Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/d1c97a1a-4e55-364a-b407-9f6e1a9bc993.roa
File: d1c97a1a-4e55-364a-b407-9f6e1a9bc993.roa (raw, json)
Hash identifier: z1Dpd2OTIXlgp4FEVRo0rA1HR76mIN6jI/bFvd/LP1k=
Subject key identifier: AE:17:C8:E9:28:9E:54:95:E8:80:5B:8E:CC:C6:30:2D:80:DE:F5:D0
Certificate issuer: /CN=11f590b6-eb6e-4969-824b-0df247220283
Certificate serial: 010D0C9F43285848FBF128B19726A8561758D500
Authority key identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/d1c97a1a-4e55-364a-b407-9f6e1a9bc993.roa
Signing time: Mon 24 Feb 2025 02:00:38 +0000
ROA not before: Mon 24 Feb 2025 02:00:38 +0000
ROA not after: Sun 25 May 2025 01:00:38 +0000
asID: 395301
IP address blocks: 209.251.28.0/24 maxlen: 24
209.251.29.0/24 maxlen: 24
209.251.30.0/24 maxlen: 24
209.251.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fb:f1:28:b1:97:26:a8:56:17:58:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11f590b6-eb6e-4969-824b-0df247220283
Validity
Not Before: Feb 24 02:00:38 2025 GMT
Not After : May 25 01:00:38 2025 GMT
Subject: CN=d1ee8ee0-bf9f-4013-9582-1a7d9d06dca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0f:b0:12:c3:29:a5:fc:31:99:cb:31:87:f7:
f8:6c:15:aa:5d:c7:1a:6f:0b:88:f0:c6:1b:e3:8c:
79:52:5c:fa:ce:44:59:a9:38:05:cd:d1:ec:0a:7f:
63:56:1d:ed:67:6d:f3:95:38:e9:73:05:33:76:98:
20:da:e8:c7:58:54:28:f7:1d:c6:53:09:9e:ba:52:
94:a4:23:af:1c:8b:e8:f4:2b:68:97:27:78:5f:58:
0e:60:28:0b:97:3d:6d:32:0e:94:33:74:54:85:cd:
63:c3:8f:f5:26:ab:ec:a8:3c:c0:18:44:10:55:c0:
3b:b3:df:8a:85:35:34:6b:fe:0e:da:13:c7:cc:10:
13:b7:aa:bf:af:e8:42:48:10:e8:c7:82:ed:70:e9:
e4:b0:5a:14:fe:ca:d5:e1:60:26:ab:dc:f4:77:f5:
93:6e:db:17:14:a6:02:87:0e:87:c9:2a:2c:8a:5a:
f6:a7:20:1b:a5:f4:64:07:3d:64:1d:65:f5:2d:2c:
6d:a6:b8:87:45:95:56:dc:18:b6:66:82:38:ce:f4:
6b:c0:74:c2:e1:e3:9b:b2:cf:8b:f5:17:2b:29:88:
e8:57:31:9f:01:68:a2:2e:28:5d:15:e3:cc:45:e8:
ad:3a:9d:0d:16:a6:c3:c9:33:9f:cb:ec:10:65:02:
05:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:17:C8:E9:28:9E:54:95:E8:80:5B:8E:CC:C6:30:2D:80:DE:F5:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/d1c97a1a-4e55-364a-b407-9f6e1a9bc993.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl
X509v3 Authority Key Identifier:
keyid:82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
sbgp-ipAddrBlock: critical
IPv4:
209.251.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:fe:8e:86:0a:dc:12:3e:85:fd:84:94:ac:1e:e3:bc:af:31:
