Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS9009.roa
File: AS9009.roa (raw, json)
Hash identifier: TSXBMZCqLecrLE/Dp7N4oPgXPcB3B9m1oRws4/4DJq4=
Subject key identifier: E0:95:32:B3:22:C3:AA:3F:DD:4B:E4:4F:AA:4A:3A:6A:B5:D1:7C:68
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 68C366FE22812FD97D26BAB76292988D46241806
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS9009.roa
Signing time: Fri 17 Jan 2025 14:15:19 +0000
ROA not before: Fri 17 Jan 2025 14:10:19 +0000
ROA not after: Fri 16 Jan 2026 14:15:19 +0000
asID: 9009
IP address blocks: 140.99.2.0/24 maxlen: 24
140.99.3.0/24 maxlen: 24
140.99.4.0/24 maxlen: 24
140.99.5.0/24 maxlen: 24
140.99.6.0/24 maxlen: 24
140.99.13.0/24 maxlen: 24
140.99.14.0/24 maxlen: 24
140.99.15.0/24 maxlen: 24
140.99.16.0/24 maxlen: 24
140.99.17.0/24 maxlen: 24
140.99.18.0/24 maxlen: 24
140.99.19.0/24 maxlen: 24
140.99.20.0/24 maxlen: 24
140.99.21.0/24 maxlen: 24
140.99.22.0/24 maxlen: 24
140.99.23.0/24 maxlen: 24
140.99.24.0/24 maxlen: 24
140.99.25.0/24 maxlen: 24
140.99.26.0/24 maxlen: 24
140.99.28.0/24 maxlen: 24
140.99.29.0/24 maxlen: 24
140.99.30.0/24 maxlen: 24
140.99.31.0/24 maxlen: 24
140.99.32.0/24 maxlen: 24
140.99.33.0/24 maxlen: 24
140.99.34.0/24 maxlen: 24
140.99.36.0/24 maxlen: 24
140.99.37.0/24 maxlen: 24
140.99.38.0/24 maxlen: 24
140.99.40.0/24 maxlen: 24
140.99.41.0/24 maxlen: 24
140.99.42.0/24 maxlen: 24
140.99.46.0/24 maxlen: 24
140.99.81.0/24 maxlen: 24
140.99.86.0/24 maxlen: 24
140.99.87.0/24 maxlen: 24
140.99.88.0/24 maxlen: 24
140.99.91.0/24 maxlen: 24
140.99.92.0/24 maxlen: 24
140.99.94.0/24 maxlen: 24
140.99.95.0/24 maxlen: 24
140.99.102.0/24 maxlen: 24
140.99.112.0/24 maxlen: 24
140.99.120.0/24 maxlen: 24
140.99.124.0/24 maxlen: 24
140.99.126.0/24 maxlen: 24
140.99.128.0/24 maxlen: 24
140.99.129.0/24 maxlen: 24
140.99.140.0/24 maxlen: 24
140.99.141.0/24 maxlen: 24
140.99.142.0/24 maxlen: 24
140.99.143.0/24 maxlen: 24
140.99.148.0/24 maxlen: 24
140.99.149.0/24 maxlen: 24
140.99.216.0/24 maxlen: 24
140.99.217.0/24 maxlen: 24
140.99.218.0/24 maxlen: 24
140.99.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:c3:66:fe:22:81:2f:d9:7d:26:ba:b7:62:92:98:8d:46:24:18:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Jan 17 14:10:19 2025 GMT
Not After : Jan 16 14:15:19 2026 GMT
Subject: CN=E09532B322C3AA3FDD4BE44FAA4A3A6AB5D17C68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:27:e1:62:b4:db:b0:e5:8c:29:a5:e2:80:
b2:8a:ff:bb:c6:5e:97:90:4f:94:05:e5:a8:7f:8a:
4c:77:22:d6:d9:60:69:46:82:64:ab:8a:a4:af:84:
fb:34:32:17:aa:27:53:d6:f9:76:16:3d:1e:e7:0d:
91:95:ba:00:32:9b:98:39:e4:72:15:82:c9:1d:b5:
cb:0a:5e:8e:60:62:0e:48:4b:00:14:92:2c:92:2e:
10:ae:fc:d3:f8:7c:3d:db:08:dd:3a:5a:1b:a1:60:
ab:ae:ff:d9:46:c6:bd:05:4b:c7:41:15:ce:35:44:
a9:9c:3a:4b:ea:69:72:52:aa:d9:8f:f9:cb:08:d1:
3a:05:2c:01:d0:cf:1f:56:67:c7:f2:3e:a4:96:20:
ec:25:ec:c4:83:fb:8f:33:36:bf:50:43:5a:f3:c5:
a1:14:0f:56:b3:e2:ec:85:ad:77:69:a5:01:6a:38:
86:b0:d4:12:47:e0:88:0c:bd:8e:38:d1:88:1c:8a:
0b:b8:f3:30:e8:69:43:d1:52:11:07:12:82:64:92:
d9:00:f8:34:07:e2:fa:9e:3a:b6:a0:36:c8:9e:24:
