Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/be2b1880-ce9d-3b16-9a9a-b5b713ef2a3a.roa
File: be2b1880-ce9d-3b16-9a9a-b5b713ef2a3a.roa (raw, json)
Hash identifier: T3NtTILpBZyNHO5U+loGKafXtBF59IqpMyHh0CFbivM=
Subject key identifier: 54:BB:88:12:AF:11:D0:16:8B:12:F2:DA:19:96:72:06:0E:FA:22:94
Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial: 010D0C9F432858489340AE9400C0F2D74F0EB140
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/be2b1880-ce9d-3b16-9a9a-b5b713ef2a3a.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 26565
IP address blocks: 209.237.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:ae:94:00:c0:f2:d7:4f:0e:b1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=090b7b0b-74f8-43e3-a8ea-c3de6825fa6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c6:69:cc:c2:78:72:10:5c:f5:c9:aa:11:3b:
16:b9:46:c9:27:e2:2f:55:e4:85:2d:d3:98:61:5b:
19:6e:81:60:68:7a:f8:db:0d:bb:11:52:57:cf:f0:
00:55:90:49:34:32:53:4e:fb:28:5d:6d:f7:ca:f2:
f1:c4:01:5f:3f:d3:4d:47:db:12:61:4f:77:9c:14:
2e:27:23:32:bc:2f:aa:22:e2:79:7a:93:ed:85:5a:
73:32:d8:5a:38:41:d0:e7:e1:ae:52:d5:b0:6a:38:
60:c0:8a:92:99:17:d6:7e:3f:8a:ce:98:65:51:38:
b7:de:5a:de:43:56:70:19:a4:cb:bb:08:f6:af:74:
2d:f2:0f:97:c7:4a:37:b3:17:6e:58:e9:99:7d:96:
92:de:c2:cd:b8:12:6f:fd:54:a7:84:0a:81:95:d2:
c7:3c:cc:4c:5f:6a:ab:dd:52:41:11:43:dc:08:98:
c6:8f:23:14:46:c5:d0:11:e9:e4:63:69:fe:3e:69:
74:cf:df:5c:7d:19:75:45:a9:60:d5:a2:4f:98:11:
27:3c:5b:88:85:f3:92:f0:13:d6:ca:ce:59:a9:7b:
01:94:80:31:bd:6c:55:06:bb:0e:9f:db:a4:49:85:
43:93:39:9e:c3:eb:cf:6c:f4:98:76:d6:ee:a6:9e:
3d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BB:88:12:AF:11:D0:16:8B:12:F2:DA:19:96:72:06:0E:FA:22:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/be2b1880-ce9d-3b16-9a9a-b5b713ef2a3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
X509v3 Authority Key Identifier:
keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:05:4b:4a:76:90:c0:b2:cd:89:69:a8:bf:e9:59:52:28:be:
6d:29:b9:d5:c4:68:b9:df:ac:25:0b:5f:7a:29:3c:1f:7d:27:
c2:74:c0:cf:b9:37:00:87:a7:36:ff:6e:85:04:20:93:55:a9:
49:e0:1e:95:0c:16:47:83:f5:79:6e:13:af:a6:bb:fb:5d:f7:
e0:1c:4b:c4:37:29:04:0e:af:61:1a:26:35:f2:b1:98:5c:2d:
fe:6f:b8:a7:65:44:a5:d9:a6:89:02:50:74:cc:fb:e8:7c:2c:
8b:64:31:d0:67:68:51:6a:a6:d2:ee:f9:c5:1e:cb:1c:84:ff:
7f:dd:c7:20:f5:e6:ec:a2:4f:a8:f7:60:28:f0:51:9b:f9:74:
67:7a:f9:3f:2b:fe:a1:9c:59:61:ec:96:c3:ee:29:57:60:e3:
06:54:17:fc:3b:0a:58:75:6a:8d:96:89:31:d3:77:e8:55:76:
7a:72:66:ad:d9:f3:a6:e0:cc:e4:47:3a:9b:66:1e:cb:6e:18:
10:fc:e4:dd:98:6f:7f:d6:e6:95:5e:c4:2d:79:8b:bf:68:a6:
c9:ce:7a:76:33:7b:f4:b8:41:3f:cb:5f:32:a1:d2:a5:2f:d6:
84:42:5e:13:23:55:e4:bf:6d:93:3a:4c:61:27:93:f3:24:a3:
fc:15:68:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQK6UAMDy108OsUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk
MDkwYjdiMGItNzRmOC00M2UzLWE4ZWEtYzNkZTY4MjVmYTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMZpzMJ4chBc9cmqETsWuUbJJ+IvVeSFLdOY
YVsZboFgaHr42w27EVJXz/AAVZBJNDJTTvsoXW33yvLxxAFfP9NNR9sSYU93nBQu
JyMyvC+qIuJ5epPthVpzMthaOEHQ5+GuUtWwajhgwIqSmRfWfj+KzphlUTi33lre
Q1ZwGaTLuwj2r3Qt8g+Xx0o3sxduWOmZfZaS3sLNuBJv/VSnhAqBldLHPMxMX2qr
3VJBEUPcCJjGjyMURsXQEenkY2n+Pml0z99cfRl1Ralg1aJPmBEnPFuIhfOS8BPW
ys5ZqXsBlIAxvWxVBrsOn9ukSYVDkzmew+vPbPSYdtbupp49aQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFS7iBKvEdAWixLy2hmWcgYO+iKUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYmUyYjE4ODAtY2U5ZC0z
YjE2LTlhOWEtYjViNzEzZWYyYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJAFS0p2kMCyzYlpqL/pWVIovm0pudXEaLnfrCULX3opPB99J8J0wM+5
NwCHpzb/boUEIJNVqUngHpUMFkeD9XluE6+mu/td9+AcS8Q3KQQOr2EaJjXysZhc
Lf5vuKdlRKXZpokCUHTM++h8LItkMdBnaFFqptLu+cUeyxyE/3/dxyD15uyiT6j3
YCjwUZv5dGd6+T8r/qGcWWHslsPuKVdg4wZUF/w7Clh1ao2WiTHTd+hVdnpyZq3Z
86bgzORHOptmHstuGBD85N2Yb3/W5pVexC15i79opsnOenYze/S4QT/LXzKh0qUv
1oRCXhMjVeS/bZM6TGEnk/Mko/wVaEI=
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:12:00 2025 by rpki-client