Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/fee841f8-7f33-3089-8c7e-7e3cf2937c80.roa
File: fee841f8-7f33-3089-8c7e-7e3cf2937c80.roa (raw, json)
Hash identifier: 30qZydfFYjqQVChqkRHndSzu2PjXb64RQpzCYTtTCYo=
Subject key identifier: 8E:C0:8A:59:16:46:45:EA:36:4C:2A:6C:15:6A:0D:ED:40:DE:4E:AE
Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial: 010D0C9F43285848C58171DC5AFC9A300A69FAA0
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/fee841f8-7f33-3089-8c7e-7e3cf2937c80.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 36492
IP address blocks: 209.107.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:71:dc:5a:fc:9a:30:0a:69:fa:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=4a9f0b53-eb1a-4c06-b9cf-14f344181de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:72:78:5c:9b:2b:36:5e:cc:5e:43:48:c0:
db:ca:9e:d2:f5:f5:fe:bf:76:01:d2:2e:50:0c:dd:
25:04:a1:93:d0:3d:d6:3d:f1:b6:6a:5e:0c:80:13:
e1:64:2c:a5:cb:8f:bb:e0:12:35:74:8e:3f:d6:19:
2e:38:63:45:ab:4d:3b:39:3e:06:b4:e6:43:9d:01:
72:7b:c0:03:5a:a5:22:d1:91:48:ce:45:61:38:54:
70:fb:26:3f:c3:0c:79:e0:80:50:fe:15:71:19:74:
64:e8:85:f6:e9:dd:9c:90:22:49:fd:b5:43:e5:8f:
77:33:75:ab:78:b1:30:4b:2b:7d:ba:ae:0d:ef:71:
cc:af:f3:8e:b3:d3:a5:01:38:c8:e5:05:2b:01:e1:
02:9c:13:63:29:ec:8b:d2:50:03:9a:18:d5:98:e8:
fa:04:18:ca:08:38:e1:02:f6:9b:0e:f7:33:83:df:
81:63:5c:db:03:43:1d:84:7e:8d:89:13:62:8f:d8:
42:b5:85:84:ec:8a:e6:48:37:d2:5e:05:dd:fd:e8:
9f:6e:06:81:79:3f:07:9f:f9:8e:b4:e2:9d:75:62:
34:50:a8:10:64:d7:84:aa:ca:ee:6c:81:cf:76:6c:
b7:07:59:ac:6e:7b:0f:b6:ee:6d:e5:a9:12:95:f7:
3a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C0:8A:59:16:46:45:EA:36:4C:2A:6C:15:6A:0D:ED:40:DE:4E:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/fee841f8-7f33-3089-8c7e-7e3cf2937c80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
X509v3 Authority Key Identifier:
keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
sbgp-ipAddrBlock: critical
IPv4:
209.107.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:4f:21:75:05:cd:8e:d0:a3:f7:f9:1f:18:8a:a4:f4:4f:86:
d3:5a:f0:8b:8b:60:91:5e:a3:1f:e2:d8:ce:a4:15:37:26:9d:
07:7f:87:6e:dc:5b:95:9a:74:b9:c9:f7:ad:f1:fb:1b:b8:1c:
7b:dc:f1:90:3c:bb:66:0b:07:2c:05:5d:bc:bd:8b:fb:26:47:
de:2c:13:8a:b7:84:31:d8:14:20:b9:1b:bd:03:ef:be:49:de:
ac:a3:3f:4d:59:ba:34:02:53:bb:d9:8b:63:6b:d1:19:5f:8c:
1d:bd:90:2a:4a:84:50:51:46:2b:02:35:51:9d:26:64:cf:79:
40:c2:a5:9c:7d:10:31:74:3c:b3:b5:c8:ff:77:59:2c:f2:87:
a0:af:8b:1a:34:76:4c:b8:09:92:a6:cc:36:35:69:ae:e5:a5:
13:65:15:6b:60:b4:01:c3:eb:86:7c:7a:83:b4:24:4c:8f:7a:
8a:d4:02:62:7c:36:6e:0c:4a:81:7c:66:19:d3:b4:57:83:fa:
4b:67:3a:b6:d6:1a:a8:f4:1f:f0:0b:98:a5:21:3d:a7:40:bf:
ca:41:64:47:dc:74:17:be:ce:eb:f5:02:ff:17:dd:5e:5a:89:
83:fc:cf:38:39:c1:3c:a8:b3:e7:8e:f6:c3:1b:23:fc:65:67:
08:31:68:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXHcWvyaMApp+qAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5
ZTJkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NGE5ZjBiNTMtZWIxYS00YzA2LWI5Y2YtMTRmMzQ0MTgxZGU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKNyeFybKzZezF5DSMDbyp7S9fX+v3YB0i5Q
DN0lBKGT0D3WPfG2al4MgBPhZCyly4+74BI1dI4/1hkuOGNFq007OT4GtOZDnQFy
e8ADWqUi0ZFIzkVhOFRw+yY/wwx54IBQ/hVxGXRk6IX26d2ckCJJ/bVD5Y93M3Wr
eLEwSyt9uq4N73HMr/OOs9OlATjI5QUrAeECnBNjKeyL0lADmhjVmOj6BBjKCDjh
AvabDvczg9+BY1zbA0MdhH6NiRNij9hCtYWE7IrmSDfSXgXd/eifbgaBeT8Hn/mO
tOKddWI0UKgQZNeEqsrubIHPdmy3B1msbnsPtu5t5akSlfc6ZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI7AilkWRkXqNkwqbBVqDe1A3k6uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz
ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvZmVlODQxZjgtN2YzMy0z
MDg5LThjN2UtN2UzY2YyOTM3YzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi
MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2
OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj
YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Wu9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK9PIXUFzY7Qo/f5HxiKpPRPhtNa8IuLYJFeox/i2M6kFTcmnQd/h27c
W5WadLnJ963x+xu4HHvc8ZA8u2YLBywFXby9i/smR94sE4q3hDHYFCC5G70D775J
3qyjP01ZujQCU7vZi2Nr0RlfjB29kCpKhFBRRisCNVGdJmTPeUDCpZx9EDF0PLO1
yP93WSzyh6Cvixo0dky4CZKmzDY1aa7lpRNlFWtgtAHD64Z8eoO0JEyPeorUAmJ8
Nm4MSoF8ZhnTtFeD+ktnOrbWGqj0H/ALmKUhPadAv8pBZEfcdBe+zuv1Av8X3V5a
iYP8zzg5wTyos+eO9sMbI/xlZwgxaKc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:17:27 2025 by rpki-client