08:49:01:e5:33:42:31:05:07:90:c4:c3:31:7d:d9:
17:06:5d:91:bb:90:78:21:a1:95:21:49:47:b0:75:
1c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:95:32:B3:22:C3:AA:3F:DD:4B:E4:4F:AA:4A:3A:6A:B5:D1:7C:68
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS9009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.2.0-140.99.6.255
140.99.13.0-140.99.26.255
140.99.28.0-140.99.34.255
140.99.36.0-140.99.38.255
140.99.40.0-140.99.42.255
140.99.46.0/24
140.99.81.0/24
140.99.86.0-140.99.88.255
140.99.91.0-140.99.92.255
140.99.94.0/23
140.99.102.0/24
140.99.112.0/24
140.99.120.0/24
140.99.124.0/24
140.99.126.0/24
140.99.128.0/23
140.99.140.0/22
140.99.148.0/23
140.99.216.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:b8:c7:38:fb:4b:91:f3:ff:f3:e2:71:4d:74:85:dd:0e:4d:
82:80:ab:24:38:e8:98:1a:fe:08:09:2a:14:0a:75:57:e7:70:
ca:cc:c8:06:02:b9:59:68:0c:45:58:df:12:8e:94:a2:e6:77:
d7:c8:51:ed:29:18:c9:f9:79:cb:27:79:7a:4f:59:30:65:da:
b7:12:81:1c:88:13:f0:81:c6:63:ba:de:eb:c1:fe:d0:c4:5d:
1b:dc:be:f7:91:b9:0e:e4:94:96:03:f3:75:d9:b4:a2:dd:5c:
cf:b7:b4:9e:95:b0:d5:c7:06:e9:c3:fd:a1:6a:8f:af:76:5e:
0d:86:a2:30:b7:7d:87:a1:02:62:8f:64:08:86:09:31:e1:61:
54:e1:25:43:6c:53:c9:a4:ab:db:67:24:2a:e0:c7:7d:f8:91:
1e:92:ad:c8:95:a3:60:c1:e0:2f:a9:0a:9b:04:69:f3:ce:e6:
ec:95:e0:32:e0:f4:bb:08:7e:ba:c1:a2:37:41:e3:7c:c0:53:
24:e4:02:3b:83:37:51:3f:95:b6:ac:d7:1a:1b:81:22:00:ec:
15:60:8b:11:d7:13:1e:cc:c3:57:dc:df:05:d6:90:0d:33:80:
7a:2c:70:12:58:87:12:98:b4:a5:d2:bd:84:94:99:69:cd:e5:
40:ae:a9:de
-----BEGIN CERTIFICATE-----
MIIGJjCCBQ6gAwIBAgIUaMNm/iKBL9l9Jrq3YpKYjUYkGAYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjUwMTE3MTQxMDE5WhcNMjYwMTE2MTQxNTE5
WjAzMTEwLwYDVQQDEyhFMDk1MzJCMzIyQzNBQTNGREQ0QkU0NEZBQTRBM0E2QUI1
RDE3QzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7wn4WK027Dl
jCml4oCyiv+7xl6XkE+UBeWof4pMdyLW2WBpRoJkq4qkr4T7NDIXqidT1vl2Fj0e
5w2RlboAMpuYOeRyFYLJHbXLCl6OYGIOSEsAFJIski4QrvzT+Hw92wjdOloboWCr
rv/ZRsa9BUvHQRXONUSpnDpL6mlyUqrZj/nLCNE6BSwB0M8fVmfH8j6kliDsJezE
g/uPMza/UENa88WhFA9Ws+Lsha13aaUBajiGsNQSR+CIDL2OONGIHIoLuPMw6GlD
0VIRBxKCZJLZAPg0B+L6njq2oDbIniQISQHlM0IxBQeQxMMxfdkXBl2Ru5B4IaGV
IUlHsHUcBQIDAQABo4IDJjCCAyIwHQYDVR0OBBYEFOCVMrMiw6o/3UvkT6pKOmq1
0XxoMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzkwMDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgccG
CCsGAQUFBwEHAQH/BIG3MIG0MIGxBAIAATCBqjAMAwQBjGMCAwQAjGMGMAwDBACM
Yw0DBACMYxowDAMEAoxjHAMEAIxjIjAMAwQCjGMkAwQAjGMmMAwDBAOMYygDBACM
YyoDBACMYy4DBACMY1EwDAMEAYxjVgMEAIxjWDAMAwQAjGNbAwQAjGNcAwQBjGNe
AwQAjGNmAwQAjGNwAwQAjGN4AwQAjGN8AwQAjGN+AwQBjGOAAwQCjGOMAwQBjGOU
AwQCjGPYMA0GCSqGSIb3DQEBCwUAA4IBAQCluMc4+0uR8//z4nFNdIXdDk2CgKsk
OOiYGv4ICSoUCnVX53DKzMgGArlZaAxFWN8SjpSi5nfXyFHtKRjJ+XnLJ3l6T1kw
Zdq3EoEciBPwgcZjut7rwf7QxF0b3L73kbkO5JSWA/N12bSi3VzPt7SelbDVxwbp
w/2hao+vdl4NhqIwt32HoQJij2QIhgkx4WFU4SVDbFPJpKvbZyQq4Md9+JEekq3I
laNgweAvqQqbBGnzzubsleAy4PS7CH66waI3QeN8wFMk5AI7gzdRP5W2rNcaG4Ei
AOwVYIsR1xMezMNX3N8F1pANM4B6LHASWIcSmLSl0r2ElJlpzeVArqne
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:21 2025 by rpki-client