Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e070577b-23d5-30b5-bedf-c5093059263c.roa
File: e070577b-23d5-30b5-bedf-c5093059263c.roa (raw, json)
Hash identifier: KUivT21KiwfUytalIDOP5V4fBXdj0uQRoO+LZPRjdSA=
Subject key identifier: C2:A6:93:49:C8:B5:B3:5B:15:C9:11:7F:74:30:D7:99:6F:40:5B:D4
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858493C09373E70F05C4FC4CFA000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e070577b-23d5-30b5-bedf-c5093059263c.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 7342
IP address blocks: 209.131.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:37:3e:70:f0:5c:4f:c4:cf:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=86b04ec6-79db-45e6-b95b-db835d2fb8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0a:a4:76:fe:d7:45:8f:d8:ee:b4:bc:d3:01:
e8:9a:c6:a6:37:8f:2f:bc:04:33:5d:c9:87:d1:c0:
4d:ea:99:f1:0c:de:7a:c8:a8:52:52:77:b4:56:78:
21:a5:2b:8a:67:4b:f6:10:a2:5f:a6:11:99:8a:d8:
22:b2:43:b9:bf:12:04:a3:0d:54:f4:bd:a6:e2:50:
31:2b:5d:b9:b1:4b:5a:81:f9:b2:1e:a9:99:32:56:
00:e0:89:95:b0:da:22:28:fa:a9:aa:01:9c:dd:bb:
ec:e6:4a:c5:db:9e:68:61:ad:ef:ff:83:a2:c2:19:
f2:03:ad:ad:4a:d0:d8:21:f1:26:05:be:13:1a:0d:
3a:f5:f4:6a:8e:65:a0:b0:5c:8a:12:c8:1f:1a:56:
fc:0c:a7:78:c9:17:bd:98:9c:87:e7:5e:33:f8:29:
07:2c:2e:75:76:59:3c:d5:c3:91:ac:3b:0e:82:1d:
44:15:1a:cb:ff:41:bd:4e:79:65:ab:05:78:22:24:
49:59:89:b5:69:e0:27:a7:23:0f:7e:dd:21:96:74:
e0:0e:98:e9:07:db:1f:67:e9:60:52:45:6e:e9:e0:
9b:e1:63:66:52:13:26:2a:7d:50:3d:f9:58:63:69:
af:cd:9a:b2:c4:8d:4c:0d:df:26:ca:aa:8f:a9:26:
fc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A6:93:49:C8:B5:B3:5B:15:C9:11:7F:74:30:D7:99:6F:40:5B:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e070577b-23d5-30b5-bedf-c5093059263c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
209.131.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:72:70:90:db:c6:0d:7f:9e:f5:1c:5f:e0:a6:0c:e7:58:18:
d9:94:3c:31:20:a4:29:31:4e:e4:78:e0:b0:9c:55:2c:99:7d:
ef:5c:32:cd:0e:83:59:34:a8:d9:b2:f1:bd:eb:ad:01:65:44:
50:34:94:04:00:af:c8:a1:1d:92:b1:ba:b0:a3:f0:fd:a3:f1:
bf:c5:ce:53:f6:45:70:f9:d7:de:38:28:6f:1a:e4:fa:11:27:
09:e4:6f:1b:25:5f:d4:1d:2e:3b:12:df:fa:a2:f2:12:3a:c3:
ec:b3:06:b9:8f:bf:89:8a:f9:10:63:99:54:58:50:c5:09:b4:
01:dd:37:90:61:68:94:00:4a:4d:0e:6e:7f:a4:d6:8e:61:8f:
c3:4e:2e:04:df:2b:39:9b:5f:93:88:7e:7b:78:3d:29:11:b8:
a3:59:3f:7a:24:75:81:18:45:2a:15:c0:fd:1e:59:f0:bc:a6:
d8:4d:f9:7f:dc:cf:9b:e6:5b:0f:02:bf:27:bc:aa:24:bc:d6:
c8:60:2b:81:80:77:f2:84:d5:44:76:eb:e7:42:4a:2c:4c:fb:
e8:20:08:1f:f1:f3:e8:7d:a0:ae:ef:06:04:d4:a1:42:0a:0e:
dd:70:99:0c:0a:26:61:fb:83:7a:45:d8:71:34:65:68:30:01:
ea:67:e2:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CTc+cPBcT8TPoAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk
ODZiMDRlYzYtNzlkYi00NWU2LWI5NWItZGI4MzVkMmZiOGMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAqkdv7XRY/Y7rS80wHomsamN48vvAQzXcmH
0cBN6pnxDN56yKhSUne0VnghpSuKZ0v2EKJfphGZitgiskO5vxIEow1U9L2m4lAx
K125sUtagfmyHqmZMlYA4ImVsNoiKPqpqgGc3bvs5krF255oYa3v/4OiwhnyA62t
StDYIfEmBb4TGg069fRqjmWgsFyKEsgfGlb8DKd4yRe9mJyH514z+CkHLC51dlk8
1cORrDsOgh1EFRrL/0G9TnllqwV4IiRJWYm1aeAnpyMPft0hlnTgDpjpB9sfZ+lg
UkVu6eCb4WNmUhMmKn1QPflYY2mvzZqyxI1MDd8myqqPqSb8pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMKmk0nItbNbFckRf3Qw15lvQFvUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTA3MDU3N2ItMjNkNS0z
MGI1LWJlZGYtYzUwOTMwNTkyNjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABZycJDbxg1/nvUcX+CmDOdYGNmUPDEgpCkxTuR44LCcVSyZfe9cMs0O
g1k0qNmy8b3rrQFlRFA0lAQAr8ihHZKxurCj8P2j8b/FzlP2RXD51944KG8a5PoR
JwnkbxslX9QdLjsS3/qi8hI6w+yzBrmPv4mK+RBjmVRYUMUJtAHdN5BhaJQASk0O
bn+k1o5hj8NOLgTfKzmbX5OIfnt4PSkRuKNZP3okdYEYRSoVwP0eWfC8pthN+X/c
z5vmWw8Cvye8qiS81shgK4GAd/KE1UR26+dCSixM++ggCB/x8+h9oK7vBgTUoUIK
Dt1wmQwKJmH7g3pF2HE0ZWgwAepn4ls=
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:13:39 2025 by rpki-client