Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/daf14092-dafe-3ba6-9746-8236744966f4.roa
File: daf14092-dafe-3ba6-9746-8236744966f4.roa (raw, json)
Hash identifier: JvjuIsNOYXvCEM4Ei4Tb5nSg935HUnuHi1BZN/CbhAM=
Subject key identifier: 17:AB:B7:D9:44:75:10:DE:F3:2A:DA:86:A7:21:8F:36:F5:AB:E5:3F
Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial: 010D0C9F43285847FB1A232E402514FB4D313100
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/daf14092-dafe-3ba6-9746-8236744966f4.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 397422
IP address blocks: 209.237.86.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:23:2e:40:25:14:fb:4d:31:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=135427d6-6ff7-419e-92b7-d2e422abfa0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:20:10:94:92:c1:2e:95:7a:07:61:e8:20:10:
95:73:fe:b2:b7:53:40:7f:48:9b:07:c6:02:08:98:
4d:3f:5a:bf:b0:99:24:38:96:4f:7a:c4:3f:ff:38:
84:8d:0f:d5:bf:59:a8:6f:69:d3:54:fe:6c:b9:a3:
69:82:4e:21:d2:45:70:7c:d0:1c:9a:ae:37:e3:22:
a4:f3:95:93:98:2e:3f:bf:cf:be:0e:28:02:37:4c:
1a:8f:bc:d6:ff:77:66:2b:8a:b2:16:b1:a2:c9:df:
b8:83:b8:d4:43:99:70:eb:64:2b:e0:20:49:33:86:
b3:5b:27:1b:8e:ac:fa:85:6b:cb:29:2d:1f:65:1e:
b4:b9:51:30:14:ce:5e:ae:80:5d:ad:95:76:51:4a:
9b:70:7f:82:80:ca:f3:b4:c8:37:02:47:91:89:39:
4c:e5:16:d1:b4:32:a3:9e:7a:f1:4f:e7:85:44:a1:
d9:b1:e6:e6:f5:57:98:5b:88:fd:29:2c:20:69:e6:
c1:d8:fe:da:cf:96:4b:e6:28:e8:33:62:2a:35:0a:
eb:60:d3:6b:9e:fa:63:95:04:82:7e:ee:65:7f:1a:
be:2d:23:39:21:c6:8c:27:2e:17:09:db:4e:a0:07:
c9:ca:6f:5e:c1:a2:bd:85:9b:9f:19:22:a7:8c:c7:
c5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AB:B7:D9:44:75:10:DE:F3:2A:DA:86:A7:21:8F:36:F5:AB:E5:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/daf14092-dafe-3ba6-9746-8236744966f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
X509v3 Authority Key Identifier:
keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.86.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:a4:98:6f:60:90:e3:e6:21:3f:37:62:7a:ff:15:33:be:d1:
2c:f6:12:30:a6:3e:4b:5d:cc:ec:7d:db:32:56:5e:2b:11:93:
a8:17:c1:56:43:11:a3:df:f5:e7:cf:c1:b6:f1:ef:3a:40:1c:
be:be:2c:36:1f:28:1d:b1:e8:fe:ab:69:14:94:f9:cd:27:df:
29:22:44:d9:f8:c3:23:6b:9a:a5:48:4e:c4:4a:27:a2:f5:e2:
27:f4:78:18:8d:23:12:51:42:30:15:3a:dd:aa:c1:f0:31:41:
51:35:f5:2d:c1:1b:c9:eb:2c:9a:89:f7:16:12:cc:1f:d6:4a:
7f:a2:0b:87:e0:fa:27:aa:a2:98:ff:e5:48:e5:05:09:df:54:
3e:62:da:87:f6:2a:8b:32:e6:f8:17:da:b0:ed:13:46:bd:2b:
a1:55:c1:6f:5e:7c:66:c6:b6:ba:ff:cb:76:f4:bf:d0:14:a7:
cf:43:37:84:88:1c:1f:e8:58:0b:e3:98:90:dd:68:e0:bd:56:
27:f9:de:be:d2:7d:76:67:f9:4e:f4:88:46:da:d2:bc:ac:63:
f3:d4:a2:6a:ed:30:8d:d0:01:24:78:01:50:9a:79:56:1a:5f:
95:06:56:c7:dc:d1:d7:8d:b0:88:e8:17:0a:28:27:f1:39:96:
4a:05:9d:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf7GiMuQCUU+00xMQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI0MTEyNDAyMDAyN1oXDTI1MDIyMjAyMDAyN1owLzEtMCsGA1UEAxMk
MTM1NDI3ZDYtNmZmNy00MTllLTkyYjctZDJlNDIyYWJmYTBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSAQlJLBLpV6B2HoIBCVc/6yt1NAf0ibB8YC
CJhNP1q/sJkkOJZPesQ//ziEjQ/Vv1mob2nTVP5suaNpgk4h0kVwfNAcmq434yKk
85WTmC4/v8++DigCN0waj7zW/3dmK4qyFrGiyd+4g7jUQ5lw62Qr4CBJM4azWycb
jqz6hWvLKS0fZR60uVEwFM5eroBdrZV2UUqbcH+CgMrztMg3AkeRiTlM5RbRtDKj
nnrxT+eFRKHZsebm9VeYW4j9KSwgaebB2P7az5ZL5ijoM2IqNQrrYNNrnvpjlQSC
fu5lfxq+LSM5IcaMJy4XCdtOoAfJym9ewaK9hZufGSKnjMfFbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBert9lEdRDe8yrahqchjzb1q+U/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvZGFmMTQwOTItZGFmZS0z
YmE2LTk3NDYtODIzNjc0NDk2NmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0e1WMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADikmG9gkOPmIT83Ynr/FTO+0Sz2EjCmPktdzOx92zJWXisRk6gXwVZD
EaPf9efPwbbx7zpAHL6+LDYfKB2x6P6raRSU+c0n3ykiRNn4wyNrmqVITsRKJ6L1
4if0eBiNIxJRQjAVOt2qwfAxQVE19S3BG8nrLJqJ9xYSzB/WSn+iC4fg+ieqopj/
5UjlBQnfVD5i2of2Kosy5vgX2rDtE0a9K6FVwW9efGbGtrr/y3b0v9AUp89DN4SI
HB/oWAvjmJDdaOC9Vif53r7SfXZn+U70iEba0rysY/PUomrtMI3QASR4AVCaeVYa
X5UGVsfc0deNsIjoFwooJ/E5lkoFnY4=
-----END CERTIFICATE-----
Generated at Sat May 10 10:23:24 2025 by rpki-client