Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/901260cf-eb08-3280-9f9a-8b6563aff056.roa
File: 901260cf-eb08-3280-9f9a-8b6563aff056.roa (raw, json)
Hash identifier: PXzq2sSRiYAIhUcGfrA5uQKaeb20dvjdbeesA5GLZ8M=
Subject key identifier: 2B:F3:E6:7F:64:EA:EF:AB:07:48:81:BB:29:A1:F1:88:2D:1D:4F:3C
Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial: 010D0C9F4328584924F29D3E631C89BC45ECF500
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/901260cf-eb08-3280-9f9a-8b6563aff056.roa
Signing time: Mon 10 Mar 2025 18:31:46 +0000
ROA not before: Mon 10 Mar 2025 18:31:46 +0000
ROA not after: Sun 08 Jun 2025 18:31:46 +0000
asID: 209
IP address blocks: 209.102.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:f2:9d:3e:63:1c:89:bc:45:ec:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Validity
Not Before: Mar 10 18:31:46 2025 GMT
Not After : Jun 8 18:31:46 2025 GMT
Subject: CN=2e815353-1a12-49a3-9ecb-146fc13a1920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:84:6c:76:81:18:bf:b4:c5:51:81:2a:13:06:
8b:c6:7f:10:66:4f:69:e3:6d:73:df:b2:f5:37:7e:
0b:a9:35:83:30:72:9e:ba:86:5e:94:f1:49:ac:dd:
af:6c:43:73:10:61:be:ac:ae:84:e5:0e:de:94:52:
1a:57:d8:cc:fa:ee:c5:5e:c6:fc:2b:18:b3:50:0a:
30:66:a6:d9:13:a7:67:f9:72:4a:c5:95:0b:0e:58:
63:fe:79:d8:ce:65:b3:c3:22:3d:08:61:91:bb:82:
5b:85:e0:b3:ba:1a:ff:3a:99:29:46:b9:86:85:3c:
d5:80:51:59:99:f7:a7:29:75:c8:01:20:2d:87:2c:
36:67:23:ea:2a:a4:9c:d8:b3:97:3e:f3:80:6e:58:
62:40:1a:0f:0e:b8:d7:3f:70:c5:b1:73:06:fc:ee:
dd:2f:38:bf:5b:0a:6f:5c:24:86:76:d3:2f:fb:1a:
43:1a:e0:f1:60:c3:f6:ec:08:31:40:88:f8:9a:12:
03:fe:7c:dc:7e:99:ef:56:0b:9a:82:0d:76:05:06:
c8:5b:6c:fd:91:d9:3b:93:14:10:8c:5f:63:4f:e0:
e8:92:a0:d4:ae:79:bb:01:a5:26:a2:31:39:98:86:
7d:84:d3:bf:0a:a9:72:15:8b:81:c5:73:d5:3d:37:
4f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F3:E6:7F:64:EA:EF:AB:07:48:81:BB:29:A1:F1:88:2D:1D:4F:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/901260cf-eb08-3280-9f9a-8b6563aff056.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
X509v3 Authority Key Identifier:
keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
sbgp-ipAddrBlock: critical
IPv4:
209.102.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:9d:39:84:ec:62:a2:84:a4:f6:ad:5d:81:a7:23:12:4c:ac:
9a:83:ab:b5:db:7b:82:99:7e:05:e7:20:2e:d4:4c:36:0a:d1:
89:27:d6:b9:c5:94:72:4d:c9:fd:dd:07:68:86:72:4c:93:32:
fe:11:9f:1a:1f:d2:63:61:2c:5a:ed:6b:c4:08:d1:0e:5b:b4:
82:01:5c:f2:be:69:ce:27:e4:40:b3:df:4e:93:72:17:17:00:
3b:b5:eb:c7:ff:71:5f:a6:59:31:a8:b2:f0:45:e5:7e:fc:f9:
ba:15:67:f3:51:a2:d8:69:88:62:7c:37:42:2f:a5:60:9c:af:
d0:cf:eb:fd:d1:df:fc:d9:2c:3d:0c:e0:3a:d8:6f:45:9b:a0:
9e:1f:8f:e6:13:58:c3:7c:ac:29:00:3a:6d:6a:11:0f:68:e5:
01:b2:77:b0:af:b0:04:8f:a7:0a:58:10:82:33:74:b1:21:dd:
70:eb:41:6d:24:ac:ea:96:e5:bc:27:50:04:d2:71:42:8a:f1:
37:a2:55:9f:b6:57:91:b3:bb:10:7b:81:f2:60:69:b2:d1:55:
17:48:3b:24:68:a2:fd:05:25:09:ef:8a:fd:85:22:12:4a:5c:
64:9f:1c:14:16:37:20:b5:c8:7e:73:89:cd:37:eb:d4:98:fe:
e9:09:9b:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkk8p0+YxyJvEXs9QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm
M2VjMB4XDTI1MDMxMDE4MzE0NloXDTI1MDYwODE4MzE0NlowLzEtMCsGA1UEAxMk
MmU4MTUzNTMtMWExMi00OWEzLTllY2ItMTQ2ZmMxM2ExOTIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oRsdoEYv7TFUYEqEwaLxn8QZk9p421z37L1
N34LqTWDMHKeuoZelPFJrN2vbENzEGG+rK6E5Q7elFIaV9jM+u7FXsb8KxizUAow
ZqbZE6dn+XJKxZULDlhj/nnYzmWzwyI9CGGRu4JbheCzuhr/OpkpRrmGhTzVgFFZ
mfenKXXIASAthyw2ZyPqKqSc2LOXPvOAblhiQBoPDrjXP3DFsXMG/O7dLzi/Wwpv
XCSGdtMv+xpDGuDxYMP27AgxQIj4mhID/nzcfpnvVguagg12BQbIW2z9kdk7kxQQ
jF9jT+DokqDUrnm7AaUmojE5mIZ9hNO/CqlyFYuBxXPVPTdPAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCvz5n9k6u+rB0iBuymh8YgtHU88MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3
YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvOTAxMjYwY2YtZWIwOC0z
MjgwLTlmOWEtOGI2NTYzYWZmMDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5
MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0
ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm
ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0WYAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAESdOYTsYqKEpPatXYGnIxJMrJqDq7Xbe4KZfgXnIC7UTDYK0Ykn1rnF
lHJNyf3dB2iGckyTMv4Rnxof0mNhLFrta8QI0Q5btIIBXPK+ac4n5ECz306TchcX
ADu168f/cV+mWTGosvBF5X78+boVZ/NRothpiGJ8N0IvpWCcr9DP6/3R3/zZLD0M
4DrYb0WboJ4fj+YTWMN8rCkAOm1qEQ9o5QGyd7CvsASPpwpYEIIzdLEh3XDrQW0k
rOqW5bwnUATScUKK8TeiVZ+2V5GzuxB7gfJgabLRVRdIOyRoov0FJQnviv2FIhJK
XGSfHBQWNyC1yH5zic0369SY/ukJm9k=
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:35:44 2025 by rpki-client