Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73943a2d-24f5-3619-b3a8-476b23f5bbce.roa
File: 73943a2d-24f5-3619-b3a8-476b23f5bbce.roa (raw, json)
Hash identifier: OwoYEMJQF6I6mWmauaq5k1mZPexi+3MSGyDw5MWUF38=
Subject key identifier: 9E:9B:5A:8A:3C:41:4E:21:75:63:E3:A9:98:11:EF:EB:53:FA:93:40
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858483455891B8D486A778EDF6B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73943a2d-24f5-3619-b3a8-476b23f5bbce.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 7342
IP address blocks: 209.131.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:89:1b:8d:48:6a:77:8e:df:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=7ffe87e6-c472-415e-9abb-82a70d1a2c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bf:16:4e:8f:96:10:a1:a4:69:2e:52:93:8d:
f7:8e:37:93:7d:1c:6d:02:e2:bd:4f:9e:92:00:22:
66:87:34:29:4b:81:6d:eb:9e:85:b2:e1:d1:ca:b4:
2d:98:31:fb:44:ff:0b:29:cb:8c:0b:03:79:ed:ab:
12:eb:a7:28:51:28:f2:6e:e6:7a:c9:67:75:c2:64:
0c:f7:67:d7:a4:d4:17:e5:eb:bf:b9:d3:57:a0:47:
cb:26:e5:e8:e4:27:00:61:04:f0:09:e6:5c:4c:a4:
26:04:da:b3:f7:06:1d:be:1b:97:ff:1f:4e:21:f2:
fd:72:d0:ed:cc:1e:33:84:22:37:6a:02:b4:99:a7:
22:a2:b2:57:46:cc:7e:eb:6f:a2:5f:a8:81:8a:c2:
2b:1d:0c:30:ef:d4:5e:8b:55:5a:bf:93:3a:48:bc:
76:25:31:88:93:46:b2:8b:13:06:c2:d1:d9:71:04:
b7:1b:95:0b:0c:d1:a6:5d:35:94:26:05:b6:c6:52:
8b:b6:91:de:e6:fd:fd:c3:50:05:75:1c:e3:a5:00:
78:66:55:f5:90:7f:02:b3:54:52:9e:9c:f9:9c:a2:
52:e0:08:52:98:c0:8c:f6:b3:1b:0a:76:fa:a1:92:
0d:b7:02:dd:7a:04:ab:f1:d1:c3:84:9c:37:38:8e:
f6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9B:5A:8A:3C:41:4E:21:75:63:E3:A9:98:11:EF:EB:53:FA:93:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73943a2d-24f5-3619-b3a8-476b23f5bbce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
209.131.167.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:17:aa:23:ee:51:a7:06:d3:be:e8:90:16:b9:43:bb:88:94:
9c:f6:37:72:7d:24:db:fb:c2:3c:95:91:a2:c5:c0:c4:bf:60:
2c:2b:5f:fd:e2:ef:a6:5a:1f:9f:1f:0b:0b:a1:cf:6b:b3:55:
08:ae:99:b8:0d:37:ac:46:75:bb:ef:f7:d1:b3:8e:e6:77:ca:
b2:53:bb:4e:a8:3c:70:69:7c:93:1c:d2:fe:fc:3a:e2:a7:7e:
f8:85:d6:b1:43:fa:b5:09:32:a6:c8:5e:83:bb:d4:8b:9d:35:
b7:15:40:65:73:ab:ab:ab:36:75:71:1c:9f:84:b4:5f:b0:bb:
5a:f9:5a:c8:15:8c:a5:6f:c5:b4:ce:f8:6d:fe:bf:50:10:73:
0c:ea:9b:ac:76:ad:9d:62:a7:fb:c2:8b:89:0a:ec:11:2e:c6:
cf:e2:c0:b5:03:2a:81:87:df:c9:e8:13:9e:a0:de:e7:68:02:
bb:a1:48:e3:10:4f:ce:4d:e1:ef:b6:64:ba:64:b3:37:1d:32:
f6:cb:b7:28:12:6f:f6:b6:6c:bc:7f:b4:81:72:6f:89:21:c5:
d6:59:8a:67:63:25:0c:12:ed:bd:b2:6c:b4:2f:26:ae:4b:e7:
56:5f:24:71:f1:42:33:65:02:27:48:2f:07:e3:04:eb:d6:c4:
dd:93:8d:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg0VYkbjUhqd47fawAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk
N2ZmZTg3ZTYtYzQ3Mi00MTVlLTlhYmItODJhNzBkMWEyYzE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo78WTo+WEKGkaS5Sk433jjeTfRxtAuK9T56S
ACJmhzQpS4Ft656FsuHRyrQtmDH7RP8LKcuMCwN57asS66coUSjybuZ6yWd1wmQM
92fXpNQX5eu/udNXoEfLJuXo5CcAYQTwCeZcTKQmBNqz9wYdvhuX/x9OIfL9ctDt
zB4zhCI3agK0maciorJXRsx+62+iX6iBisIrHQww79Rei1Vav5M6SLx2JTGIk0ay
ixMGwtHZcQS3G5ULDNGmXTWUJgW2xlKLtpHe5v39w1AFdRzjpQB4ZlX1kH8Cs1RS
npz5nKJS4AhSmMCM9rMbCnb6oZINtwLdegSr8dHDhJw3OI72KQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ6bWoo8QU4hdWPjqZgR7+tT+pNAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzM5NDNhMmQtMjRmNS0z
NjE5LWIzYTgtNDc2YjIzZjViYmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG0XqiPuUacG077okBa5Q7uIlJz2N3J9JNv7wjyVkaLFwMS/YCwrX/3i
76ZaH58fCwuhz2uzVQiumbgNN6xGdbvv99GzjuZ3yrJTu06oPHBpfJMc0v78OuKn
fviF1rFD+rUJMqbIXoO71IudNbcVQGVzq6urNnVxHJ+EtF+wu1r5WsgVjKVvxbTO
+G3+v1AQcwzqm6x2rZ1ip/vCi4kK7BEuxs/iwLUDKoGH38noE56g3udoAruhSOMQ
T85N4e+2ZLpkszcdMvbLtygSb/a2bLx/tIFyb4khxdZZimdjJQwS7b2ybLQvJq5L
51ZfJHHxQjNlAidILwfjBOvWxN2TjQs=
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:50:23 2025 by rpki-client