Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9c23e29-5b04-3904-9b53-e42822ad8212.roa
File: b9c23e29-5b04-3904-9b53-e42822ad8212.roa (raw, json)
Hash identifier: Jijj8XsQER0x8qQunjkGEABOoDBOFekMUrk8aUwJR+g=
Subject key identifier: 66:F0:0B:B7:99:25:50:4A:E6:60:27:C1:EE:EF:FD:3C:9B:E4:FC:7B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858485B6B0667F8A19738C0ED4580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9c23e29-5b04-3904-9b53-e42822ad8212.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 7342
IP address blocks: 209.131.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6b:06:67:f8:a1:97:38:c0:ed:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=92639451-a0a9-4ad3-856b-bb4665b6f3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:16:38:a4:cb:50:6c:a8:17:ce:34:2d:49:f3:
bb:40:6c:60:90:00:8e:57:3d:b2:74:a3:1b:19:6b:
66:d9:6c:ee:41:bf:64:89:4e:1a:d3:81:7c:e0:5e:
f6:68:5e:41:e3:18:d3:42:67:92:61:53:e6:7d:b1:
99:28:9d:7a:f0:b8:8f:7c:25:22:5e:23:2d:5b:b6:
ab:32:88:c1:53:f7:68:76:20:64:bf:4c:ca:a0:b6:
19:9b:48:07:29:fd:9b:7c:68:2a:61:5b:a5:36:f0:
26:54:e5:aa:d6:85:68:a5:a2:d9:3f:3a:99:02:25:
0b:80:e1:68:bd:bc:01:51:61:6a:c5:d7:05:ce:f5:
ea:10:2e:f4:90:4c:61:35:2f:8a:f9:e2:e5:15:cb:
4b:11:6f:d2:b5:26:30:e0:0b:39:9d:34:1c:43:06:
8f:9a:ed:96:91:bd:30:77:e0:aa:ee:92:ab:13:c0:
fc:44:69:56:b5:e3:43:93:21:df:04:9b:17:de:99:
7b:32:96:ab:c1:6c:b6:25:f4:ea:ca:61:77:13:1a:
b7:52:9c:28:f8:d8:fc:15:42:79:31:ec:0f:31:e4:
af:27:25:61:62:8f:07:98:6f:b8:0e:d6:32:44:cb:
81:e0:21:ea:5b:47:c5:31:02:13:e7:cc:31:75:41:
6b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F0:0B:B7:99:25:50:4A:E6:60:27:C1:EE:EF:FD:3C:9B:E4:FC:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9c23e29-5b04-3904-9b53-e42822ad8212.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
209.131.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:34:48:50:69:c1:a2:88:ce:e8:21:6a:6c:bb:28:d6:70:e2:
65:5c:18:c7:4e:b5:69:e0:d9:ac:9a:f6:d3:9c:86:64:d6:26:
df:7a:f7:55:d5:af:e3:45:f7:53:4d:43:98:cc:f1:b2:5d:09:
e0:b3:29:13:5a:40:7b:e2:aa:92:3f:eb:27:2e:40:4a:52:d5:
b4:a9:c4:2f:f7:85:64:d9:ae:6d:45:d1:20:1d:c3:f2:16:25:
07:31:e1:f0:d2:c0:f9:d0:a7:38:cc:41:27:8f:26:f4:48:46:
6c:6d:68:72:6e:c4:81:d5:71:9b:c0:8d:12:b0:ac:77:31:7d:
6b:d9:fa:94:aa:23:58:e5:a4:10:00:84:a1:78:74:9e:ac:d5:
73:d3:80:e0:50:c3:75:69:6f:49:ff:ad:10:3c:7a:65:a4:16:
a6:45:96:e7:3f:21:4c:52:1c:87:ca:8e:75:e5:96:fd:48:1e:
92:50:fc:8c:d5:97:53:8b:85:f8:ac:c3:f5:d6:96:cc:c4:2b:
8c:39:a7:2f:84:95:6f:c4:e9:cb:32:aa:ea:b7:af:d8:d2:e1:
93:b2:ec:46:9b:c3:ca:cc:98:ad:21:72:cf:0d:bb:d7:61:ad:
08:dc:9f:bd:9b:7a:85:96:66:29:a5:fa:b6:8f:d2:ee:38:79:
3b:ae:7f:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhbawZn+KGXOMDtRYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk
OTI2Mzk0NTEtYTBhOS00YWQzLTg1NmItYmI0NjY1YjZmM2ZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BY4pMtQbKgXzjQtSfO7QGxgkACOVz2ydKMb
GWtm2WzuQb9kiU4a04F84F72aF5B4xjTQmeSYVPmfbGZKJ168LiPfCUiXiMtW7ar
MojBU/dodiBkv0zKoLYZm0gHKf2bfGgqYVulNvAmVOWq1oVopaLZPzqZAiULgOFo
vbwBUWFqxdcFzvXqEC70kExhNS+K+eLlFctLEW/StSYw4As5nTQcQwaPmu2Wkb0w
d+Cq7pKrE8D8RGlWteNDkyHfBJsX3pl7MparwWy2JfTqymF3Exq3Upwo+Nj8FUJ5
MewPMeSvJyVhYo8HmG+4DtYyRMuB4CHqW0fFMQIT58wxdUFr8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGbwC7eZJVBK5mAnwe7v/Tyb5Px7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjljMjNlMjktNWIwNC0z
OTA0LTliNTMtZTQyODIyYWQ4MjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF80SFBpwaKIzughamy7KNZw4mVcGMdOtWng2aya9tOchmTWJt9691XV
r+NF91NNQ5jM8bJdCeCzKRNaQHviqpI/6ycuQEpS1bSpxC/3hWTZrm1F0SAdw/IW
JQcx4fDSwPnQpzjMQSePJvRIRmxtaHJuxIHVcZvAjRKwrHcxfWvZ+pSqI1jlpBAA
hKF4dJ6s1XPTgOBQw3Vpb0n/rRA8emWkFqZFluc/IUxSHIfKjnXllv1IHpJQ/IzV
l1OLhfisw/XWlszEK4w5py+ElW/E6csyquq3r9jS4ZOy7Eabw8rMmK0hcs8Nu9dh
rQjcn72beoWWZiml+raP0u44eTuuf8w=
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:27:21 2025 by rpki-client