Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1beebeaf-1f0e-319d-a76d-aa110fadd44c.roa
File: 1beebeaf-1f0e-319d-a76d-aa110fadd44c.roa (raw, json)
Hash identifier: wqnxVotTKmMaAFVVskbnIbKc9xOJUcsPVuRK0W2JAok=
Subject key identifier: 30:5F:89:99:78:65:62:5D:44:12:55:54:47:DE:7B:64:D7:FF:D7:9B
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848B8F0C93F59C62D656C6F7DC0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1beebeaf-1f0e-319d-a76d-aa110fadd44c.roa
Signing time: Fri 31 Jan 2025 02:00:39 +0000
ROA not before: Fri 31 Jan 2025 02:00:39 +0000
ROA not after: Thu 01 May 2025 01:00:39 +0000
asID: 852
IP address blocks: 209.52.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b8:f0:c9:3f:59:c6:2d:65:6c:6f:7d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 31 02:00:39 2025 GMT
Not After : May 1 01:00:39 2025 GMT
Subject: CN=16f19d31-a6e0-4cb4-9542-1e1a417f8fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:1c:fb:25:7e:a2:f1:9b:d4:10:af:94:52:
34:27:7d:e6:74:69:ac:6f:cd:24:8f:56:93:9d:92:
76:ea:09:08:05:df:03:74:7f:59:25:32:2e:3b:92:
17:82:44:2d:e5:3f:63:54:51:8d:1d:92:d3:85:2a:
90:ff:a6:e5:43:34:8e:91:84:f8:5f:34:d1:8d:66:
77:07:6f:10:e4:d9:c6:0c:1e:ac:bf:03:db:84:e8:
9e:9f:61:f5:d6:ff:41:cd:d4:b1:10:e2:64:91:fd:
6e:40:4f:f6:df:fd:44:3e:90:31:6d:6f:b8:b9:99:
9f:1f:c6:ed:91:92:18:cb:2d:e4:e1:83:90:b4:c8:
9e:f0:7e:fc:3e:39:aa:4d:d8:5d:9d:49:30:10:36:
d5:26:80:42:08:6d:58:89:0d:43:93:45:a3:40:3e:
6b:7b:a3:81:b3:c4:83:5e:63:72:18:25:55:51:2d:
48:a3:92:07:97:81:ff:ed:e1:9d:11:32:58:ba:0d:
53:00:7d:29:55:03:bf:29:03:18:5f:9c:d1:6b:59:
89:90:6b:0a:aa:92:da:33:a8:b3:4f:5f:11:f7:46:
9d:aa:91:09:3d:2d:02:0e:9e:6b:04:b7:bd:d0:4e:
62:ed:03:21:73:b0:de:e9:58:37:6e:6b:c9:97:ba:
ff:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5F:89:99:78:65:62:5D:44:12:55:54:47:DE:7B:64:D7:FF:D7:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1beebeaf-1f0e-319d-a76d-aa110fadd44c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.52.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:71:64:8f:6f:a9:c5:40:5e:3b:b8:2f:54:1c:ff:61:f3:1d:
32:cc:89:5e:d2:9d:63:bf:4b:12:3f:6f:22:5a:2e:18:ec:81:
d8:fc:d8:54:4c:e7:c0:79:8a:97:28:d5:a1:15:44:47:41:d0:
95:2e:9d:d4:c3:1c:a1:64:74:a7:90:e7:33:bc:14:67:dc:51:
34:26:4f:27:58:bc:ef:13:b8:84:04:64:8c:2b:94:f1:54:97:
1f:af:29:33:26:0f:60:26:3e:60:1d:d1:90:d2:7d:08:ea:14:
78:6b:59:74:91:72:52:9b:04:73:cb:af:bc:a7:6c:e3:2f:a3:
22:de:fb:f5:e8:6c:ea:03:59:be:06:42:01:9c:17:ae:14:47:
28:6e:0c:5d:b2:89:85:c4:a1:da:9c:60:83:dd:c3:26:bf:e8:
de:98:f2:21:52:35:22:b5:4f:6d:2e:6d:32:51:7b:11:10:e9:
53:3a:b0:73:76:84:2a:67:c0:95:dd:25:72:63:16:18:0e:6d:
e2:e7:7c:dc:fa:f8:ba:b5:70:55:ea:40:41:b1:fb:5a:97:c4:
cd:aa:f6:53:71:45:98:45:1f:24:69:92:55:32:9f:72:a5:39:
f6:9f:1c:f5:ac:78:03:f9:2f:33:ae:23:13:a7:7b:56:55:4a:
45:ae:53:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48Mk/WcYtZWxvfcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk
MTZmMTlkMzEtYTZlMC00Y2I0LTk1NDItMWUxYTQxN2Y4ZmQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSAc+yV+ovGb1BCvlFI0J33mdGmsb80kj1aT
nZJ26gkIBd8DdH9ZJTIuO5IXgkQt5T9jVFGNHZLThSqQ/6blQzSOkYT4XzTRjWZ3
B28Q5NnGDB6svwPbhOien2H11v9BzdSxEOJkkf1uQE/23/1EPpAxbW+4uZmfH8bt
kZIYyy3k4YOQtMie8H78PjmqTdhdnUkwEDbVJoBCCG1YiQ1Dk0WjQD5re6OBs8SD
XmNyGCVVUS1Io5IHl4H/7eGdETJYug1TAH0pVQO/KQMYX5zRa1mJkGsKqpLaM6iz
T18R90adqpEJPS0CDp5rBLe90E5i7QMhc7De6Vg3bmvJl7r/pQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDBfiZl4ZWJdRBJVVEfee2TX/9ebMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMWJlZWJlYWYtMWYwZS0z
MTlkLWE3NmQtYWExMTBmYWRkNDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0TQoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGJxZI9vqcVAXju4L1Qc/2HzHTLMiV7SnWO/SxI/byJaLhjsgdj82FRM
58B5ipco1aEVREdB0JUundTDHKFkdKeQ5zO8FGfcUTQmTydYvO8TuIQEZIwrlPFU
lx+vKTMmD2AmPmAd0ZDSfQjqFHhrWXSRclKbBHPLr7ynbOMvoyLe+/XobOoDWb4G
QgGcF64URyhuDF2yiYXEodqcYIPdwya/6N6Y8iFSNSK1T20ubTJRexEQ6VM6sHN2
hCpnwJXdJXJjFhgObeLnfNz6+Lq1cFXqQEGx+1qXxM2q9lNxRZhFHyRpklUyn3Kl
OfafHPWseAP5LzOuIxOne1ZVSkWuUzY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:18:25 2025 by rpki-client