Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/b6c4ef54-e931-3845-ac00-282207e1403b.roa
File: b6c4ef54-e931-3845-ac00-282207e1403b.roa (raw, json)
Hash identifier: sWIexQ8Fenfs7DavQ+b5TSAoAfXmNbvdRUcQPxz8s0k=
Subject key identifier: FA:0C:2A:C4:DE:88:CD:15:6F:55:A1:A6:31:92:75:CB:FC:F4:E1:00
Certificate issuer: /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial: 010D0C9F432858495736D1CAC601C591078B4880
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/b6c4ef54-e931-3845-ac00-282207e1403b.roa
Signing time: Fri 28 Mar 2025 18:39:36 +0000
ROA not before: Fri 28 Mar 2025 18:39:36 +0000
ROA not after: Thu 26 Jun 2025 18:39:36 +0000
asID: 19901
IP address blocks: 9.144.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:36:d1:ca:c6:01:c5:91:07:8b:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
Validity
Not Before: Mar 28 18:39:36 2025 GMT
Not After : Jun 26 18:39:36 2025 GMT
Subject: CN=39221ccc-2555-4245-8963-380b603f2269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:88:b3:54:05:56:2e:ff:9c:b9:a4:fa:28:dc:
c0:b7:e9:d8:42:ee:5c:3e:e9:bc:ec:9b:e1:5a:98:
03:ca:32:24:f0:cc:63:e4:19:b5:f2:68:83:d0:ad:
36:05:b7:03:26:8f:b1:e2:43:e3:7a:0d:81:8e:fa:
a0:69:51:79:72:d3:56:a0:a0:c5:5e:2d:d7:52:10:
3a:ba:4f:77:59:fd:7a:7c:05:77:0b:ed:43:e5:00:
d1:88:ef:36:23:20:cb:2e:a7:7f:03:26:1b:ab:2f:
dc:dc:ea:8c:14:3a:bb:e7:73:51:6b:be:58:96:de:
3a:d9:fa:35:2b:43:95:cc:03:62:ee:27:3f:c9:0a:
92:34:8d:51:67:93:2d:ce:2a:b8:63:32:fa:d4:be:
27:79:2e:bf:6b:2d:86:14:23:75:55:68:0d:bc:bd:
ec:61:70:de:a2:67:c3:9a:b5:1e:62:5e:25:6f:8e:
6a:11:28:5f:90:87:53:2f:ee:e6:23:59:cf:c3:44:
98:89:b7:54:d4:77:02:ab:0f:99:cb:3e:98:d4:4d:
11:6e:76:45:6a:70:47:32:c6:0b:72:8a:d5:26:10:
a3:1e:2c:fe:ca:0a:c6:f6:5e:3a:d4:93:db:59:4f:
80:76:51:ee:f8:af:6d:d4:f2:50:e7:09:63:a8:eb:
7c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0C:2A:C4:DE:88:CD:15:6F:55:A1:A6:31:92:75:CB:FC:F4:E1:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/b6c4ef54-e931-3845-ac00-282207e1403b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
X509v3 Authority Key Identifier:
keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
sbgp-ipAddrBlock: critical
IPv4:
9.144.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:bc:e0:9b:02:47:59:4f:bd:3e:b3:9c:19:e9:f6:ed:49:1f:
23:0c:89:dd:78:7b:0f:25:e0:65:ae:1c:e4:4c:39:fc:cd:61:
54:10:73:75:a4:0c:62:f3:be:b1:b6:4f:d5:a4:61:23:72:c1:
af:bc:17:ba:9c:46:89:79:74:28:30:6c:2e:75:6b:3a:83:2f:
41:c2:c7:44:2b:21:8c:96:1c:ae:4e:13:17:fd:da:2f:d6:9b:
12:d7:e6:0a:ea:44:78:7e:55:73:1d:3b:df:b3:76:4b:be:50:
00:9f:35:d8:16:b4:6b:78:a2:4b:72:81:5a:17:b3:ac:ff:14:
9f:b0:99:73:d8:e8:a5:50:7c:95:a4:cf:f6:d8:15:22:43:d1:
de:ed:8e:de:94:a0:a8:7f:73:8c:e8:8c:8a:1f:95:c8:c3:6d:
6f:c8:ba:e5:71:b0:a4:35:55:a3:eb:f6:4e:f2:4e:71:35:6a:
9d:b0:95:75:0c:be:dc:3f:75:5d:de:09:18:e7:8d:4f:cc:81:
32:f0:4b:67:93:08:2f:05:53:bf:bf:dc:84:7c:d2:9d:de:21:
43:02:d2:2e:f6:06:e7:1b:7b:04:ad:b0:0b:8a:59:a7:67:9f:
5a:c8:4b:99:0e:89:62:4d:f7:66:91:50:5a:cf:02:78:79:14:
9f:ea:08:b3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWElXNtHKxgHFkQeLSIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJk
YmNlMB4XDTI1MDMyODE4MzkzNloXDTI1MDYyNjE4MzkzNlowLzEtMCsGA1UEAxMk
MzkyMjFjY2MtMjU1NS00MjQ1LTg5NjMtMzgwYjYwM2YyMjY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4izVAVWLv+cuaT6KNzAt+nYQu5cPum87Jvh
WpgDyjIk8Mxj5Bm18miD0K02BbcDJo+x4kPjeg2BjvqgaVF5ctNWoKDFXi3XUhA6
uk93Wf16fAV3C+1D5QDRiO82IyDLLqd/AyYbqy/c3OqMFDq753NRa75Ylt462fo1
K0OVzANi7ic/yQqSNI1RZ5Mtziq4YzL61L4neS6/ay2GFCN1VWgNvL3sYXDeomfD
mrUeYl4lb45qEShfkIdTL+7mI1nPw0SYibdU1HcCqw+Zyz6Y1E0RbnZFanBHMsYL
corVJhCjHiz+ygrG9l461JPbWU+AdlHu+K9t1PJQ5wljqOt8HwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPoMKsTeiM0Vb1WhpjGSdcv89OEAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0
MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvYjZjNGVmNTQtZTkzMS0z
ODQ1LWFjMDAtMjgyMjA3ZTE0MDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDk0NDBhOTMtOTg2Zi00MWRhLTg3
MjMtN2I2N2Y4MWJkYmNlLzA5NDQwYTkzLTk4NmYtNDFkYS04NzIzLTdiNjdmODFi
ZGJjZS5jcmwwHwYDVR0jBBgwFoAUSEuB66mWlz+y3uneit7pXEIwQ4MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3
ZjgxYmRiY2UuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMACZAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAXbzgmwJHWU+9PrOcGen27UkfIwyJ3Xh7DyXgZa4c5Ew5/M1hVBBzdaQM
YvO+sbZP1aRhI3LBr7wXupxGiXl0KDBsLnVrOoMvQcLHRCshjJYcrk4TF/3aL9ab
EtfmCupEeH5Vcx0737N2S75QAJ812Ba0a3iiS3KBWhezrP8Un7CZc9jopVB8laTP
9tgVIkPR3u2O3pSgqH9zjOiMih+VyMNtb8i65XGwpDVVo+v2TvJOcTVqnbCVdQy+
3D91Xd4JGOeNT8yBMvBLZ5MILwVTv7/chHzSnd4hQwLSLvYG5xt7BK2wC4pZp2ef
WshLmQ6JYk33ZpFQWs8CeHkUn+oIsw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:54:16 2025 by rpki-client