Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c801688b-bd95-3607-ace0-67467c261802.roa
File: c801688b-bd95-3607-ace0-67467c261802.roa (raw, json)
Hash identifier: Y4SCcHX1HkScV02Xh+Pqwpa+I6ChIJK4+IS+RHYVt/s=
Subject key identifier: 8E:39:B7:19:B0:DD:FC:E6:24:80:3D:5F:79:46:2C:82:54:77:DD:0E
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285849071BE35FFFF1B75F47E39D00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c801688b-bd95-3607-ace0-67467c261802.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 7752
IP address blocks: 209.66.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:e3:5f:ff:f1:b7:5f:47:e3:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=207db63c-0aa3-4c62-b545-5a0612eb1d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7e:44:ff:e1:35:24:77:d4:ed:a7:d8:6d:74:
8e:1a:19:23:87:c6:94:25:00:7f:27:0d:01:99:0d:
0b:fa:72:7e:61:e2:18:5b:e2:7a:4a:09:39:11:ca:
39:77:de:3c:c9:e0:95:61:5e:e7:23:23:e6:60:b3:
76:fb:92:d2:96:19:0f:27:a3:d8:90:70:7c:48:7a:
1f:1c:5b:7d:99:12:e0:29:22:e3:2e:d5:5f:56:7d:
9a:4c:b5:24:cd:d6:17:7b:7c:e2:e7:43:99:e6:7e:
6f:fa:c9:bc:7c:0c:9d:32:22:c4:f2:bc:9b:19:eb:
68:3b:94:4e:05:0a:69:b6:af:ff:a3:e4:bd:c7:80:
9d:02:35:a9:90:f7:48:de:3a:37:b0:a3:3e:54:a1:
19:0b:48:8b:f4:6b:cb:96:b7:e4:f2:bb:34:76:47:
f0:46:9d:35:6b:d8:d8:63:de:c3:c8:38:a6:35:6c:
4c:c7:dc:d8:7d:a8:07:4e:72:21:1a:d0:e3:e4:72:
42:d2:fb:08:38:f7:93:5a:c4:d8:9b:fd:9e:66:ac:
8d:0e:5b:7f:4c:b0:d1:5c:22:60:c9:de:04:35:33:
12:77:c9:ba:ad:cc:ab:de:37:aa:66:74:c8:e7:5f:
5f:52:10:33:95:a7:72:9c:e4:1f:5c:07:86:0f:d2:
c1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:39:B7:19:B0:DD:FC:E6:24:80:3D:5F:79:46:2C:82:54:77:DD:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c801688b-bd95-3607-ace0-67467c261802.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
209.66.65.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:23:c2:d7:44:53:1d:1a:c0:aa:1b:55:79:ed:23:e1:f3:65:
d1:d3:e7:35:0a:cd:26:bd:7e:bf:ac:79:c2:02:2d:3e:18:ed:
ab:69:9d:af:05:a2:45:0b:1f:08:44:ca:7c:2c:99:d2:35:df:
13:57:5e:9c:87:ec:21:fe:5a:99:65:50:ed:22:53:08:d3:d8:
57:6f:53:fd:00:08:83:df:10:0d:36:af:19:d0:75:23:ca:99:
f9:57:64:74:51:7e:0d:15:fa:89:53:48:70:ff:29:64:ab:ca:
50:40:0d:0f:e9:71:5c:cd:47:4b:26:e4:04:26:bb:f1:14:a7:
c7:30:aa:22:45:0e:4b:a4:31:a3:b8:fc:4e:82:38:5a:d8:ce:
c4:44:9b:20:92:58:7e:4e:2d:55:3d:a0:b1:ea:bc:51:ae:19:
5e:43:87:ee:2e:a7:98:6b:5c:b3:1f:1c:da:46:d3:cd:3c:3d:
d0:41:ee:94:78:4d:b6:cc:b2:c6:23:18:44:7e:0d:ad:6d:d4:
95:cc:f4:bd:bb:22:f7:87:b7:24:84:c7:16:d6:40:d4:a9:3d:
40:b9:9c:a5:bb:5a:a8:0e:6d:97:e2:49:5e:04:9f:89:ba:2a:
90:b0:1a:74:38:52:a7:f1:af:4f:3d:6a:d6:41:0a:78:a6:61:
6e:25:08:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG+Nf//G3X0fjnQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk
MjA3ZGI2M2MtMGFhMy00YzYyLWI1NDUtNWEwNjEyZWIxZDg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH5E/+E1JHfU7afYbXSOGhkjh8aUJQB/Jw0B
mQ0L+nJ+YeIYW+J6Sgk5Eco5d948yeCVYV7nIyPmYLN2+5LSlhkPJ6PYkHB8SHof
HFt9mRLgKSLjLtVfVn2aTLUkzdYXe3zi50OZ5n5v+sm8fAydMiLE8rybGetoO5RO
BQpptq//o+S9x4CdAjWpkPdI3jo3sKM+VKEZC0iL9GvLlrfk8rs0dkfwRp01a9jY
Y97DyDimNWxMx9zYfagHTnIhGtDj5HJC0vsIOPeTWsTYm/2eZqyNDlt/TLDRXCJg
yd4ENTMSd8m6rcyr3jeqZnTI519fUhAzladynOQfXAeGD9LBpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI45txmw3fzmJIA9X3lGLIJUd90OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvYzgwMTY4OGItYmQ5NS0z
NjA3LWFjZTAtNjc0NjdjMjYxODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0UJBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADojwtdEUx0awKobVXntI+HzZdHT5zUKzSa9fr+secICLT4Y7atpna8F
okULHwhEynwsmdI13xNXXpyH7CH+WpllUO0iUwjT2FdvU/0ACIPfEA02rxnQdSPK
mflXZHRRfg0V+olTSHD/KWSrylBADQ/pcVzNR0sm5AQmu/EUp8cwqiJFDkukMaO4
/E6COFrYzsREmyCSWH5OLVU9oLHqvFGuGV5Dh+4up5hrXLMfHNpG0808PdBB7pR4
TbbMssYjGER+Da1t1JXM9L27IveHtySExxbWQNSpPUC5nKW7WqgObZfiSV4En4m6
KpCwGnQ4Uqfxr089atZBCnimYW4lCO0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:11:58 2025 by rpki-client