Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/c6404273-f9e6-396f-bc63-86b36f978a42.roa
File: c6404273-f9e6-396f-bc63-86b36f978a42.roa (raw, json)
Hash identifier: N3GYEwL37wTKMC32Ih1CnZXWxN+ZZUHgFhSQ6E+2hjw=
Subject key identifier: 50:17:61:E8:85:CB:6B:BE:9A:E2:61:0B:38:CF:CA:1E:9F:03:E3:4C
Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial: 010D0C9F432858483B500CA2DD9DBB4C07DA7620
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/c6404273-f9e6-396f-bc63-86b36f978a42.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 394708
IP address blocks: 209.173.184.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:50:0c:a2:dd:9d:bb:4c:07:da:76:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=fc6d3cac-0f71-4092-af8e-38492afa8826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:db:d0:e3:33:66:96:1c:0e:e2:8b:4b:9b:
1d:fb:e5:d7:c9:68:f6:05:63:6f:10:18:d8:da:c2:
9f:6d:64:f3:5e:c2:ca:61:4e:06:3d:98:04:bd:9e:
31:9d:ee:69:e1:ab:66:9a:ff:aa:4f:be:e8:de:6f:
b1:47:42:81:6c:50:a4:33:aa:1a:4d:17:76:9e:d5:
67:4a:93:93:78:f9:1d:63:a5:db:e2:35:9c:d4:7b:
d4:51:20:84:99:05:2f:63:24:d2:8a:d0:ee:d0:61:
04:27:23:9c:2c:bf:83:ff:40:b0:67:e1:6b:60:1b:
db:18:08:ba:4d:41:46:9d:77:75:07:ab:21:b7:45:
4c:91:17:08:11:f8:c6:eb:7c:e6:79:71:27:68:d4:
2d:6c:9b:c1:e3:36:b5:0c:db:a5:0a:32:b7:ee:6a:
c4:50:be:70:66:d9:db:e8:86:c8:9e:69:ec:c0:ae:
82:7c:2d:25:ed:76:1e:08:32:f8:72:a1:ae:df:a0:
e6:4f:71:30:12:21:ad:5a:e3:c5:16:d4:f2:3c:3b:
19:2c:1c:19:24:20:1c:bd:cd:45:21:e5:d9:a2:15:
48:23:64:1d:01:18:5a:07:42:8b:b9:54:63:5f:24:
cd:d5:b4:93:d3:f3:c8:eb:77:e3:c1:92:32:b3:12:
d4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:17:61:E8:85:CB:6B:BE:9A:E2:61:0B:38:CF:CA:1E:9F:03:E3:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/c6404273-f9e6-396f-bc63-86b36f978a42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
X509v3 Authority Key Identifier:
keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
sbgp-ipAddrBlock: critical
IPv4:
209.173.184.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:76:48:82:e6:89:83:19:57:36:91:93:d2:57:ac:e0:98:1e:
e2:5d:41:8e:98:0b:e0:de:7c:cf:dc:14:41:6c:d0:9a:24:28:
e4:ba:c5:f0:b1:37:cc:cf:ca:31:4b:ec:21:75:71:a0:1d:b0:
ca:d3:45:90:4e:3f:51:8d:f8:5e:f6:5b:8b:22:ea:13:c6:ae:
5a:be:23:6f:0f:9e:ca:0b:cb:b4:a6:0d:39:cf:12:39:ef:ee:
dd:94:0c:6a:24:4b:9a:7c:b6:d1:3a:c6:37:0b:d9:9c:77:69:
e7:b0:e6:fe:5c:e0:1b:c7:bd:c3:4e:3f:a8:a5:18:0c:e0:d0:
49:61:d1:d2:01:8f:b3:00:e6:00:57:3c:c2:70:11:5b:88:02:
a9:28:64:00:ab:75:e6:97:f3:58:af:87:71:ae:3c:70:b0:6c:
c9:44:20:dc:a3:e0:94:6d:bf:05:f3:b4:32:00:a2:39:28:dc:
60:80:84:1a:7e:19:b2:79:71:fb:40:31:fb:a5:7b:e1:8d:72:
1d:21:2c:81:38:30:b7:fd:a9:d0:eb:6a:40:b8:a6:a4:de:1a:
9d:a4:21:bf:bd:a8:81:c0:5a:60:58:04:95:0f:58:1b:11:db:
51:00:dd:87:32:a4:b5:73:a1:c9:25:f7:61:da:1b:4b:a4:2c:
59:a5:c4:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7UAyi3Z27TAfadiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk
N2ZiMB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk
ZmM2ZDNjYWMtMGY3MS00MDkyLWFmOGUtMzg0OTJhZmE4ODI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxh/b0OMzZpYcDuKLS5sd++XXyWj2BWNvEBjY
2sKfbWTzXsLKYU4GPZgEvZ4xne5p4atmmv+qT77o3m+xR0KBbFCkM6oaTRd2ntVn
SpOTePkdY6Xb4jWc1HvUUSCEmQUvYyTSitDu0GEEJyOcLL+D/0CwZ+FrYBvbGAi6
TUFGnXd1B6sht0VMkRcIEfjG63zmeXEnaNQtbJvB4za1DNulCjK37mrEUL5wZtnb
6IbInmnswK6CfC0l7XYeCDL4cqGu36DmT3EwEiGtWuPFFtTyPDsZLBwZJCAcvc1F
IeXZohVII2QdARhaB0KLuVRjXyTN1bST0/PI63fjwZIysxLU8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFAXYeiFy2u+muJhCzjPyh6fA+NMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2
ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvYzY0MDQyNzMtZjllNi0z
OTZmLWJjNjMtODZiMzZmOTc4YTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl
ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1
ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1
YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0a24MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIB2SILmiYMZVzaRk9JXrOCYHuJdQY6YC+DefM/cFEFs0JokKOS6xfCx
N8zPyjFL7CF1caAdsMrTRZBOP1GN+F72W4si6hPGrlq+I28PnsoLy7SmDTnPEjnv
7t2UDGokS5p8ttE6xjcL2Zx3aeew5v5c4BvHvcNOP6ilGAzg0Elh0dIBj7MA5gBX
PMJwEVuIAqkoZACrdeaX81ivh3GuPHCwbMlEINyj4JRtvwXztDIAojko3GCAhBp+
GbJ5cftAMfule+GNch0hLIE4MLf9qdDrakC4pqTeGp2kIb+9qIHAWmBYBJUPWBsR
21EA3YcypLVzockl92HaG0ukLFmlxC4=
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:33 2025 by rpki-client