Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/90ba26e3-afe9-3987-893f-1683477506b7.roa
File: 90ba26e3-afe9-3987-893f-1683477506b7.roa (raw, json)
Hash identifier: 9p1XokOSVdSmqzXD6Mq/yuaUPbrGoAP8hse8u8fhV1g=
Subject key identifier: 9D:20:83:D1:41:71:7A:28:83:FE:22:50:AF:0B:DB:3B:67:DE:58:71
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F432858486D904D1C08F9D7D845B81580
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/90ba26e3-afe9-3987-893f-1683477506b7.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 13414
IP address blocks: 209.237.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:4d:1c:08:f9:d7:d8:45:b8:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=2c83c38a-1a43-433e-a46b-b39efc301681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:07:25:12:39:1c:a2:af:5c:21:a8:5a:9d:04:
55:92:04:43:15:5c:36:ae:56:01:1e:a0:2c:52:a7:
54:c5:64:f7:9e:67:4a:89:64:84:ef:87:ea:8e:33:
55:d5:86:ae:a8:d6:0d:18:7d:7a:cc:03:b5:a9:4f:
8b:01:9e:64:f8:e5:23:32:b4:66:b3:27:c3:00:18:
73:b7:5f:70:44:dc:c5:e5:56:49:47:42:61:72:e7:
95:c5:29:0b:98:4d:43:a3:46:ec:44:04:32:ed:e9:
ff:f0:a0:1c:ec:02:7d:df:2a:b9:c9:59:85:fc:02:
c3:9c:a2:72:94:cd:27:10:f0:4e:75:e4:71:8e:6c:
fa:78:11:2b:7e:97:fb:72:5d:ca:25:b4:9a:3f:9a:
eb:e7:87:d9:93:1b:d6:06:cc:3a:a8:35:90:46:58:
4e:c8:cd:43:64:f1:6d:2b:cf:dd:94:04:44:01:80:
a3:55:53:a3:d3:7d:65:32:04:d7:d1:ca:f4:52:d8:
4f:75:85:99:b0:f0:1c:18:45:66:15:07:66:59:3d:
be:c5:72:d8:00:be:64:d6:11:c7:5e:9b:01:95:7f:
4c:92:b0:1c:ad:12:59:b0:b9:6c:21:eb:cf:bb:95:
7d:29:3d:21:aa:35:ab:a2:64:e4:5c:e1:21:1c:ed:
8d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:20:83:D1:41:71:7A:28:83:FE:22:50:AF:0B:DB:3B:67:DE:58:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/90ba26e3-afe9-3987-893f-1683477506b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:03:43:35:f8:b4:72:02:99:45:15:17:a3:d2:15:b9:fe:55:
99:81:44:82:34:fb:6f:b0:09:b9:dc:f8:30:10:88:bb:ea:13:
e7:26:86:88:b2:57:46:f0:f3:b6:46:01:0b:a5:ed:c4:a9:d8:
87:36:4e:7c:86:0a:8e:e2:62:83:44:6b:87:45:f5:5a:d1:ed:
08:14:a7:c2:d8:11:f0:fe:9d:25:b7:d2:83:e8:97:d3:6f:bc:
8c:9c:10:62:31:2e:fb:e8:fc:e2:00:58:af:3e:04:30:e3:d0:
34:2e:c3:3a:b1:cd:31:7a:db:07:ed:62:e7:b0:59:02:d5:be:
10:5d:6e:cc:44:fb:74:84:bd:8a:d1:d7:6b:5d:51:8a:05:3f:
96:e5:e2:28:34:d7:73:70:41:c4:be:02:9a:cf:aa:0e:07:42:
5f:3e:1f:b9:85:34:7d:cb:c9:14:5f:34:91:40:fe:c6:3c:ec:
c4:0f:bb:2c:18:0c:0b:e7:e6:50:46:c9:1d:4c:e6:34:0e:19:
e2:39:dd:db:6a:22:14:63:1c:bf:06:a4:04:bd:e2:0a:bd:0d:
7d:17:88:07:5d:81:37:6d:8c:d6:73:a5:21:e0:71:eb:63:7b:
f7:74:da:32:6d:7e:d4:6a:c5:d0:23:6e:96:87:86:82:07:5c:
e2:c7:69:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkE0cCPnX2EW4FYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy
NTc2MB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk
MmM4M2MzOGEtMWE0My00MzNlLWE0NmItYjM5ZWZjMzAxNjgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgclEjkcoq9cIahanQRVkgRDFVw2rlYBHqAs
UqdUxWT3nmdKiWSE74fqjjNV1YauqNYNGH16zAO1qU+LAZ5k+OUjMrRmsyfDABhz
t19wRNzF5VZJR0JhcueVxSkLmE1Do0bsRAQy7en/8KAc7AJ93yq5yVmF/ALDnKJy
lM0nEPBOdeRxjmz6eBErfpf7cl3KJbSaP5rr54fZkxvWBsw6qDWQRlhOyM1DZPFt
K8/dlAREAYCjVVOj031lMgTX0cr0UthPdYWZsPAcGEVmFQdmWT2+xXLYAL5k1hHH
XpsBlX9MkrAcrRJZsLlsIevPu5V9KT0hqjWromTkXOEhHO2NbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ0gg9FBcXoog/4iUK8L2ztn3lhxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3
YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvOTBiYTI2ZTMtYWZlOS0z
OTg3LTg5M2YtMTY4MzQ3NzUwNmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3
YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi
MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh
NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3SMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKoDQzX4tHICmUUVF6PSFbn+VZmBRII0+2+wCbnc+DAQiLvqE+cmhoiy
V0bw87ZGAQul7cSp2Ic2TnyGCo7iYoNEa4dF9VrR7QgUp8LYEfD+nSW30oPol9Nv
vIycEGIxLvvo/OIAWK8+BDDj0DQuwzqxzTF62wftYuewWQLVvhBdbsxE+3SEvYrR
12tdUYoFP5bl4ig013NwQcS+AprPqg4HQl8+H7mFNH3LyRRfNJFA/sY87MQPuywY
DAvn5lBGyR1M5jQOGeI53dtqIhRjHL8GpAS94gq9DX0XiAddgTdtjNZzpSHgcetj
e/d02jJtftRqxdAjbpaHhoIHXOLHads=
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:41:23 2025 by rpki-client