Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b2ddddcb-a89f-36e0-9ef3-8603aafc4b8a.roa
File: b2ddddcb-a89f-36e0-9ef3-8603aafc4b8a.roa (raw, json)
Hash identifier: Kmq3TqRmfFpP3+up//DB13Np6RuTseeKTG44axCPz1Q=
Subject key identifier: E5:D8:50:92:DA:3F:65:9F:01:AE:2F:FA:16:8E:22:D4:DD:44:77:19
Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial: 010D0C9F4328584824FA9038E133DF5CD0558000
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b2ddddcb-a89f-36e0-9ef3-8603aafc4b8a.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 12189
IP address blocks: 209.51.128.0/24 maxlen: 24
209.51.134.0/24 maxlen: 24
209.51.136.0/24 maxlen: 24
209.51.152.0/24 maxlen: 24
209.51.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:90:38:e1:33:df:5c:d0:55:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=36fde0fd-bf81-4eef-89d8-cb6a0b8ff7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:a4:ea:b7:06:38:fb:03:61:69:72:d1:6d:
75:49:d5:1c:b7:db:2a:97:66:dc:4a:1b:11:57:55:
43:a7:0c:8a:fc:ab:93:c5:86:9e:07:c9:8d:aa:1e:
bc:a2:eb:b6:dd:c5:25:77:e9:cf:7b:e0:ba:3e:0a:
3f:06:36:65:9e:f4:73:30:e3:9d:0c:58:fc:cf:54:
6a:a4:39:9f:1a:6f:18:3c:75:16:a4:d7:95:72:dc:
e2:98:7f:3f:7e:49:52:da:fa:1c:f3:0a:e1:30:0c:
af:ad:30:84:8b:f3:b5:47:94:dd:c0:57:0a:d1:97:
d3:35:38:b7:b9:cb:66:03:d6:69:16:a2:b0:84:15:
0a:51:4a:44:c1:ab:a4:0f:d7:5a:3d:0d:be:e5:de:
4a:f9:27:15:ed:c9:69:d3:34:26:fe:60:93:8d:0c:
7f:fe:a3:a9:27:ab:95:a6:a1:72:4d:b0:91:cd:7c:
43:f5:2d:b2:ed:3d:9f:fe:06:3a:e9:d7:f6:ac:8f:
4a:c0:06:32:41:74:77:47:3f:9b:7b:04:c2:91:3c:
cb:fd:88:8e:ca:b2:b1:c3:6e:f8:57:35:8e:df:75:
1d:8e:a8:43:06:c7:b5:d5:b6:b4:de:5d:24:73:0b:
6e:df:e8:c1:24:98:d1:83:b3:59:88:f0:37:ba:a7:
8f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D8:50:92:DA:3F:65:9F:01:AE:2F:FA:16:8E:22:D4:DD:44:77:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b2ddddcb-a89f-36e0-9ef3-8603aafc4b8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
X509v3 Authority Key Identifier:
keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
sbgp-ipAddrBlock: critical
IPv4:
209.51.128.0/24
209.51.134.0/24
209.51.136.0/24
209.51.152.0/24
209.51.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:b5:75:ba:3e:f8:b9:5b:b4:a2:6a:7b:1f:d5:04:90:05:83:
d9:3f:b1:f5:00:ec:62:f6:83:d5:01:a2:68:88:65:83:81:e4:
45:50:a1:e9:20:7e:bd:70:5a:56:0e:93:fe:de:20:cb:28:55:
84:9f:e9:dc:0b:1b:3c:6d:aa:27:fd:8d:6d:c1:5a:ad:b0:50:
23:8d:65:f2:18:49:06:66:8a:f8:7b:d5:c8:a0:d5:7f:c9:f4:
f3:8e:d3:17:1a:17:4a:ea:6b:44:56:2c:fb:76:94:f2:94:47:
3c:9b:4a:4e:35:86:98:29:b3:c2:36:e1:dd:c5:88:dc:d6:8d:
d8:b0:b4:92:e1:ad:76:99:57:cd:cb:70:4e:e9:6a:46:db:2b:
e7:24:e7:2c:67:ee:ee:71:4b:a5:6b:82:15:42:6f:06:87:17:
1a:d2:ff:6d:bf:67:cb:3f:00:dd:33:ab:0c:89:15:80:0d:97:
a5:01:57:83:0d:12:ca:18:10:4b:9c:13:17:b7:8d:e3:b5:6f:
24:c5:74:de:77:02:17:fc:ef:75:0f:dd:7b:fd:56:5a:81:95:
cb:54:46:e0:9b:69:19:fb:9d:8c:93:93:41:da:3d:2d:5d:28:
33:5a:b4:d4:f2:8d:81:16:7f:f0:8a:25:f5:99:7f:12:98:63:
23:1a:6d:e2
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEgk+pA44TPfXNBVgAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk
ZjgwMB4XDTI0MTIwOTAyMDA0MFoXDTI1MDMwOTAyMDA0MFowLzEtMCsGA1UEAxMk
MzZmZGUwZmQtYmY4MS00ZWVmLTg5ZDgtY2I2YTBiOGZmN2ZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiWk6rcGOPsDYWly0W11SdUct9sql2bcShsR
V1VDpwyK/KuTxYaeB8mNqh68ouu23cUld+nPe+C6Pgo/BjZlnvRzMOOdDFj8z1Rq
pDmfGm8YPHUWpNeVctzimH8/fklS2voc8wrhMAyvrTCEi/O1R5TdwFcK0ZfTNTi3
uctmA9ZpFqKwhBUKUUpEwaukD9daPQ2+5d5K+ScV7clp0zQm/mCTjQx//qOpJ6uV
pqFyTbCRzXxD9S2y7T2f/gY66df2rI9KwAYyQXR3Rz+bewTCkTzL/YiOyrKxw274
VzWO33UdjqhDBse11ba03l0kcwtu3+jBJJjRg7NZiPA3uqePZQIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFOXYUJLaP2WfAa4v+haOItTdRHcZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh
NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvYjJkZGRkY2ItYTg5Zi0z
NmUwLTllZjMtODYwM2FhZmM0YjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj
NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0
ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5
MDI3NGRmODAuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQA0TOAAwQA
0TOGAwQA0TOIAwQA0TOYAwQA0TOcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFO1dbo++LlbtKJqex/VBJAF
g9k/sfUA7GL2g9UBomiIZYOB5EVQoekgfr1wWlYOk/7eIMsoVYSf6dwLGzxtqif9
jW3BWq2wUCONZfIYSQZmivh71cig1X/J9POO0xcaF0rqa0RWLPt2lPKURzybSk41
hpgps8I24d3FiNzWjdiwtJLhrXaZV83LcE7pakbbK+ck5yxn7u5xS6VrghVCbwaH
FxrS/22/Z8s/AN0zqwyJFYANl6UBV4MNEsoYEEucExe3jeO1byTFdN53Ahf873UP
3Xv9VlqBlctURuCbaRn7nYyTk0HaPS1dKDNatNTyjYEWf/CKJfWZfxKYYyMabeI=
-----END CERTIFICATE-----
Generated at Sun May 11 09:08:45 2025 by rpki-client