Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d4d4b07-cb1e-3857-9b69-0c0050a95baa.roa
File: 6d4d4b07-cb1e-3857-9b69-0c0050a95baa.roa (raw, json)
Hash identifier: 0HWYHw2N+NQBpzNmJlXfqaEcM5t0prenXPYzSFCR9Tg=
Subject key identifier: A7:45:DF:18:96:49:0C:E0:E5:5E:46:91:A8:99:5C:D5:88:27:40:67
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858485B6B05D3657CFEF4CB072A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d4d4b07-cb1e-3857-9b69-0c0050a95baa.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 7342
IP address blocks: 209.131.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6b:05:d3:65:7c:fe:f4:cb:07:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=1b6c7719-c26b-4e36-8885-5882c94eb54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:66:3c:ef:46:2a:76:a4:9e:8b:8c:88:4c:58:
8c:85:44:c8:b3:1d:db:77:15:ae:3d:c2:77:6f:6b:
40:35:29:6c:b4:99:35:5e:e9:56:90:26:42:8c:3b:
8a:4a:9f:50:cf:10:3c:74:a9:16:ad:29:e2:5b:b8:
8b:a4:2d:65:83:29:df:be:26:06:81:3c:32:11:e0:
35:30:40:57:e7:2c:7f:45:f2:93:40:98:ae:be:2c:
99:da:d3:50:e5:12:df:2c:59:2b:11:b5:df:0c:f7:
b4:5e:1d:b1:c5:49:2a:7f:1f:00:70:09:ac:5d:15:
08:8a:71:79:2f:d2:e1:78:2a:fb:22:40:40:15:3e:
2a:d2:4a:87:db:aa:18:4c:62:d6:f8:cb:08:c1:18:
68:31:73:15:73:b0:36:dd:0f:2e:a9:ae:7a:d4:fc:
84:1d:43:74:5f:7b:8f:94:f8:20:92:00:95:30:dd:
c1:51:76:97:30:78:bc:86:a9:1a:67:05:34:71:48:
27:e1:80:52:c0:67:7b:42:14:0c:4e:7f:8a:87:f9:
a9:8f:7a:44:db:bd:06:83:0d:a9:3f:09:05:74:79:
47:e6:91:3c:80:47:08:09:91:a1:eb:a8:f4:39:8c:
b2:cd:63:29:66:aa:04:6c:ce:c9:a9:e0:24:23:9e:
74:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:45:DF:18:96:49:0C:E0:E5:5E:46:91:A8:99:5C:D5:88:27:40:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d4d4b07-cb1e-3857-9b69-0c0050a95baa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
209.131.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:d4:b5:10:f7:8f:da:79:64:9f:5f:d9:f9:10:d6:b0:58:b3:
76:3a:cc:ce:ce:16:5c:b7:bb:eb:df:64:d4:db:7c:be:f8:e2:
97:70:a2:ab:3d:0b:46:7b:c6:01:bf:16:26:06:ac:dc:bd:13:
75:a3:6d:ff:53:63:40:fb:b6:9c:12:94:24:0f:6b:72:c4:d1:
77:4d:3e:21:a6:05:70:0a:de:58:c7:02:9b:a3:19:ba:08:5d:
48:ed:b8:cc:1c:d5:ee:e1:62:5f:77:9c:fc:ac:98:97:5d:3e:
9c:d8:15:d9:8a:55:75:58:f6:af:52:52:58:4f:e2:b8:de:f9:
ca:7b:75:8f:3e:3f:bf:2e:4c:39:fb:42:e2:65:f7:9e:ea:1a:
20:36:5e:eb:bc:c6:96:db:e2:f3:64:91:a5:f4:cf:4f:46:1a:
fd:c2:0a:85:d9:56:08:98:0b:21:5c:aa:75:7c:db:b1:8c:1a:
0a:53:9e:0d:f3:6f:66:1f:ed:72:67:cf:c4:42:ad:a2:7b:10:
11:bf:2d:6d:df:bb:e3:9b:73:fa:1e:57:ea:4e:df:ca:78:25:
d2:0f:24:de:83:40:dd:4c:4f:d5:52:0b:4b:79:3c:0f:c1:95:
03:4e:e4:8e:c1:ac:ac:a3:7a:a9:12:d8:07:35:8f:27:6e:53:
52:62:70:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhbawXTZXz+9MsHKgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk
MWI2Yzc3MTktYzI2Yi00ZTM2LTg4ODUtNTg4MmM5NGViNTRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2Y870YqdqSei4yITFiMhUTIsx3bdxWuPcJ3
b2tANSlstJk1XulWkCZCjDuKSp9QzxA8dKkWrSniW7iLpC1lgynfviYGgTwyEeA1
MEBX5yx/RfKTQJiuviyZ2tNQ5RLfLFkrEbXfDPe0Xh2xxUkqfx8AcAmsXRUIinF5
L9LheCr7IkBAFT4q0kqH26oYTGLW+MsIwRhoMXMVc7A23Q8uqa561PyEHUN0X3uP
lPggkgCVMN3BUXaXMHi8hqkaZwU0cUgn4YBSwGd7QhQMTn+Kh/mpj3pE270Ggw2p
PwkFdHlH5pE8gEcICZGh66j0OYyyzWMpZqoEbM7JqeAkI550mwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKdF3xiWSQzg5V5GkaiZXNWIJ0BnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmQ0ZDRiMDctY2IxZS0z
ODU3LTliNjktMGMwMDUwYTk1YmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALvUtRD3j9p5ZJ9f2fkQ1rBYs3Y6zM7OFly3u+vfZNTbfL744pdwoqs9
C0Z7xgG/FiYGrNy9E3Wjbf9TY0D7tpwSlCQPa3LE0XdNPiGmBXAK3ljHApujGboI
XUjtuMwc1e7hYl93nPysmJddPpzYFdmKVXVY9q9SUlhP4rje+cp7dY8+P78uTDn7
QuJl957qGiA2Xuu8xpbb4vNkkaX0z09GGv3CCoXZVgiYCyFcqnV827GMGgpTng3z
b2Yf7XJnz8RCraJ7EBG/LW3fu+Obc/oeV+pO38p4JdIPJN6DQN1MT9VSC0t5PA/B
lQNO5I7BrKyjeqkS2Ac1jyduU1JicP8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:42:19 2025 by rpki-client