Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/9f872cec-cb89-3d99-a275-e385fd188443.roa
File: 9f872cec-cb89-3d99-a275-e385fd188443.roa (raw, json)
Hash identifier: RgoZgbJMWBJzkP9IQ5VyOQlmh15ny1XQdGEMDx82LJg=
Subject key identifier: 30:60:06:29:8A:53:6A:FB:8A:04:D1:C8:D4:4D:02:22:FF:52:61:FC
Certificate issuer: /CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Certificate serial: 010D0C9F4328584843B007B47BC1666869FA3E80
Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/9f872cec-cb89-3d99-a275-e385fd188443.roa
Signing time: Fri 20 Dec 2024 02:00:40 +0000
ROA not before: Fri 20 Dec 2024 02:00:40 +0000
ROA not after: Thu 20 Mar 2025 01:00:40 +0000
asID: 2572
IP address blocks: 209.106.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:43:b0:07:b4:7b:c1:66:68:69:fa:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Validity
Not Before: Dec 20 02:00:40 2024 GMT
Not After : Mar 20 01:00:40 2025 GMT
Subject: CN=7fb42c4b-96f3-4871-8d1e-64e9ddefb0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7b:8e:d8:a5:fd:f3:af:cd:7c:7b:07:27:d4:
8a:8b:06:14:63:ff:99:de:99:f5:cd:69:6e:75:15:
57:64:88:10:b5:09:e4:d7:88:1a:5c:01:5e:a6:49:
e9:a9:07:9c:a4:d9:7e:30:d6:f7:f1:48:56:27:07:
94:5e:38:45:01:fb:a7:73:27:54:4e:2f:89:3e:54:
e8:bc:ef:0d:f5:a0:62:1c:b6:35:52:f4:1c:dd:e2:
01:9f:a9:65:ab:5b:69:80:3d:c3:60:b2:f4:57:d0:
d6:99:8c:1a:05:36:e3:08:d6:b0:5d:1a:d6:4c:7c:
59:67:8f:47:85:c3:27:a8:33:56:3f:5e:0f:3c:d6:
02:c8:27:31:14:c3:27:09:23:14:d2:33:b7:dd:a5:
31:0d:ba:86:62:0c:84:09:c5:9f:90:91:4e:97:db:
65:42:fa:1e:7e:ea:78:c0:f6:b2:81:97:c7:de:6e:
b6:c5:76:6f:38:90:00:61:ba:6e:b2:53:f5:54:d6:
62:2c:62:b9:3a:06:6a:a9:cf:1a:70:4d:c8:ad:3e:
5d:e1:91:e8:ca:bf:40:c3:99:da:75:42:01:bd:52:
d8:5d:0d:8b:a0:cc:a9:2c:c3:82:94:42:b8:06:3a:
e8:95:51:85:b9:46:65:e8:78:93:53:12:58:4b:fb:
f1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:60:06:29:8A:53:6A:FB:8A:04:D1:C8:D4:4D:02:22:FF:52:61:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/9f872cec-cb89-3d99-a275-e385fd188443.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl
X509v3 Authority Key Identifier:
keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
sbgp-ipAddrBlock: critical
IPv4:
209.106.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:24:83:d4:b2:88:a2:7e:14:18:eb:48:fe:f3:dd:c4:da:10:
10:ae:cd:9f:fd:5a:dc:d3:0f:e6:74:42:36:8b:1c:c1:93:b0:
0f:17:23:2d:06:bd:a6:24:33:dd:33:fa:2e:52:c9:da:cf:9e:
