Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/86056cc0-c327-3d61-9b25-28ab0e71e8b9.roa
File: 86056cc0-c327-3d61-9b25-28ab0e71e8b9.roa (raw, json)
Hash identifier: MQKtctd7j2HmleHWOzWYk3wSsfgzmBI+g+CxSRP0NwI=
Subject key identifier: 51:8A:4D:FF:96:F0:0A:8E:36:10:89:51:E8:59:1F:1B:F6:93:67:F5
Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial: 010D0C9F432858494FF5962E7C3D4EB7ABD0CC80
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/86056cc0-c327-3d61-9b25-28ab0e71e8b9.roa
Signing time: Wed 26 Mar 2025 04:17:31 +0000
ROA not before: Wed 26 Mar 2025 04:17:31 +0000
ROA not after: Tue 24 Jun 2025 04:17:31 +0000
asID: 19909
IP address blocks: 209.151.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4f:f5:96:2e:7c:3d:4e:b7:ab:d0:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Validity
Not Before: Mar 26 04:17:31 2025 GMT
Not After : Jun 24 04:17:31 2025 GMT
Subject: CN=984cfdaf-86ad-4c57-b13f-dcc8e42898c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:3a:89:be:e7:d4:ad:b2:59:eb:df:a7:a8:
41:da:af:53:18:4f:d3:de:da:6c:ed:93:75:00:45:
70:a7:40:14:17:9e:51:32:65:f5:fa:67:c0:00:87:
b0:a6:4a:fd:39:ab:7a:65:0a:9f:6b:ac:4b:9b:21:
dd:30:c2:bb:37:df:dc:bf:19:10:a9:12:0f:82:42:
f1:1b:7a:29:4f:e5:d0:ad:4a:f0:56:a6:2f:13:e8:
d0:72:9f:de:3b:57:90:7c:5d:c3:7c:e6:32:8f:19:
a9:5c:8f:2f:46:1d:e6:68:e7:84:5b:d0:f6:6a:d8:
2a:f5:5a:26:b5:67:51:4f:be:e5:e2:cb:03:ce:1c:
da:c2:87:4f:98:8c:9c:02:71:01:09:73:e0:55:c3:
6f:68:e9:02:66:0c:48:d1:60:cb:39:d6:9d:71:f1:
16:f0:8a:e3:c9:fb:1c:0a:e1:78:26:ad:04:fe:19:
ca:32:ed:a7:af:6b:7d:76:91:5a:0a:05:db:61:10:
cf:34:18:4c:5e:9d:87:b1:69:d2:50:98:2d:a0:87:
94:73:d1:fc:d0:06:9a:10:4c:b2:22:68:df:0a:90:
97:dd:19:de:4c:b4:4e:d9:ad:12:01:ce:a5:01:19:
f3:14:34:9a:8c:af:60:1d:94:b3:a2:b1:e7:76:ee:
11:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8A:4D:FF:96:F0:0A:8E:36:10:89:51:E8:59:1F:1B:F6:93:67:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/86056cc0-c327-3d61-9b25-28ab0e71e8b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
X509v3 Authority Key Identifier:
keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
sbgp-ipAddrBlock: critical
IPv4:
209.151.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:42:5b:35:3b:88:b3:51:d0:77:9e:95:3f:66:90:d0:0d:47:
1a:79:ce:57:f9:b3:df:05:cc:e7:d7:c2:78:4f:ae:bb:fe:0d:
78:f3:a9:38:c9:84:b2:30:b1:24:c7:f8:7f:e8:70:9d:65:9e:
90:3e:d1:61:89:d6:8f:c1:d3:44:11:5e:ee:5b:cb:92:56:3e:
9c:55:2c:45:3b:33:8b:37:31:c4:14:11:45:c2:33:20:53:4b:
14:0a:f3:70:b6:1e:f7:c7:1b:ac:4f:ca:51:7b:d2:8b:fd:e3:
c1:cf:e9:d8:06:1d:79:1c:a0:b7:17:48:a5:49:e2:ec:e3:3d:
af:d1:73:67:3a:d6:9d:5e:5b:3d:a1:38:8d:99:13:64:59:74:
b3:e5:aa:23:d9:97:05:88:12:1a:26:08:ef:18:65:af:6c:5a:
e0:37:58:07:77:da:34:4c:62:7c:3e:f1:e7:92:93:7f:b3:63:
d2:70:7b:dc:5e:b2:88:66:30:0e:92:98:9d:0a:25:dc:1b:31:
f6:83:6b:ef:c2:fc:7c:a2:35:5c:2d:92:58:c1:10:54:7e:7d:
8e:72:ec:c2:d7:8c:05:46:44:58:bc:4b:4d:0e:65:88:ea:13:
e2:68:2d:8c:e2:0a:5a:cb:ab:87:eb:2f:8d:dd:5a:bd:12:60:
f4:c9:5c:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElP9ZYufD1Ot6vQzIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz
ZWJmMB4XDTI1MDMyNjA0MTczMVoXDTI1MDYyNDA0MTczMVowLzEtMCsGA1UEAxMk
OTg0Y2ZkYWYtODZhZC00YzU3LWIxM2YtZGNjOGU0Mjg5OGM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSs6ib7n1K2yWevfp6hB2q9TGE/T3tps7ZN1
AEVwp0AUF55RMmX1+mfAAIewpkr9Oat6ZQqfa6xLmyHdMMK7N9/cvxkQqRIPgkLx
G3opT+XQrUrwVqYvE+jQcp/eO1eQfF3DfOYyjxmpXI8vRh3maOeEW9D2atgq9Vom
tWdRT77l4ssDzhzawodPmIycAnEBCXPgVcNvaOkCZgxI0WDLOdadcfEW8Irjyfsc
CuF4Jq0E/hnKMu2nr2t9dpFaCgXbYRDPNBhMXp2HsWnSUJgtoIeUc9H80AaaEEyy
ImjfCpCX3RneTLRO2a0SAc6lARnzFDSajK9gHZSzorHndu4R6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFGKTf+W8AqONhCJUehZHxv2k2f1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl
NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvODYwNTZjYzAtYzMyNy0z
ZDYxLTliMjUtMjhhYjBlNzFlOGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw
ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm
M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm
YmFhZjNlYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZfqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAChCWzU7iLNR0HeelT9mkNANRxp5zlf5s98FzOfXwnhPrrv+DXjzqTjJ
hLIwsSTH+H/ocJ1lnpA+0WGJ1o/B00QRXu5by5JWPpxVLEU7M4s3McQUEUXCMyBT
SxQK83C2HvfHG6xPylF70ov948HP6dgGHXkcoLcXSKVJ4uzjPa/Rc2c61p1eWz2h
OI2ZE2RZdLPlqiPZlwWIEhomCO8YZa9sWuA3WAd32jRMYnw+8eeSk3+zY9Jwe9xe
sohmMA6SmJ0KJdwbMfaDa+/C/HyiNVwtkljBEFR+fY5y7MLXjAVGRFi8S00OZYjq
E+JoLYziClrLq4frL43dWr0SYPTJXJs=
-----END CERTIFICATE-----
Generated at Wed Apr 9 19:35:51 2025 by rpki-client