Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/da1badaf-a81a-3e30-a837-19d39181a3ec.roa
File: da1badaf-a81a-3e30-a837-19d39181a3ec.roa (raw, json)
Hash identifier: VTfZx9x68xaegT+MqxpUgBTDM8cDzfp87icg35pFGY8=
Subject key identifier: AF:33:AB:2F:E1:73:90:AE:1D:24:7A:50:16:40:11:21:4B:DF:BD:62
Certificate issuer: /CN=d578f033-7588-487c-9d67-16453bc5710a
Certificate serial: 010D0C9F43285848A400B91B104450341203CB60
Authority key identifier: 01:EC:38:FE:98:BE:12:4B:D8:6C:E5:E5:D0:83:C2:AB:ED:62:77:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/da1badaf-a81a-3e30-a837-19d39181a3ec.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 14618
IP address blocks: 209.142.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:b9:1b:10:44:50:34:12:03:cb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d578f033-7588-487c-9d67-16453bc5710a
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=9068010b-8f8d-47fa-a56e-1c9979d2d36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:69:60:51:00:ec:60:a7:bf:2d:53:29:8c:8c:
52:c9:f5:24:1c:f5:a3:33:b2:c9:1c:4f:dc:2a:e0:
bd:c5:84:ad:4a:0f:61:f9:1a:d4:1a:fa:23:fd:71:
38:0e:a6:92:54:a2:a3:30:c1:ed:27:1b:87:a0:e7:
dc:98:87:32:84:5d:d5:c6:b4:6a:d7:81:35:95:b3:
41:72:6f:cc:9e:03:82:13:25:3f:8f:0a:b3:5c:47:
1e:15:0a:9d:f5:12:ed:98:e1:bd:6a:0d:4a:83:aa:
b2:db:b5:21:c9:13:39:76:62:7a:c5:f0:3a:9b:bf:
81:9e:71:6d:b3:21:21:80:d0:02:54:06:53:f6:b8:
ac:b1:b6:fd:32:0d:19:bf:34:48:63:fc:88:1c:8e:
32:fd:a7:8d:1c:b7:73:dd:a2:de:c7:ba:5b:4f:5e:
1f:c7:08:75:47:b2:6a:0b:74:28:bb:40:b2:35:f4:
a3:3b:ca:d4:3c:31:bd:94:1f:38:5d:68:03:ca:29:
a3:b0:dc:94:a8:97:fd:1b:b3:40:90:ec:de:6c:a4:
fc:88:29:4f:98:0c:bc:93:22:56:d1:3b:42:04:fc:
76:ba:6c:b8:4b:07:a4:d9:d5:1f:2b:c1:69:d4:b7:
82:48:7a:1c:25:6d:a0:3c:9c:d2:57:ab:6f:4b:f8:
2a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:33:AB:2F:E1:73:90:AE:1D:24:7A:50:16:40:11:21:4B:DF:BD:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/da1badaf-a81a-3e30-a837-19d39181a3ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/d578f033-7588-487c-9d67-16453bc5710a.crl
X509v3 Authority Key Identifier:
keyid:01:EC:38:FE:98:BE:12:4B:D8:6C:E5:E5:D0:83:C2:AB:ED:62:77:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a.cer
sbgp-ipAddrBlock: critical
IPv4:
209.142.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:04:f5:c3:7a:a6:33:1e:02:8a:d0:71:51:96:1d:e8:c2:4b:
e6:18:9e:49:e2:bf:ea:00:c4:07:0f:c9:fb:74:fa:8b:e6:10:
