Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/d77d1a56-a19c-3266-b41d-af824ceb6e84.roa
File: d77d1a56-a19c-3266-b41d-af824ceb6e84.roa (raw, json)
Hash identifier: yDYFwjifTUmo2A8mpBcWmPFB/IfsFiNSy/VN+A6V9q8=
Subject key identifier: D0:19:9F:84:EB:94:1B:3B:D5:5A:04:44:86:E3:E7:B9:D3:EB:E9:5A
Certificate issuer: /CN=51772dd7-991f-47b2-b40b-d92a8497234e
Certificate serial: 010D0C9F43285848CBBE17CFD5FC39A907FC17A0
Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/d77d1a56-a19c-3266-b41d-af824ceb6e84.roa
Signing time: Thu 06 Feb 2025 19:39:00 +0000
ROA not before: Thu 06 Feb 2025 19:39:00 +0000
ROA not after: Wed 07 May 2025 18:39:00 +0000
asID: 16509
IP address blocks: 209.54.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:be:17:cf:d5:fc:39:a9:07:fc:17:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e
Validity
Not Before: Feb 6 19:39:00 2025 GMT
Not After : May 7 18:39:00 2025 GMT
Subject: CN=3034f17d-95b9-4efb-b4e8-a738439f690a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c9:e5:d3:78:b3:ec:36:31:c8:0f:51:63:d9:
fd:7b:d1:b1:2f:7f:6f:55:58:85:b9:14:5d:1f:c3:
bc:10:c7:f7:bc:5f:53:8d:74:fc:8b:8f:b8:92:f6:
45:02:4c:b8:25:f9:bd:52:54:b2:a7:fa:b0:60:4f:
2a:c1:69:d8:8f:8d:6b:7f:22:37:f3:81:eb:1f:54:
40:e1:ce:8e:44:9d:6e:65:6d:19:78:6b:e3:17:e3:
97:41:b1:94:c2:f0:2e:1b:61:d0:c0:99:69:2b:be:
ba:8e:29:96:e1:1c:f8:cb:aa:e8:09:c5:3b:c0:e2:
c1:bd:dd:52:63:bc:31:f3:de:99:0c:5d:17:4e:64:
d4:f8:c2:d2:d9:e2:ef:a5:d3:56:da:4d:db:27:e5:
5b:28:4f:a8:be:5a:8c:ed:22:ed:db:59:4d:5b:77:
dc:c8:2b:13:da:bf:b1:8e:2c:66:00:c4:72:e3:0f:
28:b5:6d:94:39:82:86:b0:dd:0d:73:1b:c9:6e:63:
c8:bc:29:6b:e9:e5:5e:17:7b:0f:d0:45:ff:d7:d4:
74:1d:13:3c:16:2f:67:35:ab:5d:37:69:37:d1:cb:
d5:9e:16:3b:fe:60:61:bb:78:37:64:be:9f:49:a7:
8a:e6:6a:b6:9e:b7:d4:c1:cf:b4:7f:e0:a7:b3:21:
84:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:19:9F:84:EB:94:1B:3B:D5:5A:04:44:86:E3:E7:B9:D3:EB:E9:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/d77d1a56-a19c-3266-b41d-af824ceb6e84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl
X509v3 Authority Key Identifier:
keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
sbgp-ipAddrBlock: critical
IPv4:
209.54.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:46:40:1f:09:a7:6e:e8:4e:cc:7f:f2:d0:e3:7d:5c:d7:ca:
d0:6c:33:93:af:39:aa:e0:e2:34:af:41:5e:17:a6:60:31:ae:
b2:ea:1f:71:43:00:8c:82:fc:86:70:90:6a:f7:cc:91:f8:91:
