Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cf72ba59-053f-3de2-833b-4c405ca166b0.roa
File: cf72ba59-053f-3de2-833b-4c405ca166b0.roa (raw, json)
Hash identifier: 7IADROUZ5bK7SNFI5zhXrMgQbTXR52rj5+ot1IyLyOo=
Subject key identifier: 58:33:12:89:CF:77:73:24:63:07:3A:7A:09:66:58:CF:6E:3E:CA:D0
Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial: 010D0C9F432858484EDAC4C0F57CE58751C223C0
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cf72ba59-053f-3de2-833b-4c405ca166b0.roa
Signing time: Tue 24 Dec 2024 02:00:38 +0000
ROA not before: Tue 24 Dec 2024 02:00:38 +0000
ROA not after: Mon 24 Mar 2025 01:00:38 +0000
asID: 14061
IP address blocks: 209.38.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:da:c4:c0:f5:7c:e5:87:51:c2:23:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Validity
Not Before: Dec 24 02:00:38 2024 GMT
Not After : Mar 24 01:00:38 2025 GMT
Subject: CN=a50a7051-4a01-4868-bcbe-21137437e44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a9:78:8c:d8:c1:2f:f2:b2:3a:d2:35:18:da:
0a:2d:81:38:f6:fa:13:e8:15:cf:8d:8a:87:a7:e6:
a9:dc:e1:3d:13:a1:4c:53:dd:d9:be:3b:f3:0f:e0:
25:77:49:7f:3f:73:44:41:45:78:be:09:76:97:7f:
e9:9a:d7:ce:b2:ae:95:e9:7c:4f:59:c0:47:1e:bc:
91:c4:04:3e:83:01:3a:44:4e:00:a3:7a:bb:fe:7b:
1f:f7:ab:dc:d1:ec:84:21:52:9a:ae:8c:9a:3a:5a:
aa:b1:51:a0:43:6d:9e:49:ab:10:bd:36:68:d9:37:
4a:5d:84:04:b9:07:07:a0:96:83:b7:14:8e:ab:f6:
89:f6:25:13:1a:da:a8:5c:a4:66:d8:2d:39:29:2c:
36:78:6c:01:5b:1b:6d:40:34:af:72:4c:4b:0b:ba:
70:51:2b:71:61:88:52:c3:2e:15:81:b7:e4:96:42:
43:2c:80:9e:b4:83:ab:0c:d3:28:5e:6e:c7:6f:da:
35:05:09:1c:f9:42:eb:8d:b1:30:b3:80:05:7e:3b:
7b:db:f3:c3:8a:3c:cf:16:00:a8:fb:f9:95:f9:98:
b7:a3:26:12:b7:14:ec:a5:c8:2a:f9:75:eb:c1:10:
73:70:ae:0e:7c:af:f0:3a:b4:8f:02:24:61:18:76:
9c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:33:12:89:CF:77:73:24:63:07:3A:7A:09:66:58:CF:6E:3E:CA:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cf72ba59-053f-3de2-833b-4c405ca166b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
X509v3 Authority Key Identifier:
keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
sbgp-ipAddrBlock: critical
IPv4:
209.38.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:cf:03:ab:29:8c:4e:10:77:9e:37:5c:ee:34:9e:ea:75:2d:
5b:1e:50:04:48:79:e3:4a:6a:2d:1c:90:91:2e:a7:a9:a4:a0:
1f:3b:86:39:28:f5:ee:d2:ef:e9:d1:13:45:9a:12:1c:9f:19:
4d:3b:98:65:a4:13:f6:3a:4c:ed:9a:d9:5d:fe:06:e0:ec:de:
ff:8c:b0:12:00:d7:2d:45:21:a9:16:a3:0f:40:4b:a5:e2:15:
cd:b1:b0:68:fc:f0:62:60:aa:1a:cb:e7:51:46:0d:30:e9:9a:
cc:2b:03:71:a5:42:dd:a1:31:50:f9:44:26:62:63:be:b8:1e:
aa:e8:cd:3d:8b:89:d7:e4:86:67:81:e5:43:5e:72:cd:32:27:
bf:ee:f0:00:81:fb:1f:13:0a:11:ea:9b:36:51:8f:af:76:9f:
55:4b:59:b5:37:08:f3:c7:ea:fa:f0:10:ad:4f:b9:17:9d:29:
48:b1:90:65:b8:51:d7:f9:6a:7f:ca:fb:06:07:e2:d9:f2:5f:
59:14:ad:fe:46:8e:1a:63:3b:fd:bb:ad:4c:0a:d3:dc:51:ba:
84:5d:94:03:c7:46:ba:73:6d:f0:ff:b2:c7:f7:10:29:50:e7:
fc:86:1c:c2:ad:fa:04:de:42:18:dc:1d:3c:26:67:a5:88:52:
0c:49:71:0f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhO2sTA9Xzlh1HCI8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTI0MTIyNDAyMDAzOFoXDTI1MDMyNDAxMDAzOFowLzEtMCsGA1UEAxMk
YTUwYTcwNTEtNGEwMS00ODY4LWJjYmUtMjExMzc0MzdlNDRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Kl4jNjBL/KyOtI1GNoKLYE49voT6BXPjYqH
p+ap3OE9E6FMU93ZvjvzD+Ald0l/P3NEQUV4vgl2l3/pmtfOsq6V6XxPWcBHHryR
xAQ+gwE6RE4Ao3q7/nsf96vc0eyEIVKaroyaOlqqsVGgQ22eSasQvTZo2TdKXYQE
uQcHoJaDtxSOq/aJ9iUTGtqoXKRm2C05KSw2eGwBWxttQDSvckxLC7pwUStxYYhS
wy4VgbfklkJDLICetIOrDNMoXm7Hb9o1BQkc+ULrjbEws4AFfjt72/PDijzPFgCo
+/mV+Zi3oyYStxTspcgq+XXrwRBzcK4OfK/wOrSPAiRhGHacJQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFgzEonPd3MkYwc6eglmWM9uPsrQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvY2Y3MmJhNTktMDUzZi0z
ZGUyLTgzM2ItNGM0MDVjYTE2NmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0SYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAns8DqymMThB3njdc7jSe6nUtWx5QBEh540pqLRyQkS6nqaSgHzuGOSj1
7tLv6dETRZoSHJ8ZTTuYZaQT9jpM7ZrZXf4G4Oze/4ywEgDXLUUhqRajD0BLpeIV
zbGwaPzwYmCqGsvnUUYNMOmazCsDcaVC3aExUPlEJmJjvrgequjNPYuJ1+SGZ4Hl
Q15yzTInv+7wAIH7HxMKEeqbNlGPr3afVUtZtTcI88fq+vAQrU+5F50pSLGQZbhR
1/lqf8r7Bgfi2fJfWRSt/kaOGmM7/butTArT3FG6hF2UA8dGunNt8P+yx/cQKVDn
/IYcwq36BN5CGNwdPCZnpYhSDElxDw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:27:54 2025 by rpki-client