Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca43ef40-a891-3e42-a32d-6f967b3bc73e.roa
File: ca43ef40-a891-3e42-a32d-6f967b3bc73e.roa (raw, json)
Hash identifier: sE3HJ/kPN8k+GZvM1gr6sdUiE6ncmcyqqr0J+P6QLf0=
Subject key identifier: 98:A9:41:CE:DC:17:09:1A:61:75:8E:C8:82:08:9D:85:1D:09:06:F6
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858485B6B0A7FD7AC20EB4004A800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca43ef40-a891-3e42-a32d-6f967b3bc73e.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 7342
IP address blocks: 209.131.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6b:0a:7f:d7:ac:20:eb:40:04:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=d6065954-1939-418c-a0e6-efe92cef4087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5c:c0:69:37:81:0b:6a:e1:eb:e9:30:0b:84:
0e:d7:94:05:3a:42:4e:af:ac:a0:e6:38:32:61:ac:
78:cc:16:b1:32:70:f7:7a:55:36:e8:c6:ca:c8:bc:
09:0a:46:5f:75:69:2e:89:39:bc:a1:86:bf:c1:ab:
4e:b7:ba:fd:c6:1b:ab:25:bd:06:6b:50:d9:09:3a:
70:e1:f4:f0:7e:7e:4c:b0:bc:31:2f:d7:f8:5d:25:
e1:3f:c2:d4:c1:b6:6d:f3:80:27:99:17:14:e2:1e:
c4:90:cb:ed:b2:8b:d0:bd:4f:01:b2:10:07:5f:f2:
b8:da:12:67:52:ef:5a:b0:6b:80:bb:77:d8:f5:1c:
5c:a9:41:76:82:4f:f8:48:7e:a7:26:d6:c7:5f:8e:
22:55:a4:b9:06:71:be:2f:4a:bf:9a:18:b5:82:8d:
4f:b8:86:dc:e0:80:45:93:be:ca:b7:8f:12:e0:a8:
a4:45:fb:7d:4c:9a:42:8c:03:3e:84:78:46:11:a5:
30:10:d6:e7:e0:ec:76:c4:22:23:88:15:73:f9:22:
2e:28:6f:c4:79:12:96:25:f0:43:a4:83:98:d6:e5:
bc:51:3c:85:0a:81:af:be:a6:3d:48:1a:a0:6c:58:
d3:f5:2e:5c:56:a8:af:9e:17:61:39:4f:af:93:ff:
a9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A9:41:CE:DC:17:09:1A:61:75:8E:C8:82:08:9D:85:1D:09:06:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca43ef40-a891-3e42-a32d-6f967b3bc73e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
209.131.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:64:4f:f3:d4:31:84:16:51:f5:d9:31:83:aa:b6:ca:b6:53:
d6:57:1a:84:5e:e6:94:e7:43:78:ef:f3:53:5d:7e:04:b5:96:
da:ac:85:7b:cf:62:9f:1e:36:03:2e:71:9e:f7:17:9b:0f:e2:
12:db:4d:a8:9d:35:06:9e:2d:df:69:ee:e3:5b:d9:76:6e:5a:
38:6f:a7:01:6a:c8:70:f3:e1:51:54:72:a4:75:45:0a:e8:a0:
41:7d:4f:63:52:5d:0a:ee:cf:b9:62:0e:55:7a:5d:81:ff:a3:
e7:ac:1c:64:70:d7:8c:66:51:09:3d:86:5e:16:51:70:b1:5d:
1e:75:32:a6:fa:83:bf:89:0e:84:70:4f:be:dd:83:0c:2c:3e:
ff:b6:ef:a5:c4:ec:07:11:a3:bb:fb:12:3e:81:63:e9:1d:2e:
9a:1b:67:6e:7a:a0:e4:7a:c4:d8:7e:ad:73:30:26:a6:eb:1b:
8d:54:46:04:d4:80:8d:04:ab:11:26:79:28:f5:6a:47:80:0d:
f9:5c:03:7c:a6:dd:16:a4:f1:a0:0a:ee:69:08:e7:81:3d:88:
a4:88:14:f7:61:a5:7e:76:8c:62:46:64:a4:1c:ec:92:a2:24:
a1:7f:e3:20:1e:0b:39:d0:db:9f:0b:a2:08:ae:fd:3d:d8:0a:
23:12:77:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhbawp/16wg60AEqAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk
ZDYwNjU5NTQtMTkzOS00MThjLWEwZTYtZWZlOTJjZWY0MDg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlzAaTeBC2rh6+kwC4QO15QFOkJOr6yg5jgy
Yax4zBaxMnD3elU26MbKyLwJCkZfdWkuiTm8oYa/watOt7r9xhurJb0Ga1DZCTpw
4fTwfn5MsLwxL9f4XSXhP8LUwbZt84AnmRcU4h7EkMvtsovQvU8BshAHX/K42hJn
Uu9asGuAu3fY9RxcqUF2gk/4SH6nJtbHX44iVaS5BnG+L0q/mhi1go1PuIbc4IBF
k77Kt48S4KikRft9TJpCjAM+hHhGEaUwENbn4Ox2xCIjiBVz+SIuKG/EeRKWJfBD
pIOY1uW8UTyFCoGvvqY9SBqgbFjT9S5cVqivnhdhOU+vk/+pgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJipQc7cFwkaYXWOyIIInYUdCQb2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2E0M2VmNDAtYTg5MS0z
ZTQyLWEzMmQtNmY5NjdiM2JjNzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAChkT/PUMYQWUfXZMYOqtsq2U9ZXGoRe5pTnQ3jv81NdfgS1ltqshXvP
Yp8eNgMucZ73F5sP4hLbTaidNQaeLd9p7uNb2XZuWjhvpwFqyHDz4VFUcqR1RQro
oEF9T2NSXQruz7liDlV6XYH/o+esHGRw14xmUQk9hl4WUXCxXR51Mqb6g7+JDoRw
T77dgwwsPv+276XE7AcRo7v7Ej6BY+kdLpobZ256oOR6xNh+rXMwJqbrG41URgTU
gI0EqxEmeSj1akeADflcA3ym3Rak8aAK7mkI54E9iKSIFPdhpX52jGJGZKQc7JKi
JKF/4yAeCznQ258Logiu/T3YCiMSdzs=
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:31 2025 by rpki-client