Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/cc63c420-f924-338f-b8f7-a02197d4dbf2.roa
File: cc63c420-f924-338f-b8f7-a02197d4dbf2.roa (raw, json)
Hash identifier: zbXh3q89ZDucIpYfjajY1H0Gm15uxgDnjlvYgrCKmm4=
Subject key identifier: 3E:46:87:C5:0B:19:72:E4:EF:85:06:9C:B1:FE:C6:8B:86:6C:CF:B8
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F4328584900216EF40ABA476CCB99A480
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/cc63c420-f924-338f-b8f7-a02197d4dbf2.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 13536
IP address blocks: 209.94.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:6e:f4:0a:ba:47:6c:cb:99:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=49f0c873-0234-40ee-a7e4-b0e6a8782dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ff:36:0c:25:e1:55:df:37:c8:6e:b1:22:1b:
ae:89:ee:5d:aa:ad:fc:3e:e1:65:17:77:5e:54:6f:
74:47:ef:72:fb:fc:11:0b:85:b6:29:d1:b7:5a:3a:
21:95:dc:cf:e9:20:cd:90:14:c9:68:86:1a:5a:81:
a2:7c:c1:e0:d3:3e:14:f9:f6:e5:0e:c3:85:e7:03:
04:73:5f:f4:94:9f:e3:91:47:ca:1b:1c:9b:6a:5a:
96:11:0e:b4:7a:11:23:1b:83:b7:b2:36:f9:e0:13:
80:b2:00:2a:fc:aa:23:97:91:39:d3:8c:de:1a:cb:
51:c2:84:5e:99:2d:95:65:11:91:cd:e8:74:aa:2d:
35:35:c0:79:f1:ff:5d:b3:24:15:91:83:8a:c4:9a:
42:c5:ec:33:de:96:74:8f:76:5b:bc:f7:46:1a:ab:
22:15:33:be:24:11:16:e0:c2:97:d7:11:6a:29:fe:
58:1b:20:3b:14:f4:9c:76:9b:73:19:06:d7:b9:a4:
4f:79:d4:41:dd:66:bf:24:ab:2f:86:c4:01:2c:a3:
ca:37:2c:93:6f:32:57:90:2a:50:35:e6:3c:77:6e:
07:1f:01:83:5e:19:07:52:9f:21:03:a6:17:a3:d2:
e9:88:bf:ff:bf:e1:79:ea:f5:82:4e:48:21:1a:2a:
45:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:46:87:C5:0B:19:72:E4:EF:85:06:9C:B1:FE:C6:8B:86:6C:CF:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/cc63c420-f924-338f-b8f7-a02197d4dbf2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
209.94.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:37:21:97:05:ab:82:d6:1d:ab:c9:86:ae:1e:f6:20:45:83:
9a:62:9e:aa:b7:ee:be:36:c1:ef:63:56:a9:dc:53:76:25:a1:
0d:41:f6:9a:36:59:50:6b:65:43:b3:8c:7c:08:6f:e4:cd:d0:
6d:7d:cf:0e:ab:a7:34:cf:a7:8e:68:71:a6:23:80:6e:7f:96:
49:23:90:17:17:38:95:cb:4f:ce:00:43:4e:47:c9:10:38:f7:
36:4d:a5:10:53:3e:f0:d3:a9:01:43:47:f5:b1:5b:a4:68:ef:
68:ee:fa:dd:7b:82:cc:1f:fc:6f:42:d1:c1:49:d5:dc:96:2a:
14:37:91:e6:a5:a3:c8:14:06:2a:ba:8f:d4:f7:e2:26:2d:63:
00:c2:5b:4f:e8:fb:2a:c5:25:94:69:a5:eb:2c:a3:bb:7d:b4:
2c:d5:8b:5f:99:f4:ea:84:a8:21:31:d7:3d:82:4d:bc:a4:3b:
6b:88:34:86:56:7b:5c:a9:b0:56:de:d2:27:b7:c1:38:8f:18:
22:80:19:a6:11:5d:71:b3:1a:7d:ca:a1:52:43:19:cc:13:c3:
99:31:8b:7f:4c:cf:cd:9b:f8:63:3a:15:59:2a:41:c0:53:17:
d3:05:94:fa:bf:4c:a9:95:c4:61:26:92:cf:cb:5c:9b:75:37:
5b:de:48:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIW70CrpHbMuZpIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz
OTdkMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk
NDlmMGM4NzMtMDIzNC00MGVlLWE3ZTQtYjBlNmE4NzgyZGM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif82DCXhVd83yG6xIhuuie5dqq38PuFlF3de
VG90R+9y+/wRC4W2KdG3WjohldzP6SDNkBTJaIYaWoGifMHg0z4U+fblDsOF5wME
c1/0lJ/jkUfKGxybalqWEQ60ehEjG4O3sjb54BOAsgAq/Kojl5E504zeGstRwoRe
mS2VZRGRzeh0qi01NcB58f9dsyQVkYOKxJpCxewz3pZ0j3ZbvPdGGqsiFTO+JBEW
4MKX1xFqKf5YGyA7FPScdptzGQbXuaRPedRB3Wa/JKsvhsQBLKPKNyyTbzJXkCpQ
NeY8d24HHwGDXhkHUp8hA6YXo9LpiL//v+F56vWCTkghGipFbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD5Gh8ULGXLk74UGnLH+xouGbM+4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh
NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvY2M2M2M0MjAtZjkyNC0z
MzhmLWI4ZjctYTAyMTk3ZDRkYmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4
NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi
Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz
MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0V5gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGk3IZcFq4LWHavJhq4e9iBFg5pinqq37r42we9jVqncU3YloQ1B9po2
WVBrZUOzjHwIb+TN0G19zw6rpzTPp45ocaYjgG5/lkkjkBcXOJXLT84AQ05HyRA4
9zZNpRBTPvDTqQFDR/WxW6Ro72ju+t17gswf/G9C0cFJ1dyWKhQ3kealo8gUBiq6
j9T34iYtYwDCW0/o+yrFJZRppesso7t9tCzVi1+Z9OqEqCEx1z2CTbykO2uINIZW
e1ypsFbe0ie3wTiPGCKAGaYRXXGzGn3KoVJDGcwTw5kxi39Mz82b+GM6FVkqQcBT
F9MFlPq/TKmVxGEmks/LXJt1N1veSC4=
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:20:45 2025 by rpki-client