64:0c:fa:d8:d3:72:36:e0:cf:ea:6e:a9:32:ae:94:55:c0:e0:
52:d3:7a:75:23:69:58:4a:72:ff:7d:2d:01:be:6f:ed:96:cb:
ca:3b:ef:ee:56:10:cf:0e:80:37:d0:ae:32:2d:8d:95:1a:e0:
f7:13:9f:6c:5c:a8:09:25:1e:cd:15:e3:c3:1d:31:c2:e7:ce:
6f:f5:93:e0:d8:a2:ee:14:52:6d:9e:6f:67:1e:6e:67:b7:c5:
04:72:b4:47:09:82:57:54:98:29:b1:e5:61:85:29:3a:f5:46:
34:18:64:91:3f:93:19:e7:2c:86:d1:4d:cf:2d:e2:95:fe:40:
d1:48:eb:91:12:c2:5c:5f:41:e1:73:95:66:09:e4:9b:56:64:
12:b3:3d:23:04:98:9f:31:01:10:05:8b:63:46:a4:34:db:7c:
f3:39:e3:85:08:10:01:df:79:1f:e1:9c:51:7c:3d:20:44:19:
72:50:8a:9d:95:ce:94:83:c6:52:03:c5:c1:0e:f6:12:ae:9c:
4e:2d:c7:c2
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhDsAe0e8FmaGn6PoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTA5MDc4ZTQtM2FkNS00MjQyLTlmM2UtMDU4MTYxYzk3
YTlmMB4XDTI0MTIyMDAyMDA0MFoXDTI1MDMyMDAxMDA0MFowLzEtMCsGA1UEAxMk
N2ZiNDJjNGItOTZmMy00ODcxLThkMWUtNjRlOWRkZWZiMGQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03uO2KX986/NfHsHJ9SKiwYUY/+Z3pn1zWlu
dRVXZIgQtQnk14gaXAFepknpqQecpNl+MNb38UhWJweUXjhFAfuncydUTi+JPlTo
vO8N9aBiHLY1UvQc3eIBn6llq1tpgD3DYLL0V9DWmYwaBTbjCNawXRrWTHxZZ49H
hcMnqDNWP14PPNYCyCcxFMMnCSMU0jO33aUxDbqGYgyECcWfkJFOl9tlQvoefup4
wPaygZfH3m62xXZvOJAAYbpuslP1VNZiLGK5OgZqqc8acE3IrT5d4ZHoyr9Aw5na
dUIBvVLYXQ2LoMypLMOClEK4BjrolVGFuUZl6HiTUxJYS/vxHQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDBgBimKU2r7igTRyNRNAiL/UmH8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMDkw
NzhlNC0zYWQ1LTQyNDItOWYzZS0wNTgxNjFjOTdhOWYvOWY4NzJjZWMtY2I4OS0z
ZDk5LWEyNzUtZTM4NWZkMTg4NDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTA5MDc4ZTQtM2FkNS00MjQyLTlm
M2UtMDU4MTYxYzk3YTlmLzEwOTA3OGU0LTNhZDUtNDI0Mi05ZjNlLTA1ODE2MWM5
N2E5Zi5jcmwwHwYDVR0jBBgwFoAU1x7+GbjHHxN4q9PR4KiPNXpWxhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xMDkwNzhlNC0zYWQ1LTQyNDItOWYzZS0wNTgx
NjFjOTdhOWYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0WowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEALySD1LKIon4UGOtI/vPdxNoQEK7Nn/1a3NMP5nRCNoscwZOwDxcjLQa9
piQz3TP6LlLJ2s+eZAz62NNyNuDP6m6pMq6UVcDgUtN6dSNpWEpy/30tAb5v7ZbL
yjvv7lYQzw6AN9CuMi2NlRrg9xOfbFyoCSUezRXjwx0xwufOb/WT4Nii7hRSbZ5v
Zx5uZ7fFBHK0RwmCV1SYKbHlYYUpOvVGNBhkkT+TGecshtFNzy3ilf5A0UjrkRLC
XF9B4XOVZgnkm1ZkErM9IwSYnzEBEAWLY0akNNt88znjhQgQAd95H+GcUXw9IEQZ
clCKnZXOlIPGUgPFwQ72Eq6cTi3Hwg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:27:49 2025 by rpki-client