Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/7c4313aa-d6c0-3d7a-b06c-c74e7368f2ff.roa
File: 7c4313aa-d6c0-3d7a-b06c-c74e7368f2ff.roa (raw, json)
Hash identifier: Wf88G6E2kLVjbk0RzRAE7rcBhnmN+7gNJkhMUvwYlTE=
Subject key identifier: 86:BE:8F:80:91:F6:44:EE:86:1D:47:B6:D3:A1:6A:9C:59:72:0C:84
Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial: 010D0C9F432858483885499FFFB6B8091B814880
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/7c4313aa-d6c0-3d7a-b06c-c74e7368f2ff.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 20471
IP address blocks: 209.124.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:49:9f:ff:b6:b8:09:1b:81:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=ea331113-824c-4188-a6f6-06407c13ba28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:93:d7:56:12:fc:d7:c4:da:a0:df:d1:85:7a:
0d:80:b0:36:88:17:b8:51:a6:88:3e:5e:fe:48:5b:
db:a2:bd:49:43:f5:6d:c8:20:e4:0e:2f:1c:63:98:
ac:94:f8:e7:3a:4b:ab:ac:45:08:5a:12:ad:d2:1d:
a8:13:19:f5:44:76:e9:f2:cc:12:06:56:38:74:39:
d9:cc:45:f2:28:c7:84:b4:e0:e0:f3:35:e9:3f:81:
ad:5d:b1:41:6d:34:f2:30:6a:6a:59:78:01:fb:5a:
95:fd:1f:18:ec:95:38:c4:9e:12:93:e7:f8:70:f4:
dc:36:23:d7:76:78:69:ef:70:f8:b1:de:1f:c8:7b:
c1:e0:17:ea:6a:94:31:b7:19:a6:b3:b9:0f:40:6d:
c2:12:89:65:f9:1e:bb:b1:59:84:11:45:9c:d8:e1:
1f:e3:67:35:cc:ed:e6:19:8c:d7:04:fa:6d:11:cc:
35:6a:69:d3:d6:f8:7e:5d:d7:89:39:83:48:15:80:
28:65:fc:6b:2e:d3:3a:32:b1:3b:97:1e:81:cf:fa:
df:6f:4d:1a:d5:d8:0d:5d:f0:bd:b7:df:7c:c8:60:
55:88:bb:7c:54:e4:b9:b9:27:5a:e5:76:7c:ac:ba:
ad:9b:36:20:81:83:f7:7f:e6:fb:4b:34:c3:ba:1d:
99:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BE:8F:80:91:F6:44:EE:86:1D:47:B6:D3:A1:6A:9C:59:72:0C:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/7c4313aa-d6c0-3d7a-b06c-c74e7368f2ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
X509v3 Authority Key Identifier:
keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
sbgp-ipAddrBlock: critical
IPv4:
209.124.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:82:96:5e:32:67:b0:d5:33:21:bd:6f:1e:1f:61:9c:a4:7b:
01:df:5a:98:18:ab:a7:68:ab:8c:cf:fc:2e:e0:d6:f9:44:04:
97:09:e5:40:74:0a:e4:57:e0:50:40:87:93:b9:46:18:a4:6e:
23:81:1e:73:69:f4:d7:40:26:71:eb:74:0d:ca:b2:3e:b5:45:
31:9f:48:57:bc:bc:75:c1:58:e4:b4:67:df:96:47:5f:75:4b:
49:8b:d3:a0:ec:34:a0:0c:4b:ab:a3:ec:9d:f1:34:e4:28:0a:
89:b7:00:79:b1:b0:05:5c:e4:67:cd:7d:af:14:f9:41:c0:47:
a4:a9:d2:9b:58:1a:5c:29:82:57:01:8b:8c:dd:86:11:c7:1e:
9e:a5:c8:bc:ff:57:c3:6b:89:6e:4e:2a:28:33:fa:9f:9c:b2:
82:12:7f:f5:21:8c:ac:8c:c5:44:cd:37:77:02:f4:47:ca:ed:
23:e4:ba:3d:fe:50:a1:02:cc:75:a0:2c:ac:03:78:f0:85:a2:
77:e4:0a:56:51:c5:94:59:14:fd:b7:0b:e8:e0:41:67:da:3d:
50:c0:74:72:7b:0b:a0:9c:b8:23:12:0a:cf:ab:46:50:cb:18:
12:22:64:32:ac:e6:77:98:72:92:7e:70:28:b7:d2:18:6c:e9:
8c:b7:84:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg4hUmf/7a4CRuBSIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3
MWRlMB4XDTI0MTIxNjAyMDAzOVoXDTI1MDMxNjAxMDAzOVowLzEtMCsGA1UEAxMk
ZWEzMzExMTMtODI0Yy00MTg4LWE2ZjYtMDY0MDdjMTNiYTI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZPXVhL818TaoN/RhXoNgLA2iBe4UaaIPl7+
SFvbor1JQ/VtyCDkDi8cY5islPjnOkurrEUIWhKt0h2oExn1RHbp8swSBlY4dDnZ
zEXyKMeEtODg8zXpP4GtXbFBbTTyMGpqWXgB+1qV/R8Y7JU4xJ4Sk+f4cPTcNiPX
dnhp73D4sd4fyHvB4BfqapQxtxmms7kPQG3CEoll+R67sVmEEUWc2OEf42c1zO3m
GYzXBPptEcw1amnT1vh+XdeJOYNIFYAoZfxrLtM6MrE7lx6Bz/rfb00a1dgNXfC9
t998yGBViLt8VOS5uSda5XZ8rLqtmzYggYP3f+b7SzTDuh2ZxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIa+j4CR9kTuhh1HttOhapxZcgyEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2
OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvN2M0MzEzYWEtZDZjMC0z
ZDdhLWIwNmMtYzc0ZTczNjhmMmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy
OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2
NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm
NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XwqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFaCll4yZ7DVMyG9bx4fYZykewHfWpgYq6doq4zP/C7g1vlEBJcJ5UB0
CuRX4FBAh5O5RhikbiOBHnNp9NdAJnHrdA3Ksj61RTGfSFe8vHXBWOS0Z9+WR191
S0mL06DsNKAMS6uj7J3xNOQoCom3AHmxsAVc5GfNfa8U+UHAR6Sp0ptYGlwpglcB
i4zdhhHHHp6lyLz/V8NriW5OKigz+p+csoISf/UhjKyMxUTNN3cC9EfK7SPkuj3+
UKECzHWgLKwDePCFonfkClZRxZRZFP23C+jgQWfaPVDAdHJ7C6CcuCMSCs+rRlDL
GBIiZDKs5neYcpJ+cCi30hhs6Yy3hBs=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:23:23 2025 by rpki-client