Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/46f71593-8d16-34d8-83d8-05930fa200d6.roa
File: 46f71593-8d16-34d8-83d8-05930fa200d6.roa (raw, json)
Hash identifier: +3Bs2nOK+6Yz/1kIqqIoI0z9WeSBCuwKTcwIcHWc/7U=
Subject key identifier: 18:E2:62:02:BA:28:09:53:9A:79:62:01:7D:CC:3B:C1:DA:89:1F:8A
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F432858481C9A8A3865998E9B6FA99080
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/46f71593-8d16-34d8-83d8-05930fa200d6.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 327738
IP address blocks: 209.9.1.0/24 maxlen: 24
209.9.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:8a:38:65:99:8e:9b:6f:a9:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=7e11ae36-0bcb-4654-ac0b-5f349088c439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:52:7b:ce:ca:fe:4b:67:8e:a2:a0:3f:ae:
0e:11:ea:6e:68:01:ae:37:69:6b:23:c6:c1:eb:df:
15:b2:03:54:74:b2:b0:9e:f2:69:c9:34:45:bc:ec:
a9:af:5f:c8:23:e9:e0:66:2a:04:43:29:29:bf:f0:
09:83:96:d6:0a:0f:72:13:1c:80:3c:92:a1:03:d6:
c6:04:9b:23:65:64:67:4e:66:fd:32:33:e2:29:11:
b8:b7:b8:49:57:53:97:74:c5:87:27:31:5d:3e:f7:
fd:32:0b:fe:70:da:50:8b:d9:91:c4:ea:db:8f:79:
21:a1:3c:e9:36:ff:4f:9f:2a:74:44:80:f8:2d:07:
64:87:3f:a3:1f:74:91:96:16:d6:37:fb:b0:fe:4b:
58:67:7b:9b:99:61:74:ca:03:66:d0:4c:17:1f:35:
69:20:97:0c:46:d4:0f:ef:8b:47:47:b5:28:70:d9:
15:d8:ef:e2:3b:85:68:77:2d:35:a5:d3:58:8f:9b:
63:f4:0a:90:0f:a4:6a:88:8e:0b:d8:0e:bf:c5:27:
7f:55:a6:6c:1b:e5:cf:cf:4e:58:50:ab:a5:a0:89:
39:63:03:bf:91:07:a0:b2:d3:79:b0:36:83:41:88:
63:f0:bc:33:c2:32:bb:24:f6:a7:23:b1:c5:8a:d3:
a2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E2:62:02:BA:28:09:53:9A:79:62:01:7D:CC:3B:C1:DA:89:1F:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/46f71593-8d16-34d8-83d8-05930fa200d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
209.9.1.0/24
209.9.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:db:dd:cf:35:f4:54:73:d5:42:8d:69:1a:1a:5f:c5:54:f1:
ca:d1:c2:8a:e5:13:cf:52:23:bd:d2:ca:be:e5:82:4e:3a:e6:
8d:a0:f5:2d:34:99:47:4b:3d:d3:f0:af:f6:b5:8c:89:c7:f6:
b0:89:0d:08:02:ff:9a:b7:af:0f:2b:b0:d6:d9:60:f6:e7:69:
cd:0b:02:98:2a:9a:bf:7b:4b:b1:d0:37:6b:8b:82:1f:af:28:
f9:47:2e:4a:ba:21:77:fa:04:be:f5:7a:1d:74:22:ae:35:63:
1b:ff:64:31:bf:2c:56:7e:74:98:4f:92:4f:1a:36:ec:0e:26:
d1:f9:1a:b7:23:f0:0e:b3:f3:0f:0c:9f:3f:14:2a:79:15:b7:
7e:02:88:98:32:8a:80:a0:5b:a7:95:eb:03:a7:3a:3b:f7:10:
7f:b4:34:22:3d:4f:12:11:95:54:3e:25:6d:bf:a9:67:df:e8:
c9:b6:84:b4:37:ed:76:01:23:0b:bc:0c:01:f1:5a:fa:01:00:
10:e0:f5:57:4e:35:91:f3:6b:36:0b:0e:1c:50:20:ee:f2:92:
fb:d0:b6:a1:09:3f:9d:bf:2c:21:73:60:76:75:6b:77:05:d1:
f1:90:98:0c:64:1f:51:c3:3e:3a:e3:25:9b:d4:df:ab:b9:27:
87:8e:d3:cf
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEgcmoo4ZZmOm2+pkIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw
YzQ4MB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk
N2UxMWFlMzYtMGJjYi00NjU0LWFjMGItNWYzNDkwODhjNDM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2FSe87K/ktnjqKgP64OEepuaAGuN2lrI8bB
698VsgNUdLKwnvJpyTRFvOypr1/II+ngZioEQykpv/AJg5bWCg9yExyAPJKhA9bG
BJsjZWRnTmb9MjPiKRG4t7hJV1OXdMWHJzFdPvf9Mgv+cNpQi9mRxOrbj3khoTzp
Nv9Pnyp0RID4LQdkhz+jH3SRlhbWN/uw/ktYZ3ubmWF0ygNm0EwXHzVpIJcMRtQP
74tHR7UocNkV2O/iO4Vody01pdNYj5tj9AqQD6RqiI4L2A6/xSd/VaZsG+XPz05Y
UKuloIk5YwO/kQegstN5sDaDQYhj8LwzwjK7JPanI7HFitOiQQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFBjiYgK6KAlTmnliAX3MO8HaiR+KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5
ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvNDZmNzE1OTMtOGQxNi0z
NGQ4LTgzZDgtMDU5MzBmYTIwMGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm
MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy
MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl
ZGEyMjBjNDguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0QkBAwQA
0QkFMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAIXb3c819FRz1UKNaRoaX8VU8crRworlE89SI73Syr7lgk46
5o2g9S00mUdLPdPwr/a1jInH9rCJDQgC/5q3rw8rsNbZYPbnac0LApgqmr97S7HQ
N2uLgh+vKPlHLkq6IXf6BL71eh10Iq41Yxv/ZDG/LFZ+dJhPkk8aNuwOJtH5Grcj
8A6z8w8Mnz8UKnkVt34CiJgyioCgW6eV6wOnOjv3EH+0NCI9TxIRlVQ+JW2/qWff
6Mm2hLQ37XYBIwu8DAHxWvoBABDg9VdONZHzazYLDhxQIO7ykvvQtqEJP52/LCFz
YHZ1a3cF0fGQmAxkH1HDPjrjJZvU36u5J4eO088=
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:23:48 2025 by rpki-client