Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/14ea9000-7107-3287-a518-931632749c98.roa
File: 14ea9000-7107-3287-a518-931632749c98.roa (raw, json)
Hash identifier: Zbl6AUa0ZL5EKkyIZnX13zCbu5qXWAXh8485GUEpRvM=
Subject key identifier: 3B:90:A5:07:D1:19:2B:45:2C:52:04:85:2B:3E:EE:9A:E2:68:A5:2F
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285849071BEE6F67D99AAA8908C480
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/14ea9000-7107-3287-a518-931632749c98.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 21691
IP address blocks: 209.249.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:ee:6f:67:d9:9a:aa:89:08:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=416ea8e1-cbfb-47d1-8b87-8e4ec4497018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9d:40:69:18:95:fb:48:99:77:ac:96:f1:67:
03:ea:ea:e2:13:99:cf:d5:f1:42:78:3f:82:52:8c:
78:98:79:12:93:ff:00:99:ea:68:a8:eb:5a:e2:c7:
50:dd:76:f0:36:53:36:87:48:e1:eb:fd:70:31:0b:
bc:68:97:4a:28:ea:8f:67:cf:ee:54:ce:ff:62:a9:
cf:21:03:90:78:2d:83:c0:c8:19:46:16:62:d6:fe:
5e:9d:3d:c5:36:90:27:99:6b:18:95:69:45:20:ed:
5f:5e:41:dc:3f:17:e5:b3:55:bc:5d:80:0a:aa:21:
f8:01:bf:fd:41:3a:d9:72:be:46:08:b1:83:8b:42:
6e:a4:45:9d:12:dd:92:f0:90:c1:2f:2b:dd:03:ed:
bd:ab:1a:86:93:84:71:19:aa:8f:be:f6:12:74:bb:
7b:c8:de:cf:ca:8c:3f:d6:be:38:45:60:07:39:7e:
eb:58:ec:99:04:2a:07:36:cb:16:94:6b:cc:05:2f:
50:af:c3:a1:e0:22:c8:cc:42:0a:b7:12:fc:41:97:
17:19:ad:45:ae:40:59:52:52:58:8b:a2:b4:61:4b:
9f:51:9e:f3:15:5f:8c:8a:52:01:7a:ad:1a:10:f4:
e8:ca:a3:b4:e7:c0:87:db:fd:a4:2d:c6:c9:69:81:
31:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:90:A5:07:D1:19:2B:45:2C:52:04:85:2B:3E:EE:9A:E2:68:A5:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/14ea9000-7107-3287-a518-931632749c98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
209.249.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c5:ce:cd:94:f1:aa:d9:5f:15:23:0d:15:9b:66:92:27:e6:9c:
54:a6:e8:32:d2:a9:40:7c:7f:a5:5c:49:30:32:5a:0a:c7:8a:
d7:4c:34:6d:99:c4:4f:69:5c:5b:48:38:86:3c:a7:6c:77:64:
d2:ae:4f:0d:ef:da:20:a4:0c:19:78:f9:97:1e:44:c9:b7:e0:
1c:b3:c6:50:38:6a:db:e8:bd:81:42:f1:ed:1d:ad:6b:ed:6e:
62:dd:f8:b2:40:25:9e:83:ef:21:8c:73:ab:c5:d6:90:b3:8b:
3a:78:43:30:a5:c5:b7:15:2e:56:a5:c0:2d:4b:83:20:4b:a8:
47:8a:79:4d:59:ca:c6:ee:c9:62:48:97:c5:cc:c0:e8:45:2f:
ee:b9:15:e3:b7:a4:c0:5b:36:fb:a6:fa:3d:2c:53:c8:57:76:
23:c5:8d:b5:8b:63:cf:c0:dc:1a:96:22:6f:ad:51:c8:e0:24:
09:bc:2b:42:5b:bc:78:ef:92:d0:dc:74:db:96:a5:34:11:c9:
e6:b4:3a:2e:43:28:06:b7:d0:b7:6a:3a:82:b3:0f:34:dd:d6:
19:ec:f3:62:54:e7:cb:cf:09:69:e8:c8:e6:03:57:6d:f6:06:
91:4d:b1:4b:2b:64:91:a4:e3:3c:08:5f:8c:c3:37:eb:cd:a6:
6b:e2:05:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG+5vZ9maqokIxIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk
NDE2ZWE4ZTEtY2JmYi00N2QxLThiODctOGU0ZWM0NDk3MDE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj51AaRiV+0iZd6yW8WcD6uriE5nP1fFCeD+C
Uox4mHkSk/8AmepoqOta4sdQ3XbwNlM2h0jh6/1wMQu8aJdKKOqPZ8/uVM7/YqnP
IQOQeC2DwMgZRhZi1v5enT3FNpAnmWsYlWlFIO1fXkHcPxfls1W8XYAKqiH4Ab/9
QTrZcr5GCLGDi0JupEWdEt2S8JDBLyvdA+29qxqGk4RxGaqPvvYSdLt7yN7Pyow/
1r44RWAHOX7rWOyZBCoHNssWlGvMBS9Qr8Oh4CLIzEIKtxL8QZcXGa1FrkBZUlJY
i6K0YUufUZ7zFV+MilIBeq0aEPToyqO058CH2/2kLcbJaYExwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDuQpQfRGStFLFIEhSs+7priaKUvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvMTRlYTkwMDAtNzEwNy0z
Mjg3LWE1MTgtOTMxNjMyNzQ5Yzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0fnIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMXOzZTxqtlfFSMNFZtmkifmnFSm6DLSqUB8f6VcSTAyWgrHitdMNG2Z
xE9pXFtIOIY8p2x3ZNKuTw3v2iCkDBl4+ZceRMm34ByzxlA4atvovYFC8e0drWvt
bmLd+LJAJZ6D7yGMc6vF1pCzizp4QzClxbcVLlalwC1LgyBLqEeKeU1ZysbuyWJI
l8XMwOhFL+65FeO3pMBbNvum+j0sU8hXdiPFjbWLY8/A3BqWIm+tUcjgJAm8K0Jb
vHjvktDcdNuWpTQRyea0Oi5DKAa30LdqOoKzDzTd1hns82JU58vPCWnoyOYDV232
BpFNsUsrZJGk4zwIX4zDN+vNpmviBWA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:33:09 2025 by rpki-client