Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/704419f3-b0db-3504-bf1b-1b3c6ac499cb.roa
File: 704419f3-b0db-3504-bf1b-1b3c6ac499cb.roa (raw, json)
Hash identifier: dSg2wZRZ5Zf5G3KPjCQXQyLJaWwpp+TNPKa9QnOERZA=
Subject key identifier: B4:20:FC:C8:45:F5:71:EC:CA:9E:F6:1D:B3:F7:93:D9:46:7D:E0:0D
Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial: 010D0C9F4328584924D82497AFE682D53FCFF200
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/704419f3-b0db-3504-bf1b-1b3c6ac499cb.roa
Signing time: Mon 10 Mar 2025 17:38:26 +0000
ROA not before: Mon 10 Mar 2025 17:38:26 +0000
ROA not after: Sun 08 Jun 2025 17:38:26 +0000
asID: 209
IP address blocks: 209.44.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:d8:24:97:af:e6:82:d5:3f:cf:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Validity
Not Before: Mar 10 17:38:26 2025 GMT
Not After : Jun 8 17:38:26 2025 GMT
Subject: CN=4d3f8750-b3b6-453e-8afc-2e71105c9423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:66:5c:ff:3e:88:7d:64:e0:d2:a8:74:d3:
95:93:24:67:0a:b8:07:ad:5b:20:22:c0:b3:45:91:
c0:36:4c:a0:bc:84:cc:b8:d9:73:f3:d5:d0:48:e8:
73:d2:96:a5:6d:48:69:f9:7f:56:88:f2:b7:47:a3:
e6:49:01:1b:84:ab:6b:62:bc:b8:e6:49:5e:4e:0f:
f9:7d:ed:ef:36:31:7e:6b:a3:8e:64:11:25:8a:27:
c3:ae:a8:2a:48:77:39:1e:df:1e:8d:99:1b:cb:63:
34:e1:c0:e4:7c:05:91:cd:18:75:41:e4:23:8b:33:
1a:13:76:8c:a2:48:ee:41:ca:f8:4f:e6:d1:51:70:
24:dd:62:d9:c7:80:00:ed:59:46:3f:37:9b:8f:06:
81:59:3a:26:98:28:b4:5a:16:31:95:6f:7c:2e:44:
41:2b:ef:e4:dd:43:09:7f:42:42:49:4e:89:c5:42:
84:11:3a:8e:de:7e:51:6b:d0:2b:29:bd:93:b8:80:
f1:28:2d:38:9b:26:54:eb:77:67:04:8d:0a:59:94:
87:74:2a:20:a1:de:9b:d3:55:3f:2c:3f:7d:74:05:
36:c8:ed:37:db:2c:52:79:94:b1:90:59:72:df:74:
4a:f4:d1:0f:30:5b:02:e6:0a:0a:d3:6a:c9:3f:ce:
2d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:20:FC:C8:45:F5:71:EC:CA:9E:F6:1D:B3:F7:93:D9:46:7D:E0:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/704419f3-b0db-3504-bf1b-1b3c6ac499cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
X509v3 Authority Key Identifier:
keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
sbgp-ipAddrBlock: critical
IPv4:
209.44.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:7e:4c:ed:98:7f:de:f3:93:0e:d4:ed:2a:9f:5b:0b:7b:f2:
4c:03:60:7d:a4:fc:40:d3:3f:c2:26:38:08:88:a4:a8:19:59:
e2:30:35:5c:1c:e8:47:2b:21:43:36:ee:63:f9:4c:d9:58:77:
91:2c:2c:b1:d7:19:c7:78:47:06:01:fb:06:ca:ac:6f:1f:10:
4a:60:a4:40:ab:ab:6c:9a:d6:fc:0c:1a:fd:83:f5:99:32:0e:
fc:6c:03:b6:ca:44:56:59:05:3a:cd:b4:e7:b9:7f:d8:da:0a:
17:c1:7d:6e:ab:9e:52:f9:9e:7a:dd:aa:52:62:03:3b:d4:26:
de:92:f6:3e:cc:87:df:fa:e4:80:22:c2:fe:92:1e:c2:51:37:
b4:cd:70:d0:70:87:68:6e:05:92:f3:ec:b4:2e:91:81:13:46:
a3:0d:9d:ff:41:39:68:c8:a9:f6:2f:7f:cd:08:63:6b:8b:b0:
a2:34:2c:f9:a4:4d:90:e4:dd:1b:bf:70:33:32:d6:4e:fa:0a:
ba:cc:0c:14:eb:34:4d:fa:22:6f:9b:a8:7e:c5:56:31:67:4d:
34:92:c9:b3:7b:62:e1:cc:5a:cc:9e:1d:a9:5b:bc:3a:4c:a8:
d9:88:e4:4d:85:1e:33:a2:2c:a5:51:b6:1f:11:e4:03:79:a4:
84:58:1c:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkk2CSXr+aC1T/P8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm
M2VjMB4XDTI1MDMxMDE3MzgyNloXDTI1MDYwODE3MzgyNlowLzEtMCsGA1UEAxMk
NGQzZjg3NTAtYjNiNi00NTNlLThhZmMtMmU3MTEwNWM5NDIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1lmXP8+iH1k4NKodNOVkyRnCrgHrVsgIsCz
RZHANkygvITMuNlz89XQSOhz0palbUhp+X9WiPK3R6PmSQEbhKtrYry45kleTg/5
fe3vNjF+a6OOZBEliifDrqgqSHc5Ht8ejZkby2M04cDkfAWRzRh1QeQjizMaE3aM
okjuQcr4T+bRUXAk3WLZx4AA7VlGPzebjwaBWTommCi0WhYxlW98LkRBK+/k3UMJ
f0JCSU6JxUKEETqO3n5Ra9ArKb2TuIDxKC04myZU63dnBI0KWZSHdCogod6b01U/
LD99dAU2yO032yxSeZSxkFly33RK9NEPMFsC5goK02rJP84tZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLQg/MhF9XHsyp72HbP3k9lGfeANMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3
YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvNzA0NDE5ZjMtYjBkYi0z
NTA0LWJmMWItMWIzYzZhYzQ5OWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5
MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0
ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm
ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0SwAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHJ+TO2Yf97zkw7U7SqfWwt78kwDYH2k/EDTP8ImOAiIpKgZWeIwNVwc
6EcrIUM27mP5TNlYd5EsLLHXGcd4RwYB+wbKrG8fEEpgpECrq2ya1vwMGv2D9Zky
DvxsA7bKRFZZBTrNtOe5f9jaChfBfW6rnlL5nnrdqlJiAzvUJt6S9j7Mh9/65IAi
wv6SHsJRN7TNcNBwh2huBZLz7LQukYETRqMNnf9BOWjIqfYvf80IY2uLsKI0LPmk
TZDk3Ru/cDMy1k76CrrMDBTrNE36Im+bqH7FVjFnTTSSybN7YuHMWsyeHalbvDpM
qNmI5E2FHjOiLKVRth8R5AN5pIRYHKM=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:05:37 2025 by rpki-client