Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c1d91971-bde2-3959-8733-0c89a5200281.roa
File: c1d91971-bde2-3959-8733-0c89a5200281.roa (raw, json)
Hash identifier: AO1YzwRDTiR/GkbKsKXx47TZUf3Rx5+epy+Mx/4+UBE=
Subject key identifier: 3E:B8:AD:7E:A8:76:F8:99:37:63:EE:FE:5C:A3:26:38:7D:FF:F9:CE
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584556B58F0402B5AB7D677C6623
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c1d91971-bde2-3959-8733-0c89a5200281.roa
Signing time: Mon 25 Mar 2024 12:00:00 +0000
ROA not before: Mon 25 Mar 2024 12:00:00 +0000
ROA not after: Tue 25 Jun 2024 04:00:00 +0000
asID: 577
IP address blocks: 209.139.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:56:b5:8f:04:02:b5:ab:7d:67:7c:66:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 25 12:00:00 2024 GMT
Not After : Jun 25 04:00:00 2024 GMT
Subject: CN=dc000e09-ebeb-4979-95e8-688027cdeadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:05:48:25:7e:a6:2b:12:1d:27:55:a0:58:ed:
32:a3:11:3d:17:33:e9:8d:d0:ac:25:d7:57:16:98:
1c:87:fe:ce:3c:26:5f:6b:6d:6d:44:6a:a1:b5:3b:
fa:23:03:47:bb:32:17:b8:d2:ac:b0:c5:88:af:fb:
7d:49:5a:5b:e6:72:31:a7:3f:95:a4:4f:1f:9f:17:
cb:28:36:b6:c8:e8:47:74:36:63:34:c2:88:af:3f:
c3:f8:84:0b:ab:8e:eb:16:b8:c9:e7:c6:e2:9e:8c:
40:0e:82:25:0d:f6:d2:60:21:56:aa:37:2f:ee:76:
b7:bf:b7:2c:cc:7c:df:bc:5f:45:32:36:8a:0a:5c:
86:2c:a5:f0:f5:9f:38:cb:1a:0a:fc:4c:6d:a3:f3:
de:7c:4a:bc:03:f0:27:94:23:39:8b:85:8e:56:10:
e7:c7:0b:dd:a9:db:aa:e9:a8:ef:f8:a7:59:aa:de:
54:f6:44:33:33:3d:fb:c1:e3:22:b8:47:82:18:25:
55:30:45:36:89:eb:eb:5b:e5:d9:52:a4:84:bb:1b:
c5:1d:69:17:77:d1:12:cf:26:f5:3f:53:8d:e5:bc:
85:be:30:69:68:5e:72:07:87:88:1c:e7:8c:86:0e:
da:db:68:af:dc:ee:fa:31:d0:d1:9a:67:3a:63:c7:
dd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B8:AD:7E:A8:76:F8:99:37:63:EE:FE:5C:A3:26:38:7D:FF:F9:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c1d91971-bde2-3959-8733-0c89a5200281.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
209.139.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:13:9f:05:c6:75:1f:ac:1e:af:9f:4d:4c:86:24:d3:2d:4a:
bc:49:5a:ec:7a:9f:ae:6c:d2:44:ba:64:f7:2b:05:1c:32:34:
93:ae:4b:35:df:32:9f:dc:e6:f8:93:2b:ee:7e:0d:e8:90:0a:
02:21:4b:a3:a9:7d:04:0a:fd:0a:6a:23:49:81:b5:3d:b1:33:
e3:7e:7e:f0:c4:80:c1:9f:1f:f7:02:5c:e0:8e:f8:dd:d9:ca:
0b:5a:47:b9:4d:0c:4b:d8:a9:ba:e6:13:75:ba:91:ab:59:7f:
13:d2:76:56:95:cc:75:80:79:ea:ff:28:95:63:65:12:7b:83:
e9:4f:f1:fa:71:32:07:4b:45:ce:bc:b3:94:b3:5d:bb:6f:cb:
9e:77:08:bc:36:c6:90:d6:76:c3:fd:0f:2f:6f:cc:4e:e5:f3:
fd:f0:9e:e0:f0:fb:36:9a:e5:0c:bf:1d:79:53:1b:78:e6:6e:
9a:6a:ec:f2:92:e4:87:91:d5:c3:db:69:fb:fe:44:53:28:d5:
6e:85:d8:36:c1:de:35:ef:5e:bd:a1:f9:97:04:cc:a5:ee:ca:
c0:f1:35:b9:73:ba:be:20:1f:a3:2a:ac:6d:e9:05:c4:66:ec:
99:27:a3:f9:b8:18:ff:ff:a5:7f:59:db:94:15:99:fe:d2:58:
3a:af:d3:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVWtY8EArWrfWd8ZiMwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDMyNTEyMDAwMFoXDTI0MDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
ZGMwMDBlMDktZWJlYi00OTc5LTk1ZTgtNjg4MDI3Y2RlYWRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAVIJX6mKxIdJ1WgWO0yoxE9FzPpjdCsJddX
Fpgch/7OPCZfa21tRGqhtTv6IwNHuzIXuNKssMWIr/t9SVpb5nIxpz+VpE8fnxfL
KDa2yOhHdDZjNMKIrz/D+IQLq47rFrjJ58binoxADoIlDfbSYCFWqjcv7na3v7cs
zHzfvF9FMjaKClyGLKXw9Z84yxoK/Exto/PefEq8A/AnlCM5i4WOVhDnxwvdqduq
6ajv+KdZqt5U9kQzMz37weMiuEeCGCVVMEU2ievrW+XZUqSEuxvFHWkXd9ESzyb1
P1ON5byFvjBpaF5yB4eIHOeMhg7a22iv3O76MdDRmmc6Y8fdiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD64rX6odviZN2Pu/lyjJjh9//nOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYzFkOTE5NzEtYmRlMi0z
OTU5LTg3MzMtMGM4OWE1MjAwMjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0YvAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACMTnwXGdR+sHq+fTUyGJNMtSrxJWux6n65s0kS6ZPcrBRwyNJOuSzXf
Mp/c5viTK+5+DeiQCgIhS6OpfQQK/QpqI0mBtT2xM+N+fvDEgMGfH/cCXOCO+N3Z
ygtaR7lNDEvYqbrmE3W6katZfxPSdlaVzHWAeer/KJVjZRJ7g+lP8fpxMgdLRc68
s5SzXbtvy553CLw2xpDWdsP9Dy9vzE7l8/3wnuDw+zaa5Qy/HXlTG3jmbppq7PKS
5IeR1cPbafv+RFMo1W6F2DbB3jXvXr2h+ZcEzKXuysDxNblzur4gH6MqrG3pBcRm
7Jkno/m4GP//pX9Z25QVmf7SWDqv02Y=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:39 2025 by rpki-client