Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3caaad9b-6a9b-352d-81bb-e2115c7e7474.roa
File: 3caaad9b-6a9b-352d-81bb-e2115c7e7474.roa (raw, json)
Hash identifier: F9QX9UEInrbpyFqc643NRsGknFemtoID3cBLOd1DuFk=
Subject key identifier: 83:04:6C:C4:6D:59:A6:C5:FA:0E:95:14:47:43:32:AB:5E:2D:DC:FC
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921346695ECFD42F6FB6CCA00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3caaad9b-6a9b-352d-81bb-e2115c7e7474.roa
Signing time: Sun 09 Mar 2025 10:21:05 +0000
ROA not before: Sun 09 Mar 2025 10:21:05 +0000
ROA not after: Sat 07 Jun 2025 10:21:05 +0000
asID: 30336
IP address blocks: 209.226.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:66:95:ec:fd:42:f6:fb:6c:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:21:05 2025 GMT
Not After : Jun 7 10:21:05 2025 GMT
Subject: CN=b3261405-81f8-498e-bc77-614ed45d2f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c3:df:8d:a4:0a:e1:d3:79:b4:fd:c7:c4:b0:
56:52:f7:15:35:fa:37:0c:12:4c:67:0e:27:c0:46:
24:55:72:18:fe:70:cb:75:93:1a:b1:c0:2c:75:6a:
d8:96:5c:30:95:51:2e:2c:d1:e9:15:a3:b4:07:6a:
04:43:9a:43:02:12:f6:b9:d4:80:eb:61:87:a4:96:
0a:9d:e7:14:89:18:e3:5b:03:35:5a:d2:f7:bb:34:
ba:fb:a4:65:05:10:94:ac:24:b8:d9:a1:95:01:96:
96:a4:2e:bc:fb:65:e8:7f:96:c8:84:0d:4a:39:65:
bb:a8:01:27:dc:9a:58:84:fc:70:f4:d0:82:3f:b6:
fd:ed:0b:ba:59:49:f1:c3:ec:d8:1b:d8:2f:07:2e:
73:10:ce:f9:01:5f:50:8b:55:87:e3:9f:92:5b:4b:
f7:a6:b2:a7:fa:2d:3b:13:63:77:aa:1c:50:43:74:
8d:a1:a1:0d:43:3d:5c:a1:08:ae:3f:5f:26:1c:d6:
69:aa:c7:fe:c1:09:1d:f2:1d:57:02:4b:4d:1f:98:
37:ab:ab:a0:26:ad:f7:b3:c5:92:f7:bc:8e:9b:3a:
bd:95:5c:c9:49:47:1c:2e:9b:8f:de:0a:db:87:24:
0e:20:4d:da:c9:90:62:fc:74:21:4c:56:c3:2b:f5:
7e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:04:6C:C4:6D:59:A6:C5:FA:0E:95:14:47:43:32:AB:5E:2D:DC:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3caaad9b-6a9b-352d-81bb-e2115c7e7474.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.226.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:b3:c2:1f:b4:44:2e:d8:f1:66:90:2c:e8:d0:81:31:fa:9b:
b2:38:a0:12:0b:f4:0c:cc:da:24:6f:2e:39:3f:59:ba:5c:37:
67:97:48:76:c9:7a:1c:d2:d9:0c:bf:b8:4b:22:0f:d9:e9:7a:
14:95:7f:16:76:d4:5c:f5:59:ba:0b:7a:04:80:19:18:5d:31:
c8:29:57:8f:7f:7c:54:e0:eb:73:72:c7:4d:11:1a:28:e1:ce:
fe:71:7c:67:2c:33:ea:b1:d2:6a:75:dc:f0:87:26:bb:fe:74:
b4:30:86:ef:02:52:96:04:a8:83:2d:f5:fc:20:32:c1:66:20:
41:28:b5:25:73:19:8f:b9:a6:f4:c6:62:79:40:be:83:0e:d9:
e4:26:1c:69:07:aa:ae:44:5e:74:1a:36:1c:43:c3:bd:d8:e0:
2d:02:2b:20:67:57:5d:6b:58:ca:97:46:64:d7:91:2f:78:f8:
0a:57:7a:c6:94:8d:be:b3:2a:c0:89:64:79:2e:19:9e:11:44:
5d:70:c4:cb:df:b5:f7:aa:20:5e:4d:5a:ba:13:8f:ba:2a:e9:
21:de:95:ac:e9:c2:45:96:53:32:c9:71:5d:f9:ff:46:28:5b:
f9:ee:b2:d2:7d:cf:61:cb:be:30:52:67:73:54:7d:7d:af:a3:
d0:35:40:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNGaV7P1C9vtsygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDMwOTEwMjEwNVoXDTI1MDYwNzEwMjEwNVowLzEtMCsGA1UEAxMk
YjMyNjE0MDUtODFmOC00OThlLWJjNzctNjE0ZWQ0NWQyZjEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8sPfjaQK4dN5tP3HxLBWUvcVNfo3DBJMZw4n
wEYkVXIY/nDLdZMascAsdWrYllwwlVEuLNHpFaO0B2oEQ5pDAhL2udSA62GHpJYK
necUiRjjWwM1WtL3uzS6+6RlBRCUrCS42aGVAZaWpC68+2Xof5bIhA1KOWW7qAEn
3JpYhPxw9NCCP7b97Qu6WUnxw+zYG9gvBy5zEM75AV9Qi1WH45+SW0v3prKn+i07
E2N3qhxQQ3SNoaENQz1coQiuP18mHNZpqsf+wQkd8h1XAktNH5g3q6ugJq33s8WS
97yOmzq9lVzJSUccLpuP3grbhyQOIE3ayZBi/HQhTFbDK/V+vQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIMEbMRtWabF+g6VFEdDMqteLdz8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvM2NhYWFkOWItNmE5Yi0z
NTJkLTgxYmItZTIxMTVjN2U3NDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0eKrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHqzwh+0RC7Y8WaQLOjQgTH6m7I4oBIL9AzM2iRvLjk/WbpcN2eXSHbJ
ehzS2Qy/uEsiD9npehSVfxZ21Fz1WboLegSAGRhdMcgpV49/fFTg63Nyx00RGijh
zv5xfGcsM+qx0mp13PCHJrv+dLQwhu8CUpYEqIMt9fwgMsFmIEEotSVzGY+5pvTG
YnlAvoMO2eQmHGkHqq5EXnQaNhxDw73Y4C0CKyBnV11rWMqXRmTXkS94+ApXesaU
jb6zKsCJZHkuGZ4RRF1wxMvftfeqIF5NWroTj7oq6SHelazpwkWWUzLJcV35/0Yo
W/nustJ9z2HLvjBSZ3NUfX2vo9A1QCs=
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:19 2025 by rpki-client