Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6a571fde-850c-33a9-977f-c327dbfe188e.roa
File: 6a571fde-850c-33a9-977f-c327dbfe188e.roa (raw, json)
Hash identifier: +0rmLCdHLQuqVsLz1bZhg6iv2buP+6UTg14TUejyXFA=
Subject key identifier: 87:6E:D0:9D:81:28:24:1E:60:EB:C3:BE:1A:7A:EC:BE:59:F7:02:CD
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921346133E49D11CA575007C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6a571fde-850c-33a9-977f-c327dbfe188e.roa
Signing time: Sun 09 Mar 2025 10:21:02 +0000
ROA not before: Sun 09 Mar 2025 10:21:02 +0000
ROA not after: Sat 07 Jun 2025 10:21:02 +0000
asID: 40575
IP address blocks: 209.128.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:61:33:e4:9d:11:ca:57:50:07:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:21:02 2025 GMT
Not After : Jun 7 10:21:02 2025 GMT
Subject: CN=f73b1d8b-aa2b-4795-8052-12e8c7d686c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:05:74:92:d2:80:0b:69:73:d1:87:4e:26:91:
37:ea:02:bc:02:1b:a6:f8:0d:51:08:36:c4:25:48:
6a:68:29:3f:eb:5c:5a:67:55:59:08:6f:04:6e:65:
df:d1:e8:32:d4:c8:d1:cc:82:4d:52:7c:1d:64:35:
77:0d:32:39:48:00:c2:b1:f8:6a:48:57:7e:61:8d:
78:63:90:20:45:f2:f6:3b:04:13:ba:21:e9:83:b4:
5f:2b:d4:12:15:96:dd:a4:d5:0e:45:22:d6:9c:ca:
d3:0d:8f:32:7c:52:11:b7:5e:fd:e7:19:5b:47:c9:
a7:23:cb:49:35:6b:22:88:53:fa:bf:c9:58:40:69:
e7:2e:66:91:9d:b1:c1:3a:34:13:1f:44:6f:92:d3:
06:7d:68:7c:dd:35:39:77:28:4a:99:b3:fc:59:e4:
af:ae:f4:02:36:3c:af:4a:e0:a8:01:2f:fc:ff:e4:
31:57:67:40:e4:88:3c:b4:6c:0e:17:65:cb:82:cf:
07:1c:0d:b0:a0:76:0d:5e:37:47:35:cd:0f:9d:16:
f8:e4:ef:22:03:1b:54:ed:70:aa:9f:ba:e9:6a:4d:
8b:c6:70:19:37:f2:93:db:37:5b:44:95:eb:36:0d:
2a:ad:a5:03:c9:fd:fc:c8:4a:d3:5a:d2:07:60:d8:
50:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6E:D0:9D:81:28:24:1E:60:EB:C3:BE:1A:7A:EC:BE:59:F7:02:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6a571fde-850c-33a9-977f-c327dbfe188e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.128.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:6a:f7:5d:08:25:cf:d6:79:87:c1:24:c3:0b:25:83:7e:47:
07:19:83:08:0d:42:47:0a:ef:f9:a2:b4:ef:7b:41:3d:a9:6f:
f1:1b:19:d0:e3:cf:28:8c:30:9c:8c:a7:d8:7b:88:5f:02:01:
72:ac:97:89:fd:c7:4e:c6:6a:51:67:0a:90:8e:b5:68:56:37:
56:54:a0:1b:64:8f:fa:45:a5:fa:94:d9:b2:fa:93:23:ed:de:
2c:16:0f:7f:67:a1:aa:05:38:6d:37:a8:0d:3f:39:95:b5:55:
a0:ab:87:c5:69:9f:44:7b:21:80:eb:10:b3:55:46:2d:2e:6e:
17:9c:1a:34:79:87:75:43:ab:62:15:38:99:15:be:6d:1d:b3:
4d:01:9b:2e:b9:3f:66:82:8e:bc:c3:da:14:15:f8:f9:48:ee:
a5:b9:3b:ce:a6:d2:23:e8:be:81:db:fa:12:cc:0f:a4:f5:94:
8d:7b:0e:e9:7c:9d:3b:81:99:53:c4:03:8b:64:55:26:1e:e8:
a4:ff:63:4d:8b:46:69:34:eb:0d:f9:a7:46:fb:0c:4f:62:ca:
97:c6:e9:02:9b:03:5b:77:ee:9a:89:ad:e4:ad:a6:dc:80:52:
d7:bc:8a:b6:a9:9d:39:87:63:97:34:32:23:6d:45:e4:14:27:
a6:cf:f9:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNGEz5J0RyldQB8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDMwOTEwMjEwMloXDTI1MDYwNzEwMjEwMlowLzEtMCsGA1UEAxMk
ZjczYjFkOGItYWEyYi00Nzk1LTgwNTItMTJlOGM3ZDY4NmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQV0ktKAC2lz0YdOJpE36gK8Ahum+A1RCDbE
JUhqaCk/61xaZ1VZCG8EbmXf0egy1MjRzIJNUnwdZDV3DTI5SADCsfhqSFd+YY14
Y5AgRfL2OwQTuiHpg7RfK9QSFZbdpNUORSLWnMrTDY8yfFIRt1795xlbR8mnI8tJ
NWsiiFP6v8lYQGnnLmaRnbHBOjQTH0RvktMGfWh83TU5dyhKmbP8WeSvrvQCNjyv
SuCoAS/8/+QxV2dA5Ig8tGwOF2XLgs8HHA2woHYNXjdHNc0PnRb45O8iAxtU7XCq
n7rpak2LxnAZN/KT2zdbRJXrNg0qraUDyf38yErTWtIHYNhQ8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIdu0J2BKCQeYOvDvhp67L5Z9wLNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNmE1NzFmZGUtODUwYy0z
M2E5LTk3N2YtYzMyN2RiZmUxODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YA7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIJq910IJc/WeYfBJMMLJYN+RwcZgwgNQkcK7/mitO97QT2pb/EbGdDj
zyiMMJyMp9h7iF8CAXKsl4n9x07GalFnCpCOtWhWN1ZUoBtkj/pFpfqU2bL6kyPt
3iwWD39noaoFOG03qA0/OZW1VaCrh8Vpn0R7IYDrELNVRi0ubhecGjR5h3VDq2IV
OJkVvm0ds00Bmy65P2aCjrzD2hQV+PlI7qW5O86m0iPovoHb+hLMD6T1lI17Dul8
nTuBmVPEA4tkVSYe6KT/Y02LRmk06w35p0b7DE9iypfG6QKbA1t37pqJreStptyA
Ute8irapnTmHY5c0MiNtReQUJ6bP+eE=
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:42 2025 by rpki-client