Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/138497f4-eab8-37a3-8d4e-8dddf2b99925.roa
File: 138497f4-eab8-37a3-8d4e-8dddf2b99925.roa (raw, json)
Hash identifier: vFsyu0EXWkq9FO4YedLj2lYPaJdYGYz1OesRqeeEPzA=
Subject key identifier: BA:C5:15:E9:A5:A3:54:D2:70:87:62:65:19:58:26:32:F6:63:82:3C
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F43285848C43972FE4FD2BA2EAE9E82E0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/138497f4-eab8-37a3-8d4e-8dddf2b99925.roa
Signing time: Tue 04 Feb 2025 03:01:05 +0000
ROA not before: Tue 04 Feb 2025 03:01:05 +0000
ROA not after: Mon 05 May 2025 02:01:05 +0000
asID: 0
IP address blocks: 209.24.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c4:39:72:fe:4f:d2:ba:2e:ae:9e:82:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Feb 4 03:01:05 2025 GMT
Not After : May 5 02:01:05 2025 GMT
Subject: CN=94555d64-c099-4753-98d6-0f1756f27bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c6:72:eb:12:2b:76:41:35:fe:2d:47:f7:9f:
c1:be:0a:3d:9a:e8:dd:bc:63:f9:6d:70:72:27:7b:
1b:38:9f:e1:b5:8c:c3:38:c4:50:64:07:e9:d1:2d:
ca:58:e2:ae:73:57:d5:ef:c0:ec:96:d1:d5:67:8e:
44:08:e5:a5:59:91:86:d3:f3:34:6b:54:c1:a3:11:
16:f8:d9:bc:e4:04:b9:21:33:36:24:20:28:85:ee:
62:a1:e8:f0:5c:08:d2:aa:23:01:63:eb:95:47:ef:
6c:3e:70:82:c7:c6:fa:dd:c2:12:d0:99:44:64:7c:
f0:9b:04:5c:24:e1:6d:fa:aa:05:c0:3f:41:f5:bf:
96:61:48:9e:e1:a4:a5:7e:c7:07:ac:b7:e5:d2:43:
b5:6b:f7:e7:58:62:20:29:bd:c0:0d:18:7c:a8:9f:
cb:48:06:e8:28:60:3b:66:f9:9b:35:41:c9:1b:34:
ba:60:8b:1f:9d:8f:a5:7d:5b:e3:66:3a:79:6f:b7:
79:20:c4:6c:e6:be:3b:6b:77:cf:4e:54:0b:30:04:
fa:8e:d2:d2:89:83:2b:42:a3:cf:77:27:99:82:45:
b5:9b:cb:ef:05:5e:fd:f5:63:9e:ff:c3:c6:1b:e9:
e3:a1:37:03:2a:e6:d6:3f:66:57:ff:b2:fc:92:49:
d2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C5:15:E9:A5:A3:54:D2:70:87:62:65:19:58:26:32:F6:63:82:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/138497f4-eab8-37a3-8d4e-8dddf2b99925.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
209.24.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:59:5f:83:db:90:81:44:84:d7:4b:fd:a1:9c:95:2f:33:cc:
b8:9e:f1:89:39:ed:8e:cc:4f:f5:20:2f:ee:29:75:2b:fd:d9:
41:a4:69:7a:16:0a:a6:21:78:d6:10:58:9c:b1:7f:04:b2:b2:
73:bf:60:83:31:94:70:3b:46:0f:e1:fc:fe:73:27:90:70:09:
66:f5:a8:8c:0d:39:43:69:06:d2:ee:db:cc:03:96:0c:5d:9b:
49:04:2c:38:29:5f:01:af:d4:c0:df:dd:43:17:4f:24:0d:bf:
9e:d6:91:95:89:b2:a1:c3:61:2c:82:26:f4:e0:4b:19:c8:60:
c7:8c:5e:af:f1:3c:b9:95:55:9d:87:21:25:f7:16:29:a4:fa:
6d:bb:ff:2c:39:7c:e7:65:af:86:b0:55:c1:27:67:5d:1f:34:
20:60:8a:7e:ac:25:eb:e4:62:1d:bc:93:da:85:54:1f:2c:3e:
f3:7a:0a:40:45:32:28:32:e0:ac:4f:80:9c:87:4a:11:fe:71:
d2:2d:a8:27:78:1c:0e:07:7d:e6:aa:11:61:32:88:51:91:c1:
97:f2:cd:89:c9:cd:45:67:a0:a7:29:f9:0a:2b:0e:54:ec:b0:
d0:45:f3:d8:50:82:09:c9:1c:61:aa:77:85:80:a6:1d:11:df:
52:b1:6f:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjEOXL+T9K6Lq6eguAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI1MDIwNDAzMDEwNVoXDTI1MDUwNTAyMDEwNVowLzEtMCsGA1UEAxMk
OTQ1NTVkNjQtYzA5OS00NzUzLTk4ZDYtMGYxNzU2ZjI3YmNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcZy6xIrdkE1/i1H95/Bvgo9mujdvGP5bXBy
J3sbOJ/htYzDOMRQZAfp0S3KWOKuc1fV78DsltHVZ45ECOWlWZGG0/M0a1TBoxEW
+Nm85AS5ITM2JCAohe5ioejwXAjSqiMBY+uVR+9sPnCCx8b63cIS0JlEZHzwmwRc
JOFt+qoFwD9B9b+WYUie4aSlfscHrLfl0kO1a/fnWGIgKb3ADRh8qJ/LSAboKGA7
ZvmbNUHJGzS6YIsfnY+lfVvjZjp5b7d5IMRs5r47a3fPTlQLMAT6jtLSiYMrQqPP
dyeZgkW1m8vvBV799WOe/8PGG+njoTcDKubWP2ZX/7L8kknSGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLrFFemlo1TScIdiZRlYJjL2Y4I8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMTM4NDk3ZjQtZWFiOC0z
N2EzLThkNGUtOGRkZGYyYjk5OTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RgAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIRZX4PbkIFEhNdL/aGclS8zzLie8Yk57Y7MT/UgL+4pdSv92UGkaXoW
CqYheNYQWJyxfwSysnO/YIMxlHA7Rg/h/P5zJ5BwCWb1qIwNOUNpBtLu28wDlgxd
m0kELDgpXwGv1MDf3UMXTyQNv57WkZWJsqHDYSyCJvTgSxnIYMeMXq/xPLmVVZ2H
ISX3Fimk+m27/yw5fOdlr4awVcEnZ10fNCBgin6sJevkYh28k9qFVB8sPvN6CkBF
Migy4KxPgJyHShH+cdItqCd4HA4HfeaqEWEyiFGRwZfyzYnJzUVnoKcp+QorDlTs
sNBF89hQggnJHGGqd4WAph0R31Kxb8s=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:30:34 2025 by rpki-client