49:6c:63:79:1b:b8:2d:b1:3a:0a:82:2e:08:c3:b2:ab:fd:21:
6c:3b:04:6a:6f:86:89:31:76:f0:13:f7:0e:9f:41:f6:fd:ad:
6f:3c:ab:bf:ae:c6:8a:1d:d1:b0:34:3f:8e:6c:d4:8e:79:f2:
ff:9f:3c:e7:56:9d:44:7e:09:ab:33:94:cd:2e:25:ea:d7:33:
c5:67:a9:65:ef:f1:01:09:4b:cf:87:be:3e:fb:b7:93:a3:cd:
a2:a8:01:75:ee:bc:15:66:58:bb:c7:60:92:bf:64:5c:7b:cb:
52:49:4c:29:6b:a3:bf:5f:6f:8f:7a:a9:6d:55:cd:b2:be:89:
e0:bf:6e:97:c1:5b:7b:11:fd:be:b3:1a:69:6e:ef:98:65:0d:
08:25:9f:f0:77:f1:d6:68:ac:77:29:b5:b0:da:72:83:1f:41:
e3:12:24:bd:2f:10:e9:df:12:80:af:eb:2d:b3:d1:8a:03:a8:
56:86:79:cb:09:4a:90:44:92:78:ed:b4:bb:9b:78:7f:f5:f6:
97:33:df:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLvhfP1fw5qQf8F6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE3NzJkZDctOTkxZi00N2IyLWI0MGItZDkyYTg0OTcy
MzRlMB4XDTI1MDIwNjE5MzkwMFoXDTI1MDUwNzE4MzkwMFowLzEtMCsGA1UEAxMk
MzAzNGYxN2QtOTViOS00ZWZiLWI0ZTgtYTczODQzOWY2OTBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMnl03iz7DYxyA9RY9n9e9GxL39vVViFuRRd
H8O8EMf3vF9TjXT8i4+4kvZFAky4Jfm9UlSyp/qwYE8qwWnYj41rfyI384HrH1RA
4c6ORJ1uZW0ZeGvjF+OXQbGUwvAuG2HQwJlpK766jimW4Rz4y6roCcU7wOLBvd1S
Y7wx896ZDF0XTmTU+MLS2eLvpdNW2k3bJ+VbKE+ovlqM7SLt21lNW3fcyCsT2r+x
jixmAMRy4w8otW2UOYKGsN0NcxvJbmPIvClr6eVeF3sP0EX/19R0HRM8Fi9nNatd
N2k30cvVnhY7/mBhu3g3ZL6fSaeK5mq2nrfUwc+0f+CnsyGEDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNAZn4TrlBs71VoERIbj57nT6+laMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3
MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJhODQ5NzIzNGUvZDc3ZDFhNTYtYTE5Yy0z
MjY2LWI0MWQtYWY4MjRjZWI2ZTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTE3NzJkZDctOTkxZi00N2IyLWI0
MGItZDkyYTg0OTcyMzRlLzUxNzcyZGQ3LTk5MWYtNDdiMi1iNDBiLWQ5MmE4NDk3
MjM0ZS5jcmwwHwYDVR0jBBgwFoAU17ypcT0ujL6ovHcuMMM9YAkEAo4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJh
ODQ5NzIzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0TZsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKNGQB8Jp27oTsx/8tDjfVzXytBsM5OvOarg4jSvQV4XpmAxrrLqH3FD
AIyC/IZwkGr3zJH4kUlsY3kbuC2xOgqCLgjDsqv9IWw7BGpvhokxdvAT9w6fQfb9
rW88q7+uxood0bA0P45s1I558v+fPOdWnUR+CaszlM0uJerXM8VnqWXv8QEJS8+H
vj77t5OjzaKoAXXuvBVmWLvHYJK/ZFx7y1JJTClro79fb496qW1VzbK+ieC/bpfB
W3sR/b6zGmlu75hlDQgln/B38dZorHcptbDacoMfQeMSJL0vEOnfEoCv6y2z0YoD
qFaGecsJSpBEknjttLubeH/19pcz36E=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:49 2025 by rpki-client