Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/6fcf48ed-1cff-3a89-be4b-305f212c3155.roa
File: 6fcf48ed-1cff-3a89-be4b-305f212c3155.roa (raw, json)
Hash identifier: 74DoPEaiCIfVhe5aed0iH718vzYkOxbvRgilqG3ctnc=
Subject key identifier: A9:3A:68:BF:F9:2D:F4:3C:42:12:56:2E:12:EB:0A:04:AD:3A:B2:8E
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285848265FFBD2C19BCD36A2559A20
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/6fcf48ed-1cff-3a89-be4b-305f212c3155.roa
Signing time: Mon 09 Dec 2024 14:00:51 +0000
ROA not before: Mon 09 Dec 2024 14:00:51 +0000
ROA not after: Sun 09 Mar 2025 13:00:51 +0000
asID: 394770
IP address blocks: 209.249.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:5f:fb:d2:c1:9b:cd:36:a2:55:9a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Dec 9 14:00:51 2024 GMT
Not After : Mar 9 13:00:51 2025 GMT
Subject: CN=0fb0bf31-0d35-4566-8da2-580eea9a99c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0c:7b:e8:d9:56:b5:4e:a5:eb:bf:de:f4:5f:
9f:15:3c:c5:5a:7c:39:63:88:41:cb:e8:a1:d6:02:
8f:cc:8c:64:2b:57:af:5a:fc:bd:29:0a:c1:f1:9f:
42:bd:fa:c3:2f:38:9c:4d:be:53:44:ed:c9:6f:82:
c8:86:b5:6d:92:16:d0:b4:f8:6b:e3:c2:4a:03:5a:
12:a2:4a:3f:3c:28:1b:e9:98:f7:30:7f:27:5a:6f:
5a:c2:17:5e:64:55:71:66:56:4b:31:60:27:7a:ff:
87:52:e7:bf:ca:04:6e:aa:c1:b6:cd:fe:da:8e:4a:
b8:0c:d7:3a:c4:7a:24:7d:27:f7:1d:95:85:bb:d3:
ed:35:d0:a3:de:cf:23:2f:5d:34:97:82:77:74:c6:
db:40:5e:54:a1:30:7b:7f:59:16:db:55:c3:66:5e:
00:14:d7:7f:66:82:9e:b0:a7:24:05:10:4e:0d:49:
23:55:7d:85:c9:88:74:8d:e5:75:14:9b:e8:9b:c0:
a3:07:ff:d4:18:e6:ae:05:9d:bc:bc:a6:90:6c:95:
6f:8d:86:52:23:cd:c6:3c:07:7b:6d:e2:dc:4b:87:
04:5c:32:89:e1:f0:78:b1:01:c1:8e:df:76:76:49:
d1:2c:aa:14:f3:5f:2f:ea:13:d4:48:02:f3:09:3a:
55:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3A:68:BF:F9:2D:F4:3C:42:12:56:2E:12:EB:0A:04:AD:3A:B2:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/6fcf48ed-1cff-3a89-be4b-305f212c3155.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
209.249.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:5d:2d:44:38:2a:b3:46:71:4e:1e:06:82:98:f1:ae:48:c1:
53:6f:db:c9:11:d8:e8:7b:17:64:59:d3:a4:fd:05:83:b0:80:
8f:1a:1a:79:19:0d:70:7d:55:09:81:34:d7:d1:4f:a9:5b:d7:
b7:f1:aa:60:fb:74:72:f2:f4:4c:8c:c9:e2:ac:a7:85:20:91:
f0:6d:25:43:50:5f:2e:75:99:ec:e2:d8:05:29:3c:70:98:36:
05:09:11:35:df:e1:1b:97:e3:30:ac:9e:4c:11:61:6c:3c:ab:
ad:cf:ba:d9:4c:cf:22:ca:57:ee:9d:a4:c5:47:c7:6a:dc:e1:
18:f6:72:24:41:e6:84:ee:c2:1a:19:ae:e2:94:c6:9e:1f:38:
78:0b:12:8e:61:8c:e7:f0:71:15:c1:9b:98:30:a5:af:4a:a5:
b7:8a:3d:54:99:23:61:59:95:f2:03:e5:92:2e:a9:50:d7:c5:
52:88:2d:0f:c2:b8:a0:e3:73:aa:36:00:50:15:cb:03:68:69:
c9:36:3e:9b:97:39:82:15:b2:68:ee:c7:23:d2:54:a1:0d:3f:
a3:f5:5b:1a:26:1c:74:7f:88:a2:b3:da:6b:12:48:94:e5:fe:
20:1f:d8:f6:60:8b:0f:cf:c4:d5:73:73:3e:a4:df:c1:7c:32:
a3:cf:07:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgmX/vSwZvNNqJVmiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI0MTIwOTE0MDA1MVoXDTI1MDMwOTEzMDA1MVowLzEtMCsGA1UEAxMk
MGZiMGJmMzEtMGQzNS00NTY2LThkYTItNTgwZWVhOWE5OWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAx76NlWtU6l67/e9F+fFTzFWnw5Y4hBy+ih
1gKPzIxkK1evWvy9KQrB8Z9CvfrDLzicTb5TRO3Jb4LIhrVtkhbQtPhr48JKA1oS
oko/PCgb6Zj3MH8nWm9awhdeZFVxZlZLMWAnev+HUue/ygRuqsG2zf7ajkq4DNc6
xHokfSf3HZWFu9PtNdCj3s8jL100l4J3dMbbQF5UoTB7f1kW21XDZl4AFNd/ZoKe
sKckBRBODUkjVX2FyYh0jeV1FJvom8CjB//UGOauBZ28vKaQbJVvjYZSI83GPAd7
beLcS4cEXDKJ4fB4sQHBjt92dknRLKoU818v6hPUSALzCTpVMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKk6aL/5LfQ8QhJWLhLrCgStOrKOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvNmZjZjQ4ZWQtMWNmZi0z
YTg5LWJlNGItMzA1ZjIxMmMzMTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0fn6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABRdLUQ4KrNGcU4eBoKY8a5IwVNv28kR2Oh7F2RZ06T9BYOwgI8aGnkZ
DXB9VQmBNNfRT6lb17fxqmD7dHLy9EyMyeKsp4UgkfBtJUNQXy51mezi2AUpPHCY
NgUJETXf4RuX4zCsnkwRYWw8q63PutlMzyLKV+6dpMVHx2rc4Rj2ciRB5oTuwhoZ
ruKUxp4fOHgLEo5hjOfwcRXBm5gwpa9KpbeKPVSZI2FZlfID5ZIuqVDXxVKILQ/C
uKDjc6o2AFAVywNoack2PpuXOYIVsmjuxyPSVKENP6P1WxomHHR/iKKz2msSSJTl
/iAf2PZgiw/PxNVzcz6k38F8MqPPB7o=
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:56:08 2025 by rpki-client