Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/cd93a255-e514-3611-be7c-946b8830ac3e.roa
File: cd93a255-e514-3611-be7c-946b8830ac3e.roa (raw, json)
Hash identifier: Ljn5iIRgY9+K5uuc+AM7W++q7jrC0OL6lpXSBRwFkhI=
Subject key identifier: 88:D9:AA:3C:DB:DF:C6:EC:2A:0D:BB:BD:B2:65:35:B5:CD:A5:5D:C0
Certificate issuer: /CN=f04bc7fd-5334-45ee-9a48-3ffb117ad4f3
Certificate serial: 010D0C9F43285848222FE2297EB0017BAF86D8E0
Authority key identifier: 7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/cd93a255-e514-3611-be7c-946b8830ac3e.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 62827
IP address blocks: 209.209.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:e2:29:7e:b0:01:7b:af:86:d8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04bc7fd-5334-45ee-9a48-3ffb117ad4f3
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=e44b4ed8-f903-4c45-94c0-46b6c3a5ec50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0a:36:78:0c:ab:cd:69:c4:69:1a:f3:b6:ea:
b9:8a:2a:28:4e:15:91:cf:c8:6e:9d:ee:45:2c:e6:
76:77:e4:61:b9:0f:cd:fa:ae:55:ee:37:be:7c:17:
17:9d:ed:78:84:27:bf:ed:ef:50:2f:03:6c:d9:e0:
ca:7d:21:c3:ff:e4:d5:df:c5:e7:11:54:f6:ff:09:
dc:81:b4:cb:af:17:e2:2a:c5:22:48:e5:df:27:5b:
36:97:7a:37:bb:c4:9a:1f:29:27:f3:5b:5a:f5:ac:
c6:38:e6:fd:d9:00:cf:7b:6b:28:59:cb:fb:63:a9:
32:83:57:df:66:c1:ff:17:43:39:3d:f1:7f:b9:9f:
cf:40:9f:20:10:ea:68:c1:97:50:83:89:d1:8f:5d:
c5:34:d6:22:67:51:4f:15:ca:66:11:9b:a7:4e:3c:
37:c6:39:e8:bc:40:3c:58:b9:fa:a2:a4:26:9c:c5:
97:59:41:22:1c:d1:b3:47:6a:e2:ea:94:dd:9d:cf:
ae:a5:2c:ef:ae:c2:fa:b9:6c:94:30:67:e8:df:46:
4d:18:b8:e6:fe:6a:70:a7:bf:59:f1:53:a0:5a:f8:
68:f9:94:69:66:4f:32:7c:cd:d9:5e:f9:41:f6:0b:
d0:a9:cb:ea:4c:5f:b0:d9:72:28:3b:2e:8d:9b:93:
b0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D9:AA:3C:DB:DF:C6:EC:2A:0D:BB:BD:B2:65:35:B5:CD:A5:5D:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/cd93a255-e514-3611-be7c-946b8830ac3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.crl
X509v3 Authority Key Identifier:
keyid:7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.209.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:95:0b:e1:f3:35:77:3e:62:5d:41:ed:83:70:ae:0c:a0:4a:
18:ee:87:c3:34:a7:6a:14:9c:51:32:96:6d:16:68:90:33:a8:
d0:08:17:ce:ae:9d:dc:b8:bb:f6:ab:cd:32:9c:02:71:f4:e9:
91:01:52:5f:d2:01:de:af:c9:3e:09:25:b3:91:14:7d:a5:c6:
26:02:45:cc:90:fd:88:bd:91:a3:18:8b:23:b4:63:a6:de:91:
01:b9:e4:40:75:e1:27:17:fc:56:77:b4:70:da:e7:a3:3d:5d:
a5:0d:37:96:90:e4:2e:67:f3:a6:dc:ef:c3:8f:95:e7:e4:7a:
c1:d5:ed:47:29:5b:34:f5:e9:05:a7:7d:49:9d:41:e7:8a:a0:
84:6b:8a:fa:dd:fa:12:cf:64:2f:70:0d:63:02:8b:84:71:1e:
95:e4:df:63:1e:b2:e9:d9:a0:a7:64:3e:14:f4:04:c1:df:78:
07:61:47:1f:86:fe:68:f0:8a:66:93:5c:3d:f1:74:cc:fc:48:
13:71:62:94:3e:3d:18:30:2f:eb:6b:e4:2b:3c:48:30:4b:af:
44:e9:6d:a1:bc:d1:86:1e:e5:97:17:0d:45:b7:99:1d:ee:83:
55:df:12:5a:0c:aa:ef:99:9c:0b:64:20:2d:e6:37:49:d4:aa:
d4:ca:93:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgiL+IpfrABe6+G2OAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjA0YmM3ZmQtNTMzNC00NWVlLTlhNDgtM2ZmYjExN2Fk
NGYzMB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk
ZTQ0YjRlZDgtZjkwMy00YzQ1LTk0YzAtNDZiNmMzYTVlYzUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgo2eAyrzWnEaRrztuq5iiooThWRz8hune5F
LOZ2d+RhuQ/N+q5V7je+fBcXne14hCe/7e9QLwNs2eDKfSHD/+TV38XnEVT2/wnc
gbTLrxfiKsUiSOXfJ1s2l3o3u8SaHykn81ta9azGOOb92QDPe2soWcv7Y6kyg1ff
ZsH/F0M5PfF/uZ/PQJ8gEOpowZdQg4nRj13FNNYiZ1FPFcpmEZunTjw3xjnovEA8
WLn6oqQmnMWXWUEiHNGzR2ri6pTdnc+upSzvrsL6uWyUMGfo30ZNGLjm/mpwp79Z
8VOgWvho+ZRpZk8yfM3ZXvlB9gvQqcvqTF+w2XIoOy6Nm5OwHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIjZqjzb38bsKg27vbJlNbXNpV3AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mMDRi
YzdmZC01MzM0LTQ1ZWUtOWE0OC0zZmZiMTE3YWQ0ZjMvY2Q5M2EyNTUtZTUxNC0z
NjExLWJlN2MtOTQ2Yjg4MzBhYzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjA0YmM3ZmQtNTMzNC00NWVlLTlh
NDgtM2ZmYjExN2FkNGYzL2YwNGJjN2ZkLTUzMzQtNDVlZS05YTQ4LTNmZmIxMTdh
ZDRmMy5jcmwwHwYDVR0jBBgwFoAUe2AW/SJ5rexO1KDn29yN44VzpwYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mMDRiYzdmZC01MzM0LTQ1ZWUtOWE0OC0zZmZi
MTE3YWQ0ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0dFsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHyVC+HzNXc+Yl1B7YNwrgygShjuh8M0p2oUnFEylm0WaJAzqNAIF86u
ndy4u/arzTKcAnH06ZEBUl/SAd6vyT4JJbORFH2lxiYCRcyQ/Yi9kaMYiyO0Y6be
kQG55EB14ScX/FZ3tHDa56M9XaUNN5aQ5C5n86bc78OPlefkesHV7UcpWzT16QWn
fUmdQeeKoIRrivrd+hLPZC9wDWMCi4RxHpXk32MesunZoKdkPhT0BMHfeAdhRx+G
/mjwimaTXD3xdMz8SBNxYpQ+PRgwL+tr5Cs8SDBLr0TpbaG80YYe5ZcXDUW3mR3u
g1XfEloMqu+ZnAtkIC3mN0nUqtTKk3s=
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:41:30 2025 by rpki-client