Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c4607fb9-cbe0-3b01-99ef-71e1fdc19366.roa
File: c4607fb9-cbe0-3b01-99ef-71e1fdc19366.roa (raw, json)
Hash identifier: IW1zK4lVzt3v/owwCpbMlXo4TZpVYPXD362gy+DblL8=
Subject key identifier: 0C:D8:7A:0B:46:BC:79:78:71:B9:34:2B:2A:C3:1B:58:F9:9E:15:69
Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial: 010D0C9F432858482BF55B63FC38AA51EAF7EE00
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c4607fb9-cbe0-3b01-99ef-71e1fdc19366.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 21774
IP address blocks: 209.112.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:5b:63:fc:38:aa:51:ea:f7:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=6964928d-f812-4671-b8a5-0ae841a3624a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a3:ce:5b:f8:c4:99:1c:cd:06:f9:0e:26:6f:
ea:07:0c:81:6e:b4:e6:b5:18:a4:09:5f:c5:89:00:
49:ef:12:fe:a8:08:a2:16:c8:b8:94:8e:fc:34:5e:
6d:9a:d7:1e:e7:0a:83:64:77:19:d5:53:dd:9d:17:
bf:da:43:69:16:a6:90:e1:51:05:0b:94:69:3b:1e:
31:9b:fd:52:4c:d9:74:43:75:05:bb:2c:5d:d4:95:
87:83:13:a2:d0:a8:f7:37:6e:9b:be:24:f4:64:03:
9b:53:2d:eb:27:02:9f:15:0e:06:d0:1d:ed:9a:64:
29:fe:05:fa:25:e2:fd:19:09:18:c5:97:ec:e7:a6:
82:5b:61:34:4e:b9:db:f4:2a:7c:96:ff:76:01:bb:
27:73:6e:c2:5a:48:df:f1:61:ee:61:8d:d1:fe:75:
e5:b5:48:bd:05:3d:6f:18:a7:aa:0c:39:f2:33:b8:
0d:5a:a8:35:58:9b:33:73:9f:c6:2d:1d:55:35:76:
a0:fa:b0:7a:32:68:d8:de:e0:a3:ba:bf:18:6f:cf:
ea:0f:47:52:da:f9:51:0d:4b:2c:dc:b1:29:48:6b:
42:fe:21:9f:53:e9:ab:a6:89:4d:37:40:bb:3a:da:
a5:6d:81:71:45:d4:7c:7a:fb:a9:9c:90:53:ed:1d:
d9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D8:7A:0B:46:BC:79:78:71:B9:34:2B:2A:C3:1B:58:F9:9E:15:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c4607fb9-cbe0-3b01-99ef-71e1fdc19366.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
X509v3 Authority Key Identifier:
keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:f1:79:f2:0f:0d:04:c8:2b:bc:7e:b5:93:f8:f6:14:8a:dc:
9e:8b:0a:0b:21:44:9e:02:49:fa:34:76:ca:a6:56:39:6a:ed:
24:6d:27:cb:1c:20:1b:2e:c0:92:3f:6f:fc:44:b8:ef:f4:ed:
c0:fe:76:e2:81:81:b0:7f:d8:9e:e5:33:4e:dd:68:93:3c:a6:
cb:a5:ca:51:fa:92:07:aa:64:de:e6:fa:8d:1a:eb:33:54:c1:
73:1b:bd:7c:7d:92:90:c5:9b:ae:c3:1a:02:94:a7:ee:5f:25:
d9:db:39:49:a8:98:93:2b:70:01:13:a6:84:c7:b1:16:d4:f4:
38:af:53:c9:11:d3:e6:97:06:53:49:14:f4:65:ce:21:b9:57:
ce:e2:3b:6c:2e:02:26:0b:52:63:47:cc:9b:d9:97:ec:fe:1b:
26:8b:d2:11:44:58:ab:a4:9f:14:bb:26:bf:c9:00:a2:85:09:
8a:1f:7e:dd:6c:0f:13:c8:56:57:cf:e7:24:70:c9:c7:f0:a8:
f6:ac:eb:9e:21:0d:17:88:9b:b7:ed:2b:24:4f:d4:ca:13:8a:
0b:0b:0d:27:03:a0:d3:48:21:24:8d:b2:dc:33:ce:36:69:e5:
10:30:de:6b:ca:9e:b4:b4:96:9a:b9:91:0c:7d:e4:a3:7c:72:
ab:cf:0b:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgr9Vtj/DiqUer37gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI0MTIxMTE0MDA1MloXDTI1MDMxMTEzMDA1MlowLzEtMCsGA1UEAxMk
Njk2NDkyOGQtZjgxMi00NjcxLWI4YTUtMGFlODQxYTM2MjRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqPOW/jEmRzNBvkOJm/qBwyBbrTmtRikCV/F
iQBJ7xL+qAiiFsi4lI78NF5tmtce5wqDZHcZ1VPdnRe/2kNpFqaQ4VEFC5RpOx4x
m/1STNl0Q3UFuyxd1JWHgxOi0Kj3N26bviT0ZAObUy3rJwKfFQ4G0B3tmmQp/gX6
JeL9GQkYxZfs56aCW2E0Trnb9Cp8lv92Absnc27CWkjf8WHuYY3R/nXltUi9BT1v
GKeqDDnyM7gNWqg1WJszc5/GLR1VNXag+rB6MmjY3uCjur8Yb8/qD0dS2vlRDUss
3LEpSGtC/iGfU+mrpolNN0C7OtqlbYFxRdR8evupnJBT7R3ZRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAzYegtGvHl4cbk0KyrDG1j5nhVpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvYzQ2MDdmYjktY2JlMC0z
YjAxLTk5ZWYtNzFlMWZkYzE5MzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XA8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF3xefIPDQTIK7x+tZP49hSK3J6LCgshRJ4CSfo0dsqmVjlq7SRtJ8sc
IBsuwJI/b/xEuO/07cD+duKBgbB/2J7lM07daJM8psulylH6kgeqZN7m+o0a6zNU
wXMbvXx9kpDFm67DGgKUp+5fJdnbOUmomJMrcAETpoTHsRbU9DivU8kR0+aXBlNJ
FPRlziG5V87iO2wuAiYLUmNHzJvZl+z+GyaL0hFEWKuknxS7Jr/JAKKFCYofft1s
DxPIVlfP5yRwycfwqPas654hDReIm7ftKyRP1MoTigsLDScDoNNIISSNstwzzjZp
5RAw3mvKnrS0lpq5kQx95KN8cqvPC1Q=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:36:10 2025 by rpki-client