Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/027dcbdd-c463-3683-98c6-eb82b7f4b006.roa
File: 027dcbdd-c463-3683-98c6-eb82b7f4b006.roa (raw, json)
Hash identifier: i3PjhIA4FJA3DbWPGIKYEbVlvLaB3IxcLCFiLLwl2wQ=
Subject key identifier: B6:85:78:A5:AB:70:97:31:3E:2F:F3:5F:AD:15:7F:36:E5:A6:8E:0D
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F4328584824FA8182E233B791FEA43D40
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/027dcbdd-c463-3683-98c6-eb82b7f4b006.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 328578
IP address blocks: 209.9.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:81:82:e2:33:b7:91:fe:a4:3d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=c4d7cac1-087d-4aa9-b0dc-52b481967868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:35:b3:c8:f5:fb:9f:de:53:b5:2f:a8:1e:16:
1e:25:ca:bd:27:af:12:70:dc:f6:c6:14:b7:d2:0a:
3b:88:5d:c7:e2:35:0f:dd:5c:cd:33:cf:92:ed:77:
38:2a:50:93:9a:e3:2c:69:fd:ab:d2:f3:4a:bf:c6:
10:7a:d5:7d:bd:c3:62:a6:ad:60:f7:02:45:17:7c:
b8:be:b6:31:b2:12:67:fb:fc:3e:ca:56:0c:6f:af:
b8:44:6a:8e:0d:a8:15:9e:df:d8:fd:05:bf:d2:8f:
89:c8:3d:30:f7:58:e2:fa:bd:2e:89:37:01:00:4b:
42:86:a0:31:3b:88:16:7e:ba:7a:d0:59:cf:2b:ba:
0d:92:9b:25:ef:24:12:dd:bc:d1:c6:b7:ba:d4:57:
6a:2a:7d:cd:8c:1d:8f:28:7a:cf:19:d4:64:5f:39:
e5:5c:f9:81:82:c5:93:67:1d:f4:2b:1d:97:31:e0:
a4:cc:0b:35:aa:b1:ca:f9:3f:37:8d:c3:ed:43:2b:
0f:af:cd:f9:1d:fe:b0:2b:36:86:87:1a:78:aa:11:
8a:26:4a:4d:9d:87:c5:e0:00:5e:61:a8:18:01:b9:
41:46:d1:80:69:1d:4b:92:d6:d3:1e:d8:d8:87:49:
64:14:4d:4f:c5:83:43:74:c5:dd:85:35:77:05:61:
55:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:85:78:A5:AB:70:97:31:3E:2F:F3:5F:AD:15:7F:36:E5:A6:8E:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/027dcbdd-c463-3683-98c6-eb82b7f4b006.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
209.9.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:6b:42:0f:b0:dd:d7:a5:c8:cf:88:ad:a1:12:4c:79:32:68:
12:1a:83:dd:32:e4:ff:00:68:b3:8a:b1:e6:c7:58:47:7a:75:
76:fc:4e:7f:75:73:e2:2d:27:85:ad:27:5c:3b:55:50:89:d7:
ea:00:ed:ed:9c:94:38:91:39:03:02:bc:1e:f3:5c:3a:eb:12:
64:01:89:a4:8c:e3:83:8f:49:d3:13:fd:21:8f:85:3d:06:5d:
0e:80:64:4f:2b:73:be:68:54:2e:6e:fc:ad:3a:91:cd:8a:84:
07:15:f4:80:43:22:44:e2:b3:47:a5:8d:aa:9e:7b:9d:f6:a9:
b0:0d:ab:5f:74:9d:2f:b1:da:54:41:82:6e:0c:95:b9:30:21:
29:fc:50:48:f1:82:a9:dd:54:2c:6c:fc:aa:9f:69:16:db:0d:
67:b2:d7:4b:ca:9e:25:e4:d5:55:e7:f1:a7:fc:54:35:99:bb:
07:a5:ca:36:cf:70:fb:6d:bd:e4:af:b9:f5:ea:47:af:20:92:
84:7b:97:17:94:7a:7a:f2:36:02:a8:2a:c6:76:6b:6b:6a:4f:
54:ab:bc:4a:ae:98:69:b2:ca:4e:a0:b3:b8:2d:4e:19:e1:7b:
b2:b3:2d:d2:2d:24:f2:7c:96:96:7f:28:ff:76:73:7d:93:00:
90:d4:13:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgk+oGC4jO3kf6kPUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw
YzQ4MB4XDTI0MTIwOTAyMDA0MFoXDTI1MDMwOTAyMDA0MFowLzEtMCsGA1UEAxMk
YzRkN2NhYzEtMDg3ZC00YWE5LWIwZGMtNTJiNDgxOTY3ODY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjWzyPX7n95TtS+oHhYeJcq9J68ScNz2xhS3
0go7iF3H4jUP3VzNM8+S7Xc4KlCTmuMsaf2r0vNKv8YQetV9vcNipq1g9wJFF3y4
vrYxshJn+/w+ylYMb6+4RGqODagVnt/Y/QW/0o+JyD0w91ji+r0uiTcBAEtChqAx
O4gWfrp60FnPK7oNkpsl7yQS3bzRxre61FdqKn3NjB2PKHrPGdRkXznlXPmBgsWT
Zx30Kx2XMeCkzAs1qrHK+T83jcPtQysPr835Hf6wKzaGhxp4qhGKJkpNnYfF4ABe
YagYAblBRtGAaR1LktbTHtjYh0lkFE1PxYNDdMXdhTV3BWFVTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLaFeKWrcJcxPi/zX60Vfzblpo4NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5
ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvMDI3ZGNiZGQtYzQ2My0z
NjgzLTk4YzYtZWI4MmI3ZjRiMDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm
MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy
MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl
ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0QkBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADJrQg+w3delyM+IraESTHkyaBIag90y5P8AaLOKsebHWEd6dXb8Tn91
c+ItJ4WtJ1w7VVCJ1+oA7e2clDiROQMCvB7zXDrrEmQBiaSM44OPSdMT/SGPhT0G
XQ6AZE8rc75oVC5u/K06kc2KhAcV9IBDIkTis0eljaqee532qbANq190nS+x2lRB
gm4MlbkwISn8UEjxgqndVCxs/KqfaRbbDWey10vKniXk1VXn8af8VDWZuwelyjbP
cPttveSvufXqR68gkoR7lxeUenryNgKoKsZ2a2tqT1SrvEqumGmyyk6gs7gtThnh
e7KzLdItJPJ8lpZ/KP92c32TAJDUE5k=
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:23:32 2025 by rpki-client