Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/24cd566e-cce5-31a0-9029-1e2d74307ceb.roa
File: 24cd566e-cce5-31a0-9029-1e2d74307ceb.roa (raw, json)
Hash identifier: zABFHWJ3+NOZUhNrEQBJozoAJfZg0EwRWEFnoxO3fhc=
Subject key identifier: 62:90:84:BA:34:95:3F:48:D2:0F:64:20:60:D0:07:B8:D4:F3:A0:8F
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F432858494CC9402161499A5E21ED72F8
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/24cd566e-cce5-31a0-9029-1e2d74307ceb.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 13414
IP address blocks: 209.237.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:40:21:61:49:9a:5e:21:ed:72:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=674ca772-39c0-4a1f-8215-55867b342204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d5:a1:39:ee:3e:9d:23:58:ce:84:c3:b7:e9:
6d:ca:47:1b:aa:2e:5c:47:94:3e:0f:a8:8d:89:b4:
58:53:2f:09:28:c7:85:55:ae:95:8a:57:05:bc:66:
c7:7e:47:64:fc:11:61:ce:a1:d5:fd:9d:38:00:56:
b7:27:c1:29:c5:3e:a8:9f:e5:39:52:15:c4:cc:d0:
e0:4f:b5:10:a5:3f:e6:d2:79:37:dc:44:80:30:e8:
ab:0f:c9:eb:d3:21:71:75:51:ed:55:67:9a:05:5e:
7b:bb:6f:05:e1:f5:4b:88:5b:b0:a5:f2:ce:b2:4b:
25:5e:9c:75:84:22:a7:20:b5:4c:0d:a3:b5:e7:fc:
a8:da:74:2e:20:b7:0d:97:83:fe:c3:81:9a:d1:54:
27:f2:bd:03:34:df:01:fe:49:8f:1e:cd:45:68:76:
fc:e7:51:ac:98:86:be:b0:15:e0:84:64:d0:5a:5b:
eb:c6:08:39:e7:82:b4:13:96:08:f7:1d:14:6d:4f:
ab:0b:8a:1d:c8:0f:44:dd:fe:ad:23:9b:f5:2a:a8:
81:c8:97:fd:56:db:f2:ae:5e:e9:2a:c4:eb:d1:e9:
91:cf:17:95:6f:58:99:6c:09:bc:61:0b:dc:2c:2c:
4f:bd:0d:5f:21:58:b0:b6:fa:30:6b:13:7a:74:6f:
4e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:90:84:BA:34:95:3F:48:D2:0F:64:20:60:D0:07:B8:D4:F3:A0:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/24cd566e-cce5-31a0-9029-1e2d74307ceb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.213.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:c6:3c:97:a5:3e:4d:fc:42:33:3c:cb:60:23:19:11:2f:e6:
80:63:54:fb:c2:b3:d2:4d:96:40:19:af:78:2c:d9:eb:32:40:
99:af:ce:40:35:cb:7f:6b:95:a2:c6:60:6c:7b:96:6f:5b:d2:
76:cb:09:20:aa:a0:df:9c:33:a2:7f:1b:be:b3:5e:c2:be:5f:
b5:97:c4:71:c2:50:e9:24:6c:28:c7:9e:79:1d:45:75:e3:a5:
60:56:8b:b8:9d:9b:fe:c7:30:62:44:81:c3:0e:4f:f2:ec:67:
55:ef:80:d9:84:53:fc:7c:06:75:0d:0d:7f:15:f3:1a:0d:21:
8c:81:17:55:30:5d:a4:b6:a5:c8:10:2b:3e:08:3a:75:18:15:
8d:2c:8e:03:e8:7a:c8:43:bb:e5:0c:2c:e8:5d:65:fe:de:ae:
87:64:a7:d7:7a:00:72:9a:07:dc:16:a1:e7:05:1b:88:22:58:
50:17:c1:96:d4:dc:a6:d9:0e:6e:d8:f3:dc:c5:ea:fe:ee:74:
c2:4b:2a:6a:df:24:cf:6a:6d:0b:0f:b8:7f:ca:96:c3:b1:20:
56:c9:e8:89:7c:95:9c:4f:aa:45:7b:64:c4:c1:f0:d9:8e:dd:
98:0f:4b:9f:3e:70:19:cd:f9:5f:9c:42:f2:06:e3:e2:59:a7:
b1:c5:f9:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUAhYUmaXiHtcvgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy
NTc2MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk
Njc0Y2E3NzItMzljMC00YTFmLTgyMTUtNTU4NjdiMzQyMjA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9WhOe4+nSNYzoTDt+ltykcbqi5cR5Q+D6iN
ibRYUy8JKMeFVa6VilcFvGbHfkdk/BFhzqHV/Z04AFa3J8EpxT6on+U5UhXEzNDg
T7UQpT/m0nk33ESAMOirD8nr0yFxdVHtVWeaBV57u28F4fVLiFuwpfLOskslXpx1
hCKnILVMDaO15/yo2nQuILcNl4P+w4Ga0VQn8r0DNN8B/kmPHs1FaHb851GsmIa+
sBXghGTQWlvrxgg554K0E5YI9x0UbU+rC4odyA9E3f6tI5v1KqiByJf9Vtvyrl7p
KsTr0emRzxeVb1iZbAm8YQvcLCxPvQ1fIViwtvowaxN6dG9OcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGKQhLo0lT9I0g9kIGDQB7jU86CPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3
YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvMjRjZDU2NmUtY2NlNS0z
MWEwLTkwMjktMWUyZDc0MzA3Y2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3
YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi
MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh
NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3VMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALTGPJelPk38QjM8y2AjGREv5oBjVPvCs9JNlkAZr3gs2esyQJmvzkA1
y39rlaLGYGx7lm9b0nbLCSCqoN+cM6J/G76zXsK+X7WXxHHCUOkkbCjHnnkdRXXj
pWBWi7idm/7HMGJEgcMOT/LsZ1XvgNmEU/x8BnUNDX8V8xoNIYyBF1UwXaS2pcgQ
Kz4IOnUYFY0sjgPoeshDu+UMLOhdZf7erodkp9d6AHKaB9wWoecFG4giWFAXwZbU
3KbZDm7Y89zF6v7udMJLKmrfJM9qbQsPuH/KlsOxIFbJ6Il8lZxPqkV7ZMTB8NmO
3ZgPS58+cBnN+V+cQvIG4+JZp7HF+bk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:22:12 2025 by rpki-client