fc:72:b5:24:64:3a:60:9c:6e:b9:90:92:3e:67:ab:83:be:0a:
5c:0a:c6:70:85:28:7a:cd:5d:b9:83:1f:d7:b7:fd:cc:79:7f:
f6:c0:60:b8:19:2b:26:6e:23:aa:da:df:c3:a6:00:ca:23:76:
e1:d6:b0:52:1d:59:41:bf:c6:c3:fb:c5:48:80:73:d5:02:e9:
69:ca:36:b9:0f:96:7f:74:85:75:21:70:1a:96:f5:69:ac:b6:
44:22:32:b1:cb:bb:84:ad:b9:11:85:b9:47:cc:b2:78:09:f7:
3e:de:fb:18:1c:53:07:9e:80:4d:32:88:a6:a8:ef:a6:3b:05:
ff:31:3f:5d:9d:ca:60:9e:88:b1:de:fc:f4:0c:d3:c5:95:a8:
e6:bc:49:24:89:1f:d3:3d:d6:17:bc:c9:a7:ab:74:1f:ca:19:
3b:98:ba:35:76:e6:17:a5:b4:fe:a1:9b:17:12:24:cb:a3:53:
06:d6:a8:18:85:8a:9a:31:ca:7f:9b:89:cf:e9:33:70:f8:ef:
0c:79:57:5d:4f:a3:ea:1c:42:eb:18:fa:b3:fd:bb:b3:21:1c:
df:78:0b:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikALkbEERQNBIDy2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDU3OGYwMzMtNzU4OC00ODdjLTlkNjctMTY0NTNiYzU3
MTBhMB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk
OTA2ODAxMGItOGY4ZC00N2ZhLWE1NmUtMWM5OTc5ZDJkMzZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWlgUQDsYKe/LVMpjIxSyfUkHPWjM7LJHE/c
KuC9xYStSg9h+RrUGvoj/XE4DqaSVKKjMMHtJxuHoOfcmIcyhF3VxrRq14E1lbNB
cm/MngOCEyU/jwqzXEceFQqd9RLtmOG9ag1Kg6qy27UhyRM5dmJ6xfA6m7+BnnFt
syEhgNACVAZT9rissbb9Mg0ZvzRIY/yIHI4y/aeNHLdz3aLex7pbT14fxwh1R7Jq
C3Qou0CyNfSjO8rUPDG9lB84XWgDyimjsNyUqJf9G7NAkOzebKT8iClPmAy8kyJW
0TtCBPx2umy4Swek2dUfK8Fp1LeCSHocJW2gPJzSV6tvS/gqeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK8zqy/hc5CuHSR6UBZAESFL371iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNTc4
ZjAzMy03NTg4LTQ4N2MtOWQ2Ny0xNjQ1M2JjNTcxMGEvZGExYmFkYWYtYTgxYS0z
ZTMwLWE4MzctMTlkMzkxODFhM2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDU3OGYwMzMtNzU4OC00ODdjLTlk
NjctMTY0NTNiYzU3MTBhL2Q1NzhmMDMzLTc1ODgtNDg3Yy05ZDY3LTE2NDUzYmM1
NzEwYS5jcmwwHwYDVR0jBBgwFoAUAew4/pi+EkvYbOXl0IPCq+1id4owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNTc4ZjAzMy03NTg4LTQ4N2MtOWQ2Ny0xNjQ1
M2JjNTcxMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y5wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE4E9cN6pjMeAorQcVGWHejCS+YYnkniv+oAxAcPyft0+ovmEPxytSRk
OmCcbrmQkj5nq4O+ClwKxnCFKHrNXbmDH9e3/cx5f/bAYLgZKyZuI6ra38OmAMoj
duHWsFIdWUG/xsP7xUiAc9UC6WnKNrkPln90hXUhcBqW9WmstkQiMrHLu4StuRGF
uUfMsngJ9z7e+xgcUweegE0yiKao76Y7Bf8xP12dymCeiLHe/PQM08WVqOa8SSSJ
H9M91he8yaerdB/KGTuYujV25heltP6hmxcSJMujUwbWqBiFipoxyn+bic/pM3D4
7wx5V11Po+ocQusY+rP9u7MhHN94Cw0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:02 2025 by rpki-client