Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8ac69690-c3b8-3bba-82fc-102f743b397b.roa
File: 8ac69690-c3b8-3bba-82fc-102f743b397b.roa (raw, json)
Hash identifier: i3dGoIM2WWExXFk/v4omrZ8GL5Rvr5HLz6PZdx1gey8=
Subject key identifier: 3B:D7:86:E2:95:39:CD:30:21:32:BB:50:3F:CA:73:EF:4E:27:35:95
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848143A7C76362042457F298640
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8ac69690-c3b8-3bba-82fc-102f743b397b.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 136448
IP address blocks: 209.9.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:7c:76:36:20:42:45:7f:29:86:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=7157276f-dc47-4b1c-b9bf-c3dba318e573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d0:8a:03:0b:a6:a3:61:dd:ae:68:05:12:fa:
be:6d:04:0f:d8:97:56:a2:d3:a3:33:b1:05:ad:26:
0e:5d:36:fa:59:89:de:c0:91:ca:96:c7:84:02:85:
10:bb:ca:ff:c3:90:1c:aa:98:39:de:3b:76:da:a3:
da:a5:c4:df:2f:df:39:d4:b1:25:56:d4:ca:f3:68:
3e:53:a8:03:d6:e1:7f:21:2b:e1:22:89:ab:01:53:
aa:35:36:25:90:51:3d:f4:64:83:c0:88:96:52:5d:
c2:91:1f:3d:f1:bd:06:15:3e:68:ab:9b:cb:34:78:
96:6c:ab:08:c9:0c:20:99:42:c1:db:52:85:f4:13:
7e:c4:0f:07:2b:a6:36:d2:fb:d9:ec:d7:ea:8e:4d:
8d:9a:51:22:98:9e:78:64:ab:5e:a2:2a:ef:64:22:
ae:71:8d:e3:67:28:07:c6:02:37:44:20:97:bf:ce:
93:e5:70:13:df:cf:4e:43:f4:93:8b:56:1e:c7:44:
1f:1d:a6:8b:3f:ff:04:fe:9e:82:5d:20:78:c0:2b:
53:7d:a2:02:0f:d6:08:3b:c5:47:32:5c:7a:ba:ac:
b1:23:db:f7:3f:55:a3:65:22:5f:0d:9d:85:02:ad:
97:b7:42:a6:99:1d:d7:e2:14:44:41:23:f7:00:8a:
dd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D7:86:E2:95:39:CD:30:21:32:BB:50:3F:CA:73:EF:4E:27:35:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8ac69690-c3b8-3bba-82fc-102f743b397b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
209.9.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:89:b3:28:e4:8b:47:6e:b5:dc:d1:15:e3:e9:70:c5:d1:d9:
7c:75:ca:b4:29:7f:eb:e2:cf:00:2a:af:74:59:06:b3:11:c2:
81:51:6f:77:e8:0f:c9:e3:11:a3:fc:a7:a4:ca:6a:10:2c:84:
91:d6:e9:9e:f0:51:10:6f:6a:b2:6a:d8:7e:fe:50:b6:22:5c:
c8:db:7c:df:3f:41:e5:1f:ff:c6:a5:59:0a:fe:16:a3:99:87:
b7:58:21:cf:c8:4e:e2:11:21:95:66:4b:96:a2:ff:b8:ec:30:
0f:7e:d2:88:11:2c:52:c4:c9:c7:0f:3d:49:31:b7:40:6f:f4:
04:a9:4a:8f:7b:c7:82:f3:a4:5b:c6:1c:a3:25:2f:d4:76:21:
f8:8b:67:cc:12:0e:dd:15:7e:f6:cd:c0:a9:e3:15:e0:d6:bf:
c2:fc:d8:0f:55:9e:a6:8e:1c:3e:74:36:62:8e:ad:29:7f:03:
73:ac:ed:15:dd:75:9e:35:07:7e:1e:d8:b1:06:93:52:27:d6:
8b:2e:f4:35:4d:b7:38:6a:c9:05:53:a8:c3:00:b2:9f:5b:91:
f9:a2:3a:23:60:76:2a:a8:9b:ab:1c:08:9d:93:20:93:d4:6d:
67:0a:61:fa:33:ff:77:06:c7:ab:6f:6e:2a:c0:32:21:52:a9:
ee:f7:61:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOnx2NiBCRX8phkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw
YzQ4MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
NzE1NzI3NmYtZGM0Ny00YjFjLWI5YmYtYzNkYmEzMThlNTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtCKAwumo2HdrmgFEvq+bQQP2JdWotOjM7EF
rSYOXTb6WYnewJHKlseEAoUQu8r/w5Acqpg53jt22qPapcTfL9851LElVtTK82g+
U6gD1uF/ISvhIomrAVOqNTYlkFE99GSDwIiWUl3CkR898b0GFT5oq5vLNHiWbKsI
yQwgmULB21KF9BN+xA8HK6Y20vvZ7Nfqjk2NmlEimJ54ZKteoirvZCKucY3jZygH
xgI3RCCXv86T5XAT389OQ/STi1Yex0QfHaaLP/8E/p6CXSB4wCtTfaICD9YIO8VH
Mlx6uqyxI9v3P1WjZSJfDZ2FAq2Xt0KmmR3X4hREQSP3AIrdiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDvXhuKVOc0wITK7UD/Kc+9OJzWVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5
ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvOGFjNjk2OTAtYzNiOC0z
YmJhLTgyZmMtMTAyZjc0M2IzOTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm
MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy
MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl
ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0QnUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABiJsyjki0dutdzRFePpcMXR2Xx1yrQpf+vizwAqr3RZBrMRwoFRb3fo
D8njEaP8p6TKahAshJHW6Z7wURBvarJq2H7+ULYiXMjbfN8/QeUf/8alWQr+FqOZ
h7dYIc/ITuIRIZVmS5ai/7jsMA9+0ogRLFLEyccPPUkxt0Bv9ASpSo97x4LzpFvG
HKMlL9R2IfiLZ8wSDt0VfvbNwKnjFeDWv8L82A9VnqaOHD50NmKOrSl/A3Os7RXd
dZ41B34e2LEGk1In1osu9DVNtzhqyQVTqMMAsp9bkfmiOiNgdiqom6scCJ2TIJPU
bWcKYfoz/3cGx6tvbirAMiFSqe73Yd0=
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:22:03 2025 by rpki-client