Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40314b4d-9789-377e-9741-c7a9e2e27829.roa
File: 40314b4d-9789-377e-9741-c7a9e2e27829.roa (raw, json)
Hash identifier: WrcISCXAskc0E/fwEyMxydtwAb6qe2uDoFEBM30/hgs=
Subject key identifier: BF:A2:7B:9C:DD:49:0D:F5:ED:FC:86:73:82:A4:8D:8F:A6:DA:A4:27
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584847E0303780A30ACA80CA4F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40314b4d-9789-377e-9741-c7a9e2e27829.roa
Signing time: Sat 21 Dec 2024 14:00:52 +0000
ROA not before: Sat 21 Dec 2024 14:00:52 +0000
ROA not after: Fri 21 Mar 2025 13:00:52 +0000
asID: 7342
IP address blocks: 209.131.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:47:e0:30:37:80:a3:0a:ca:80:ca:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 21 14:00:52 2024 GMT
Not After : Mar 21 13:00:52 2025 GMT
Subject: CN=47bf1839-1b44-47d8-a77f-8bc0737e28a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:ac:84:b1:0b:c7:03:aa:bd:48:2f:51:9f:
e0:ae:db:cd:c7:c4:30:dc:d1:7d:27:f1:30:03:39:
66:36:8a:18:3a:6c:79:b2:92:26:57:7f:41:20:08:
0c:f5:19:dd:6c:96:3e:19:19:b4:69:45:0b:3a:89:
5c:bd:51:06:97:d0:7a:0a:4e:02:8a:cd:c9:5f:62:
15:f6:03:e8:d2:a1:e1:d0:35:87:8e:b1:f4:b9:e9:
4d:bd:00:0b:f0:73:24:05:15:fc:6d:6c:0f:aa:1e:
bf:37:20:8b:d5:22:63:8b:04:af:e1:29:f2:3a:00:
10:16:55:cc:86:94:af:aa:1e:8a:24:0f:85:77:de:
a4:31:9d:99:fe:ab:c3:e9:0d:ad:82:a1:e5:fb:c9:
82:d2:bb:98:3c:73:14:1c:47:4c:07:8b:91:80:e3:
19:74:af:5f:d5:70:b4:99:30:5d:e6:59:e1:f5:8d:
16:1d:b1:2a:73:2f:a4:5b:75:7a:16:75:f1:8b:2c:
06:e7:c6:59:17:13:17:e9:93:73:9e:6c:a8:bd:3c:
be:1c:2a:32:61:1a:cd:0f:13:53:5f:84:ee:8d:a3:
2d:62:7f:63:2b:bd:c3:9f:3a:e4:6a:0d:b7:e8:e7:
5f:31:85:66:45:22:e0:4c:09:9f:1a:33:35:18:45:
0c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A2:7B:9C:DD:49:0D:F5:ED:FC:86:73:82:A4:8D:8F:A6:DA:A4:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40314b4d-9789-377e-9741-c7a9e2e27829.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
209.131.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:8d:8b:8c:e3:4a:d6:d1:51:b9:27:59:20:c7:39:c6:ac:3f:
88:c4:87:ad:f4:4e:e3:c5:45:b9:56:dc:e9:aa:6f:44:70:72:
94:66:82:d3:72:71:20:f0:c1:1f:e1:e8:e9:8b:dc:4c:4c:02:
e7:a9:f3:d5:b6:89:56:f6:a2:c9:05:17:52:c1:09:16:64:e3:
00:00:b3:c1:9d:e8:c6:5e:22:69:e6:cf:a0:e3:68:e6:f8:5d:
33:e2:d8:1b:54:9b:56:bf:37:66:f2:a5:bd:a6:5f:2b:6a:97:
ae:a9:00:ad:bf:c7:62:ab:d3:85:9b:72:62:cf:bb:da:f3:91:
e4:7c:69:56:13:4d:60:a1:66:b5:34:6f:9f:cf:49:2a:ef:2c:
84:80:34:e5:99:0f:0c:90:83:67:fa:c9:68:2b:b5:b0:29:3e:
70:cb:e5:7d:1e:02:47:f1:37:aa:20:3c:d9:3a:ba:33:96:c7:
96:c5:69:cd:98:7d:30:e2:26:8e:6d:9d:89:f2:fd:17:d9:82:
fd:3c:0d:8f:dd:23:7c:d8:4a:c4:ac:34:65:59:19:14:3f:ea:
81:26:4d:b2:45:bc:ef:90:39:a2:be:61:fc:87:6f:72:a5:19:
aa:53:75:52:ff:10:14:db:5c:1a:ad:35:e9:9b:ee:ff:fe:ad:
3c:39:ff:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhH4DA3gKMKyoDKTwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyMTE0MDA1MloXDTI1MDMyMTEzMDA1MlowLzEtMCsGA1UEAxMk
NDdiZjE4MzktMWI0NC00N2Q4LWE3N2YtOGJjMDczN2UyOGEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7mshLELxwOqvUgvUZ/grtvNx8Qw3NF9J/Ew
AzlmNooYOmx5spImV39BIAgM9RndbJY+GRm0aUULOolcvVEGl9B6Ck4Cis3JX2IV
9gPo0qHh0DWHjrH0uelNvQAL8HMkBRX8bWwPqh6/NyCL1SJjiwSv4SnyOgAQFlXM
hpSvqh6KJA+Fd96kMZ2Z/qvD6Q2tgqHl+8mC0ruYPHMUHEdMB4uRgOMZdK9f1XC0
mTBd5lnh9Y0WHbEqcy+kW3V6FnXxiywG58ZZFxMX6ZNznmyovTy+HCoyYRrNDxNT
X4TujaMtYn9jK73Dnzrkag236OdfMYVmRSLgTAmfGjM1GEUMJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL+ie5zdSQ317fyGc4KkjY+m2qQnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDAzMTRiNGQtOTc4OS0z
NzdlLTk3NDEtYzdhOWUyZTI3ODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA+Ni4zjStbRUbknWSDHOcasP4jEh630TuPFRblW3Omqb0RwcpRmgtNy
cSDwwR/h6OmL3ExMAuep89W2iVb2oskFF1LBCRZk4wAAs8Gd6MZeImnmz6DjaOb4
XTPi2BtUm1a/N2bypb2mXytql66pAK2/x2Kr04WbcmLPu9rzkeR8aVYTTWChZrU0
b5/PSSrvLISANOWZDwyQg2f6yWgrtbApPnDL5X0eAkfxN6ogPNk6ujOWx5bFac2Y
fTDiJo5tnYny/RfZgv08DY/dI3zYSsSsNGVZGRQ/6oEmTbJFvO+QOaK+YfyHb3Kl
GapTdVL/EBTbXBqtNemb7v/+rTw5/z0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:39:17 2025 by rpki-client