Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/48351c25-8c04-3be2-9d0c-45dc5703d206.roa
File: 48351c25-8c04-3be2-9d0c-45dc5703d206.roa (raw, json)
Hash identifier: mB/sqqP8zf863dYDROeFz/rNFhRVq9KjWF3/uL7Obi0=
Subject key identifier: A1:7B:78:27:0F:08:BF:D7:B6:1B:C6:F1:7A:BB:3D:90:69:5B:DE:71
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F432858486D904D2A1F69C937C4F60EA0
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/48351c25-8c04-3be2-9d0c-45dc5703d206.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 13414
IP address blocks: 209.237.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:4d:2a:1f:69:c9:37:c4:f6:0e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=7909c407-4f85-4271-bb9d-4909ffb27ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:75:d3:7e:37:42:9f:aa:c4:78:51:e8:bc:8f:
da:f5:ee:99:76:41:d3:4c:30:2a:a9:fb:db:12:03:
86:1b:c6:f1:83:8f:2c:d1:f5:6d:b5:fc:15:89:a1:
d9:4a:75:be:6f:80:82:c6:8b:0f:4c:81:eb:38:c0:
a2:a5:1c:fd:64:02:91:cc:56:a0:52:a5:28:2c:a0:
51:00:71:fc:23:d5:9a:92:ca:d7:04:bb:ce:74:bc:
5c:08:10:70:71:90:ee:5a:fa:d2:82:4c:b0:f2:f9:
78:1e:c0:de:0f:d9:a1:73:f5:34:27:a1:2b:31:dd:
44:57:97:b8:ee:d2:43:31:84:e4:b4:c0:86:0d:b6:
90:a5:19:02:82:5f:84:bc:b0:73:f4:c0:53:09:06:
0e:0b:15:cc:e4:45:4e:6f:4f:ab:b9:13:c6:76:74:
61:73:72:db:c3:90:5e:6b:61:f7:17:dd:1d:eb:5b:
49:ba:f1:f4:86:b8:0e:87:28:ea:50:cc:dd:1c:4a:
25:92:ca:26:a7:44:2a:17:64:63:7f:a8:ea:18:54:
3f:a6:6a:44:0a:9f:d2:52:1b:d1:eb:3d:9d:d3:cc:
76:d2:cd:cb:63:9b:f4:07:b5:07:1e:f0:cd:0f:5e:
0c:0d:e6:5d:72:5d:a1:40:41:6e:bd:8e:f9:5f:ce:
86:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7B:78:27:0F:08:BF:D7:B6:1B:C6:F1:7A:BB:3D:90:69:5B:DE:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/48351c25-8c04-3be2-9d0c-45dc5703d206.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:6f:71:b1:64:6f:43:24:68:0e:a1:54:47:d7:a3:2e:b5:44:
76:9e:73:36:38:e1:4b:32:73:b8:a4:8b:02:eb:9a:83:88:7c:
a3:f7:51:5f:46:f2:85:ee:a8:66:9e:75:d6:d4:9a:02:37:3f:
a4:a1:80:2d:3a:03:cd:f4:ee:b8:3c:66:41:fb:21:a5:a6:c4:
fb:8a:bf:d4:22:15:25:1c:36:33:ba:2a:3a:18:b1:5b:17:1b:
b5:c7:25:ca:3f:d8:8f:40:d2:87:52:5c:fc:37:a3:f7:1a:00:
f6:f5:45:82:a6:80:c6:74:bc:44:82:39:69:1a:ea:ad:72:9a:
bc:51:6e:cd:d8:d7:94:1f:5c:f9:ee:81:10:c3:f4:09:58:49:
d1:3d:b7:77:e3:49:28:f9:9f:a5:3f:2c:c6:eb:de:6a:13:f4:
2e:0a:fc:35:83:0d:1c:36:74:84:99:94:bf:39:cc:6b:09:7e:
98:a8:96:81:1c:15:a7:78:63:21:0d:90:8a:03:8c:59:da:8f:
ff:ff:85:80:8d:16:e8:7c:a8:af:eb:18:b9:00:9f:f1:e6:80:
c9:0f:76:97:97:a1:09:83:60:d7:b9:b6:b7:bd:be:67:9b:9d:
03:69:05:56:d8:0d:47:4a:d6:64:08:eb:c4:79:1a:b4:8d:f6:
48:b8:59:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkE0qH2nJN8T2DqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy
NTc2MB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk
NzkwOWM0MDctNGY4NS00MjcxLWJiOWQtNDkwOWZmYjI3YWQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3XTfjdCn6rEeFHovI/a9e6ZdkHTTDAqqfvb
EgOGG8bxg48s0fVttfwViaHZSnW+b4CCxosPTIHrOMCipRz9ZAKRzFagUqUoLKBR
AHH8I9WaksrXBLvOdLxcCBBwcZDuWvrSgkyw8vl4HsDeD9mhc/U0J6ErMd1EV5e4
7tJDMYTktMCGDbaQpRkCgl+EvLBz9MBTCQYOCxXM5EVOb0+ruRPGdnRhc3Lbw5Be
a2H3F90d61tJuvH0hrgOhyjqUMzdHEolksomp0QqF2Rjf6jqGFQ/pmpECp/SUhvR
6z2d08x20s3LY5v0B7UHHvDND14MDeZdcl2hQEFuvY75X86GwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKF7eCcPCL/XthvG8Xq7PZBpW95xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3
YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvNDgzNTFjMjUtOGMwNC0z
YmUyLTlkMGMtNDVkYzU3MDNkMjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3
YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi
MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh
NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3TMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFRvcbFkb0MkaA6hVEfXoy61RHaeczY44Usyc7ikiwLrmoOIfKP3UV9G
8oXuqGaeddbUmgI3P6ShgC06A8307rg8ZkH7IaWmxPuKv9QiFSUcNjO6KjoYsVsX
G7XHJco/2I9A0odSXPw3o/caAPb1RYKmgMZ0vESCOWka6q1ymrxRbs3Y15QfXPnu
gRDD9AlYSdE9t3fjSSj5n6U/LMbr3moT9C4K/DWDDRw2dISZlL85zGsJfpioloEc
Fad4YyENkIoDjFnaj///hYCNFuh8qK/rGLkAn/HmgMkPdpeXoQmDYNe5tre9vmeb
nQNpBVbYDUdK1mQI68R5GrSN9ki4Wec=
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:22:19 2025 by rpki-client