Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/d44ca5a0-4244-33e6-b6bf-c220a94ee74b.roa
File: d44ca5a0-4244-33e6-b6bf-c220a94ee74b.roa (raw, json)
Hash identifier: WF6RDtFwTq3gnRrybxstPWnLTBmTx9nB/TI8rwb17Ys=
Subject key identifier: 8D:C3:7C:73:4A:DD:6F:F7:41:24:4B:E6:47:38:3B:E1:70:0E:1E:8F
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F432858486C2B0E94C708DF97024AF600
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/d44ca5a0-4244-33e6-b6bf-c220a94ee74b.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 13414
IP address blocks: 209.237.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:0e:94:c7:08:df:97:02:4a:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=04caa478-de64-4baa-972c-f049ac60b342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8c:56:c1:ce:dd:aa:f0:35:05:73:ab:31:9d:
e7:ee:d1:51:84:ed:44:c0:c2:c7:f9:24:1f:29:a9:
74:1a:dd:35:f8:b4:79:7f:3d:9e:e6:bf:77:82:80:
56:81:d5:f9:5e:62:fb:db:7b:4a:ae:b1:d3:4a:e7:
0f:e1:c9:eb:04:86:97:9d:11:3a:a8:9b:45:8c:8a:
43:a3:d5:a4:c5:b5:a8:a2:ac:b4:f7:e1:66:5d:23:
9b:25:90:a9:6b:d5:53:fc:73:71:89:8a:f0:d4:e8:
89:b7:1b:bd:1b:5d:bd:fe:27:77:df:24:b7:da:2a:
ed:53:e1:57:4f:ef:c7:a9:ba:58:06:e7:2f:47:84:
9b:15:11:06:0e:20:2b:ba:94:79:6f:da:65:fc:44:
8c:be:68:6c:73:74:27:11:bc:ca:78:d1:9c:e9:37:
6d:b2:5c:d8:5c:99:2b:97:d1:a6:46:2f:f3:55:07:
15:59:30:00:1f:72:4b:13:b1:30:41:64:d6:30:aa:
3a:a2:2c:ad:10:fe:c0:84:61:63:bf:79:46:39:a6:
26:68:98:cb:6d:56:20:b7:30:04:22:c7:24:f7:29:
2a:f8:16:ca:8a:47:40:78:8d:ee:41:75:d5:5a:63:
a5:00:5c:2c:76:96:86:ae:c2:d5:56:16:05:de:9b:
14:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C3:7C:73:4A:DD:6F:F7:41:24:4B:E6:47:38:3B:E1:70:0E:1E:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/d44ca5a0-4244-33e6-b6bf-c220a94ee74b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.206.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:5d:89:32:fd:f7:c5:6a:20:b4:67:cd:59:2f:13:4d:7b:0b:
b8:b0:3d:2a:a5:db:89:19:ac:03:35:89:9f:83:f7:89:dd:8d:
2f:10:04:91:94:4f:e6:b2:d9:5e:72:47:6a:3b:5b:bc:1b:ca:
4f:d6:47:d9:cc:ef:70:da:d9:ff:eb:6e:89:0a:ae:ca:3d:a1:
a0:82:d5:56:7d:20:fc:cc:7c:fa:39:0a:4d:b0:68:c4:a2:77:
07:25:b6:bc:2e:b6:46:61:ec:b7:4b:25:de:83:04:0e:ce:28:
18:66:87:5c:16:83:3b:cc:4a:51:24:00:9d:42:b0:3d:b7:49:
40:12:85:d5:86:bf:8b:03:96:b2:2e:16:a7:d1:1d:89:17:85:
ce:20:bf:65:45:6f:65:72:1f:ba:6c:1d:c1:11:c9:c4:3b:a3:
1d:cb:1d:f3:09:21:17:56:42:0b:26:8f:56:48:69:83:19:a5:
76:73:3f:df:27:e9:d9:5d:c1:f8:38:da:d1:84:ff:3c:b9:3c:
8a:c6:21:d7:c0:6e:e5:22:a8:12:0e:7b:c5:31:2e:46:b2:52:
1e:9b:29:7c:2b:db:ad:65:a0:74:4b:4b:9b:34:ba:eb:22:9d:
de:69:08:55:b6:81:0d:f6:a3:52:e0:87:a6:04:8e:83:60:cc:
dd:da:7b:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKw6UxwjflwJK9gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy
NTc2MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk
MDRjYWE0NzgtZGU2NC00YmFhLTk3MmMtZjA0OWFjNjBiMzQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIxWwc7dqvA1BXOrMZ3n7tFRhO1EwMLH+SQf
Kal0Gt01+LR5fz2e5r93goBWgdX5XmL723tKrrHTSucP4cnrBIaXnRE6qJtFjIpD
o9WkxbWooqy09+FmXSObJZCpa9VT/HNxiYrw1OiJtxu9G129/id33yS32irtU+FX
T+/HqbpYBucvR4SbFREGDiArupR5b9pl/ESMvmhsc3QnEbzKeNGc6TdtslzYXJkr
l9GmRi/zVQcVWTAAH3JLE7EwQWTWMKo6oiytEP7AhGFjv3lGOaYmaJjLbVYgtzAE
Isck9ykq+BbKikdAeI3uQXXVWmOlAFwsdpaGrsLVVhYF3psUAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI3DfHNK3W/3QSRL5kc4O+FwDh6PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3
YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZDQ0Y2E1YTAtNDI0NC0z
M2U2LWI2YmYtYzIyMGE5NGVlNzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3
YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi
MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh
NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3OMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACRdiTL998VqILRnzVkvE017C7iwPSql24kZrAM1iZ+D94ndjS8QBJGU
T+ay2V5yR2o7W7wbyk/WR9nM73Da2f/rbokKrso9oaCC1VZ9IPzMfPo5Ck2waMSi
dwcltrwutkZh7LdLJd6DBA7OKBhmh1wWgzvMSlEkAJ1CsD23SUAShdWGv4sDlrIu
FqfRHYkXhc4gv2VFb2VyH7psHcERycQ7ox3LHfMJIRdWQgsmj1ZIaYMZpXZzP98n
6dldwfg42tGE/zy5PIrGIdfAbuUiqBIOe8UxLkayUh6bKXwr261loHRLS5s0uusi
nd5pCFW2gQ32o1Lgh6YEjoNgzN3ae+U=
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:25:11 2025 by rpki-client