5e:26:5e:03:d7:22:04:da:57:3f:46:94:62:e3:f5:14:ac:00:
88:d0:fc:45:3c:17:f1:bb:eb:f7:a5:96:3b:b2:93:31:a1:7e:
ef:54:f6:21:93:6e:f2:43:99:64:83:a2:f3:7a:92:f8:52:40:
4d:17:91:38:9c:52:e4:b8:2e:48:5a:c8:02:d9:7b:64:1f:0d:
9d:9e:4e:07:94:eb:34:08:93:50:cc:fa:fb:e3:f8:02:8d:fb:
83:c4:c8:ff:58:30:ec:94:30:10:48:10:bb:02:aa:23:fc:28:
21:c1:27:17:62:f6:cf:75:a4:cb:72:e6:d7:28:62:96:73:57:
7e:80:01:da:f9:1d:b8:a4:5c:3b:ba:57:e8:bd:ac:c6:4d:6f:
42:85:64:1f:51:21:61:22:9a:0f:1a:1a:08:ad:59:91:14:7a:
d2:6a:ca:e2:eb:af:f3:29:31:fb:76:09:6c:ad:5b:f1:3b:3b:
b7:24:46:3f:05:a2:e7:2c:1d:92:04:9d:37:4f:12:aa:a5:26:
ea:ac:99:e4:6f:9f:d2:49:f1:8e:0d:ac:06:c5:9e:08:ee:4b:
6f:2c:d5:ff:1e:c6:33:4b:8e:c5:e2:0a:f6:bc:2d:29:2a:6e:
27:ac:02:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj78SixlyaoVhdY1QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFmNTkwYjYtZWI2ZS00OTY5LTgyNGItMGRmMjQ3MjIw
MjgzMB4XDTI1MDIyNDAyMDAzOFoXDTI1MDUyNTAxMDAzOFowLzEtMCsGA1UEAxMk
ZDFlZThlZTAtYmY5Zi00MDEzLTk1ODItMWE3ZDlkMDZkY2E1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzw+wEsMppfwxmcsxh/f4bBWqXccabwuI8MYb
44x5Ulz6zkRZqTgFzdHsCn9jVh3tZ23zlTjpcwUzdpgg2ujHWFQo9x3GUwmeulKU
pCOvHIvo9Ctolyd4X1gOYCgLlz1tMg6UM3RUhc1jw4/1JqvsqDzAGEQQVcA7s9+K
hTU0a/4O2hPHzBATt6q/r+hCSBDox4LtcOnksFoU/srV4WAmq9z0d/WTbtsXFKYC
hw6HySosilr2pyAbpfRkBz1kHWX1LSxtpriHRZVW3Bi2ZoI4zvRrwHTC4eObss+L
9RcrKYjoVzGfAWiiLihdFePMReitOp0NFqbDyTOfy+wQZQIFhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK4XyOkonlSV6IBbjszGMC2A3vXQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1
OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYyNDcyMjAyODMvZDFjOTdhMWEtNGU1NS0z
NjRhLWI0MDctOWY2ZTFhOWJjOTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTFmNTkwYjYtZWI2ZS00OTY5LTgy
NGItMGRmMjQ3MjIwMjgzLzExZjU5MGI2LWViNmUtNDk2OS04MjRiLTBkZjI0NzIy
MDI4My5jcmwwHwYDVR0jBBgwFoAUguMk2L7Ghd1PatUmk2y+CkgxGFMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYy
NDcyMjAyODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0fscMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAET+joYK3BI+hf2ElKwe47yvMV4mXgPXIgTaVz9GlGLj9RSsAIjQ/EU8
F/G76/elljuykzGhfu9U9iGTbvJDmWSDovN6kvhSQE0XkTicUuS4LkhayALZe2Qf
DZ2eTgeU6zQIk1DM+vvj+AKN+4PEyP9YMOyUMBBIELsCqiP8KCHBJxdi9s91pMty
5tcoYpZzV36AAdr5HbikXDu6V+i9rMZNb0KFZB9RIWEimg8aGgitWZEUetJqyuLr
r/MpMft2CWytW/E7O7ckRj8FoucsHZIEnTdPEqqlJuqsmeRvn9JJ8Y4NrAbFngju
S28s1f8exjNLjsXiCva8LSkqbiesAlk=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:04 2025 by rpki-client