjuzcG51yf6tThq6c52OHjwmzWyq
rEsxz4tGTiDrmHF3yvJNY6VW9nLNC0NJoCeSg3W9h0e/XIGZvtlNtinjoGvjsB+i
DnswiQLn145Fm1sUeYqu+uEfSHr8uYZp2MNgyds7bpTCNM5cNgw7UgiKUNaTXHiY
zRb5AoCw9q/17A4pPL3XUzMCMpSNtl0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:58:34 2025 by rpki-client