Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/ff7ae68c-02e6-3bb2-b0fa-94df0dbbd6fc.roa
File: ff7ae68c-02e6-3bb2-b0fa-94df0dbbd6fc.roa (raw, json)
Hash identifier: 8j9/aQYKtavX/4JHFI4jG+3TAJF8Hd5LkrNHD+vtRIk=
Subject key identifier: 82:E2:66:1A:9A:0C:05:FF:94:D6:8D:E4:E5:88:F3:51:FF:02:1F:69
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848143A7E67DF7193E665339780
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/ff7ae68c-02e6-3bb2-b0fa-94df0dbbd6fc.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 30103
IP address blocks: 209.9.211.0/24 maxlen: 24
209.9.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:7e:67:df:71:93:e6:65:33:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=2deda0e4-4565-4875-8907-176b87e794ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ac:b5:52:df:88:80:7d:a6:96:e0:28:1f:e0:
93:9c:59:75:56:78:15:de:01:7f:c0:8c:49:f1:f8:
4e:de:25:3c:a8:57:70:22:c1:33:cf:fa:ac:ab:9e:
f1:00:ad:41:c5:8b:f8:17:9b:6e:7e:d2:e5:07:8b:
b8:28:c3:b2:70:50:25:1a:f9:fe:58:b1:4d:e4:ae:
f6:56:45:a8:e2:d3:21:d3:ce:ca:10:f3:82:55:73:
63:c3:ea:63:43:40:24:ef:f2:e7:54:8a:cd:f2:24:
be:36:e2:f9:59:44:84:9d:2f:1f:7d:09:20:b7:32:
2c:c6:d6:38:69:c0:a7:04:4a:bb:f7:f6:55:35:70:
d5:65:13:23:4d:64:76:cc:d4:0f:30:d5:9a:ab:c1:
16:33:67:ad:c9:fb:f5:42:0a:0e:85:28:ad:4c:de:
be:fb:d3:b8:e4:84:09:28:bd:2c:05:f4:9f:96:ed:
f2:84:8c:03:28:30:6c:2c:0b:cb:20:f2:32:5f:db:
42:44:16:8a:8f:0b:fd:c4:1c:f0:51:3c:17:df:30:
0b:13:5e:f8:49:4d:e5:1d:07:39:29:05:a0:ea:a8:
9b:a2:06:bc:53:a3:c9:79:4c:f9:d0:3a:d1:ed:4e:
38:f7:6c:9a:75:08:be:d2:10:49:35:c6:01:5f:98:
1d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E2:66:1A:9A:0C:05:FF:94:D6:8D:E4:E5:88:F3:51:FF:02:1F:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/ff7ae68c-02e6-3bb2-b0fa-94df0dbbd6fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
209.9.211.0/24
209.9.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:b0:f5:32:50:77:94:9f:ce:ac:c3:b1:1e:f4:2e:f1:11:3c:
5e:43:07:7c:09:e9:e0:fa:0a:d4:bf:2c:03:9c:c8:18:60:77:
97:73:0a:53:96:f3:a1:0e:35:ea:f6:72:55:02:0a:7d:78:30:
c0:b2:bf:fb:a8:29:4d:9d:cd:03:14:d5:f1:67:f8:7b:e1:a0:
f6:52:57:a4:ca:f0:71:ec:ba:4f:69:0d:3c:7b:99:c0:17:eb:
39:8d:83:b8:86:8b:ca:5c:c9:9a:72:eb:38:80:44:01:0c:3f:
dd:73:1d:3c:45:d3:ec:f1:5d:a8:6e:78:32:8b:7f:18:07:4a:
24:7d:0b:1d:69:13:10:03:e9:af:0e:ef:69:2d:57:61:ed:9f:
cb:14:c6:f3:a6:65:39:3e:a0:7d:98:5c:32:8d:a3:56:02:91:
5b:25:e4:a1:13:2f:a9:79:0a:39:1f:50:2b:3a:5c:b5:12:5b:
63:c8:d9:d2:ee:94:83:95:84:e9:de:4e:df:58:b8:9a:b1:6a:
ff:30:1a:c0:74:f3:fa:40:9a:fd:6b:e3:db:14:d8:51:6b:94:
e9:30:7e:65:32:95:0b:f1:74:b3:47:c1:be:f2:bf:64:cf:4f:
96:62:6e:0e:74:21:30:37:3f:08:5e:31:5b:2d:dc:be:3d:ca:
c4:95:e1:0e
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEgUOn5n33GT5mUzl4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw
YzQ4MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
MmRlZGEwZTQtNDU2NS00ODc1LTg5MDctMTc2Yjg3ZTc5NGVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ky1Ut+IgH2mluAoH+CTnFl1VngV3gF/wIxJ
8fhO3iU8qFdwIsEzz/qsq57xAK1BxYv4F5tuftLlB4u4KMOycFAlGvn+WLFN5K72
VkWo4tMh087KEPOCVXNjw+pjQ0Ak7/LnVIrN8iS+NuL5WUSEnS8ffQkgtzIsxtY4
acCnBEq79/ZVNXDVZRMjTWR2zNQPMNWaq8EWM2etyfv1QgoOhSitTN6++9O45IQJ
KL0sBfSflu3yhIwDKDBsLAvLIPIyX9tCRBaKjwv9xBzwUTwX3zALE174SU3lHQc5
KQWg6qiboga8U6PJeUz50DrR7U4492yadQi+0hBJNcYBX5gdCQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFILiZhqaDAX/lNaN5OWI81H/Ah9pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5
ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvZmY3YWU2OGMtMDJlNi0z
YmIyLWIwZmEtOTRkZjBkYmJkNmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm
MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy
MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl
ZGEyMjBjNDguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0QnTAwQA
0QnXMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAEmw9TJQd5SfzqzDsR70LvERPF5DB3wJ6eD6CtS/LAOcyBhg
d5dzClOW86EONer2clUCCn14MMCyv/uoKU2dzQMU1fFn+HvhoPZSV6TK8HHsuk9p
DTx7mcAX6zmNg7iGi8pcyZpy6ziARAEMP91zHTxF0+zxXahueDKLfxgHSiR9Cx1p
ExAD6a8O72ktV2Htn8sUxvOmZTk+oH2YXDKNo1YCkVsl5KETL6l5CjkfUCs6XLUS
W2PI2dLulIOVhOneTt9YuJqxav8wGsB08/pAmv1r49sU2FFrlOkwfmUylQvxdLNH
wb7yv2TPT5Zibg50ITA3PwheMVst3L49ysSV4Q4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:13:26 2025 by rpki-client