Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3baafcc-c361-335e-84bb-5a3a91705f0c.roa
File: d3baafcc-c361-335e-84bb-5a3a91705f0c.roa (raw, json)
Hash identifier: xQb/C+Wr9qxWf0pdDxFYnEI1b8wyFGhufJh3Yf2CQX4=
Subject key identifier: B0:1B:2D:A3:E6:6A:00:FB:04:C6:AE:B2:E6:92:10:3B:C0:4F:6D:6E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480EA51DC9C194E2F5A43315C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3baafcc-c361-335e-84bb-5a3a91705f0c.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 7342
IP address blocks: 209.131.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:1d:c9:c1:94:e2:f5:a4:33:15:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=44e83000-4785-4b7b-a14b-734e13223a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:56:31:75:8c:3e:7b:e0:2b:9b:c1:1b:9e:45:
8c:0a:1e:e1:10:64:2d:aa:72:a0:7e:2f:9f:53:b9:
c3:a6:8c:e1:e8:f4:6d:79:f0:73:db:28:75:b4:c4:
f9:04:7f:d9:27:69:26:40:a8:fc:6b:33:4c:54:a9:
cf:d3:f5:1e:78:4a:38:bb:38:e8:bc:cd:0d:9f:4b:
ac:2e:27:f5:66:f1:45:b1:46:23:79:5a:78:89:95:
ca:4e:b8:3b:6d:d1:ff:11:5b:09:94:ed:af:46:dd:
42:01:67:06:f1:a5:f3:80:9a:28:4d:ba:17:17:f2:
60:ee:07:9e:b4:1d:68:3d:26:5d:2b:f8:32:47:42:
07:38:86:36:a1:e7:54:15:35:61:ad:82:43:4d:04:
d7:99:86:79:19:f4:56:0a:b1:a7:d6:ec:cb:be:1e:
77:3b:7c:9a:ac:96:65:fb:7d:bf:45:af:c7:fb:91:
35:b2:83:15:dd:b0:23:5b:12:6d:d2:7e:3f:63:88:
f3:3e:3b:22:03:b3:02:aa:e3:ff:45:49:da:15:86:
c0:0f:99:29:42:2d:be:87:b5:f3:84:5c:54:e3:78:
68:de:6f:63:97:57:3d:e1:47:1d:ee:4d:91:a1:e0:
0e:db:ac:b1:dd:23:c8:21:1c:8e:e7:b4:0c:5b:d2:
fd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1B:2D:A3:E6:6A:00:FB:04:C6:AE:B2:E6:92:10:3B:C0:4F:6D:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3baafcc-c361-335e-84bb-5a3a91705f0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
209.131.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:21:8d:49:99:78:54:16:ba:61:c1:95:14:e2:8e:a3:c2:30:
3c:8c:b1:2f:fc:f6:4b:c2:e1:75:8a:95:8f:c8:88:17:11:5c:
0c:c2:c1:48:cb:02:e7:9b:03:14:c9:5e:41:0e:0a:c1:6f:03:
4d:ef:86:92:d9:5c:93:61:22:8d:05:70:ce:42:c5:cd:df:73:
45:df:09:c5:8a:50:82:23:dd:8d:60:69:ea:be:94:b9:05:78:
b5:1a:7e:2e:39:5c:4f:cd:dc:73:92:c3:b5:35:b1:93:6b:ec:
e1:86:93:40:53:04:a8:f3:55:19:5a:55:98:09:d1:af:28:84:
83:b4:35:21:07:3f:70:64:81:c6:5f:1e:aa:8a:e3:3e:3b:8e:
1d:43:c8:a0:a3:6b:53:6c:7b:94:bc:45:3a:31:fa:75:68:c9:
df:59:67:cf:ed:5e:c6:28:59:02:2c:6e:da:c6:a8:7c:2a:32:
f9:72:f2:b7:06:ce:b1:cb:3c:82:ac:54:cb:cb:b8:b7:a4:33:
2d:ee:d0:10:e2:72:7e:bb:51:b3:e5:fe:ec:e1:23:34:9e:93:
77:22:45:ec:73:05:40:69:f8:6c:72:67:cb:0c:ba:23:1d:b2:
4d:4a:09:79:c3:cc:d8:34:97:ae:f0:99:29:49:0e:ed:d3:d1:
09:32:65:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgOpR3JwZTi9aQzFcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIwMTAyMDAzOVoXDTI1MDMwMTAyMDAzOVowLzEtMCsGA1UEAxMk
NDRlODMwMDAtNDc4NS00YjdiLWExNGItNzM0ZTEzMjIzYTNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1YxdYw+e+Arm8EbnkWMCh7hEGQtqnKgfi+f
U7nDpozh6PRtefBz2yh1tMT5BH/ZJ2kmQKj8azNMVKnP0/UeeEo4uzjovM0Nn0us
Lif1ZvFFsUYjeVp4iZXKTrg7bdH/EVsJlO2vRt1CAWcG8aXzgJooTboXF/Jg7gee
tB1oPSZdK/gyR0IHOIY2oedUFTVhrYJDTQTXmYZ5GfRWCrGn1uzLvh53O3yarJZl
+32/Ra/H+5E1soMV3bAjWxJt0n4/Y4jzPjsiA7MCquP/RUnaFYbAD5kpQi2+h7Xz
hFxU43ho3m9jl1c94Ucd7k2RoeAO26yx3SPIIRyO57QMW9L98wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLAbLaPmagD7BMausuaSEDvAT21uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDNiYWFmY2MtYzM2MS0z
MzVlLTg0YmItNWEzYTkxNzA1ZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALwhjUmZeFQWumHBlRTijqPCMDyMsS/89kvC4XWKlY/IiBcRXAzCwUjL
AuebAxTJXkEOCsFvA03vhpLZXJNhIo0FcM5Cxc3fc0XfCcWKUIIj3Y1gaeq+lLkF
eLUafi45XE/N3HOSw7U1sZNr7OGGk0BTBKjzVRlaVZgJ0a8ohIO0NSEHP3BkgcZf
HqqK4z47jh1DyKCja1Nse5S8RTox+nVoyd9ZZ8/tXsYoWQIsbtrGqHwqMvly8rcG
zrHLPIKsVMvLuLekMy3u0BDicn67UbPl/uzhIzSek3ciRexzBUBp+GxyZ8sMuiMd
sk1KCXnDzNg0l67wmSlJDu3T0QkyZSc=
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:15:33 2025 by rpki-client