Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d09f5bcb-c27f-3c59-ae53-d6bebcff7830.roa
File: d09f5bcb-c27f-3c59-ae53-d6bebcff7830.roa (raw, json)
Hash identifier: 22+0/KoXJVjB2Z3C9FEyMHRL/OFh2bJL8fZqRiJGtNU=
Subject key identifier: EB:E3:2B:B8:FE:7D:B0:07:93:1B:0E:6B:63:9B:BE:BF:11:81:AE:A2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6E362A350EF561ED26BA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d09f5bcb-c27f-3c59-ae53-d6bebcff7830.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33462
IP address blocks: 209.23.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6e:36:2a:35:0e:f5:61:ed:26:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=5bc046b6-c754-4ba4-90ae-1fda946f944c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:45:5b:82:0c:2d:3e:59:a0:28:0b:5c:92:f1:
7c:f8:4a:16:13:61:c4:bc:3d:43:34:08:e5:a2:56:
7d:f2:d8:b6:d9:49:4b:dc:2e:1c:bd:c9:ff:41:3b:
02:4e:7e:8f:65:8c:7f:64:57:48:9f:02:d9:87:a2:
e7:49:a7:f5:41:04:80:a4:bf:ca:f0:fe:14:f6:69:
b2:68:34:8e:b0:02:dc:2a:61:b0:17:d8:c7:5c:0b:
6b:a3:0f:50:f9:44:5e:ab:90:14:32:bb:eb:4c:85:
b0:f4:27:ba:2c:e2:45:96:f4:98:60:c7:55:c7:a1:
99:14:07:83:57:0f:06:a7:cc:65:5f:ac:01:9b:cc:
44:d8:1c:a4:a3:b0:84:fd:a7:25:90:f6:40:27:5d:
aa:c8:69:f0:7f:39:9f:e8:35:9c:5d:d1:87:98:32:
b4:f7:2d:93:46:04:52:8a:9e:4c:e6:aa:75:88:6a:
c5:ca:a1:e2:00:fb:72:ac:cf:74:d2:f0:b8:3d:5f:
a9:ee:c9:47:ea:13:55:c8:31:8f:09:ee:87:19:3b:
0f:e6:9f:02:d5:fb:cb:8f:03:85:cf:9e:df:a6:4e:
c5:f5:fe:87:8c:40:3e:81:0b:e8:9b:64:20:bb:29:
f2:21:ac:53:ed:79:69:e6:43:03:c0:1c:c1:91:a9:
b6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E3:2B:B8:FE:7D:B0:07:93:1B:0E:6B:63:9B:BE:BF:11:81:AE:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d09f5bcb-c27f-3c59-ae53-d6bebcff7830.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
209.23.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:fa:2c:d8:c6:a7:a1:f4:52:02:7e:8b:c0:04:2c:c8:21:cf:
84:31:f2:79:56:91:2f:eb:81:09:3a:de:88:6f:c7:20:cc:b2:
2f:21:9e:53:74:ee:5c:03:d3:5b:39:b7:70:96:21:04:44:27:
bc:55:16:32:fa:7d:fb:35:34:68:a4:12:20:d9:24:ab:cf:14:
87:fc:0d:8b:29:1e:07:38:f2:54:cd:7b:91:11:0f:79:8c:d6:
81:de:28:a2:e1:c7:37:d1:96:10:e7:89:f5:fb:14:bc:3a:d9:
5b:11:10:f5:e2:42:f6:a8:e9:5a:38:61:b8:a5:bf:6d:80:4c:
26:51:d5:89:10:21:6d:02:8d:21:4b:b5:2b:b2:78:09:69:1f:
d7:02:1e:f4:d3:8f:df:ff:75:4b:07:f0:ae:72:71:b5:2d:8a:
ca:95:28:54:4e:ad:a2:08:79:b5:02:a7:22:31:9e:b3:bd:15:
b8:41:b8:bb:03:16:54:e9:ba:f6:5a:6e:c2:82:80:f0:d3:40:
39:49:2f:de:f9:0a:33:37:f8:a0:02:cb:a4:d8:f3:a3:10:c9:
4f:63:e6:8e:d0:07:89:be:04:bd:a9:f5:09:2a:36:f4:b5:c1:
5a:e3:0f:4b:69:01:11:61:70:d2:0b:47:cb:bf:6e:01:bf:8c:
6f:31:b8:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebjYqNQ71Ye0mugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
NWJjMDQ2YjYtYzc1NC00YmE0LTkwYWUtMWZkYTk0NmY5NDRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUVbggwtPlmgKAtckvF8+EoWE2HEvD1DNAjl
olZ98ti22UlL3C4cvcn/QTsCTn6PZYx/ZFdInwLZh6LnSaf1QQSApL/K8P4U9mmy
aDSOsALcKmGwF9jHXAtrow9Q+UReq5AUMrvrTIWw9Ce6LOJFlvSYYMdVx6GZFAeD
Vw8Gp8xlX6wBm8xE2Byko7CE/aclkPZAJ12qyGnwfzmf6DWcXdGHmDK09y2TRgRS
ip5M5qp1iGrFyqHiAPtyrM900vC4PV+p7slH6hNVyDGPCe6HGTsP5p8C1fvLjwOF
z57fpk7F9f6HjEA+gQvom2QguynyIaxT7Xlp5kMDwBzBkam2iwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOvjK7j+fbAHkxsOa2Obvr8Rga6iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDA5ZjViY2ItYzI3Zi0z
YzU5LWFlNTMtZDZiZWJjZmY3ODMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RfPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALH6LNjGp6H0UgJ+i8AELMghz4Qx8nlWkS/rgQk63ohvxyDMsi8hnlN0
7lwD01s5t3CWIQREJ7xVFjL6ffs1NGikEiDZJKvPFIf8DYspHgc48lTNe5ERD3mM
1oHeKKLhxzfRlhDnifX7FLw62VsREPXiQvao6Vo4Ybilv22ATCZR1YkQIW0CjSFL
tSuyeAlpH9cCHvTTj9//dUsH8K5ycbUtisqVKFROraIIebUCpyIxnrO9FbhBuLsD
FlTpuvZabsKCgPDTQDlJL975CjM3+KACy6TY86MQyU9j5o7QB4m+BL2p9QkqNvS1
wVrjD0tpARFhcNILR8u/bgG/jG8xuNM=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:24:05 2025 by rpki-client