Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3944009e-b5f2-37b6-b65f-aee0b6a773cf.roa
File: 3944009e-b5f2-37b6-b65f-aee0b6a773cf.roa (raw, json)
Hash identifier: 8DsWv7Ii/DJooNLpv48QgfmLlosbn7utrfBxOV+Ec9I=
Subject key identifier: 24:A7:F5:26:75:6B:FE:0F:B9:66:21:D6:F9:4C:39:8A:E6:ED:72:A3
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848B626145B30971EB45384FB40
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3944009e-b5f2-37b6-b65f-aee0b6a773cf.roa
Signing time: Thu 30 Jan 2025 02:00:40 +0000
ROA not before: Thu 30 Jan 2025 02:00:40 +0000
ROA not after: Wed 30 Apr 2025 01:00:40 +0000
asID: 852
IP address blocks: 209.53.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b6:26:14:5b:30:97:1e:b4:53:84:fb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 30 02:00:40 2025 GMT
Not After : Apr 30 01:00:40 2025 GMT
Subject: CN=1c929f3e-3862-4789-a667-341cd136d3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6a:c5:36:1e:6b:da:70:7f:27:a1:f3:dd:ae:
cb:b0:e1:a1:c3:79:86:8b:12:90:dd:30:45:fd:bf:
63:04:22:cd:a5:34:1e:56:5c:c4:a8:9c:e8:90:de:
f9:46:8e:a7:4c:be:62:88:37:c6:a6:04:1f:c4:a5:
e3:22:7e:46:6b:20:b7:91:86:a9:25:d9:b8:68:16:
89:c5:46:b5:02:8f:61:7e:56:ec:cf:35:9f:9a:36:
67:4c:33:84:ad:d0:19:ea:13:b3:d6:6d:59:f2:57:
f7:87:ea:c9:63:7b:e6:c9:8a:31:19:95:f2:84:3c:
44:f2:eb:f3:6c:2c:53:15:40:fd:aa:e0:a8:2f:ca:
3d:1b:25:b9:8d:0b:53:52:92:5b:c3:62:3c:86:20:
f4:fd:58:27:e9:c9:a1:6d:fc:a2:e7:09:9d:15:29:
59:fa:7e:09:7e:99:39:3a:fe:89:b2:99:98:1b:23:
22:e7:71:8e:63:e1:99:30:9b:9b:66:1f:8c:9d:01:
3a:9c:60:5c:72:37:87:f2:9d:16:40:56:c7:60:f9:
31:c2:6b:c1:66:17:02:d7:8d:77:0e:82:b6:39:1c:
1d:37:eb:3f:cb:99:e3:a4:0b:fa:24:fd:59:8a:a2:
ff:ef:10:79:ee:15:a8:c9:f1:b1:be:d2:58:18:48:
73:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A7:F5:26:75:6B:FE:0F:B9:66:21:D6:F9:4C:39:8A:E6:ED:72:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3944009e-b5f2-37b6-b65f-aee0b6a773cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.53.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:b3:fe:cc:5e:ec:8e:90:70:7f:80:58:a5:9d:c4:ed:74:6f:
6b:6f:4a:aa:bc:be:62:9d:48:fa:af:77:0f:49:65:c7:ee:a5:
ba:ba:b3:5e:d3:33:44:78:00:6b:28:e4:2e:f7:61:79:9f:07:
23:2d:9f:e1:ad:b9:39:46:ee:fa:c1:31:16:7f:96:e7:5f:ee:
1f:45:02:54:46:ec:60:c5:4b:2e:c0:e1:24:1f:dd:78:fb:ae:
aa:58:dd:76:d6:be:c0:c9:05:72:97:a7:4b:98:43:67:d3:3d:
ae:3c:5e:fd:4f:dc:7a:cc:db:57:e0:81:e3:dc:a5:ab:ec:f6:
59:d3:80:f2:f6:c0:c0:5d:9d:6f:58:ed:d8:9f:10:48:fa:5a:
0a:4e:5d:0f:f0:18:28:b9:da:70:ef:db:ad:6f:a9:5c:bb:bf:
11:fc:db:9e:14:53:30:9f:6a:4a:1e:62:f9:49:47:2e:71:c2:
66:92:03:ed:16:66:d3:bc:ec:54:9c:4f:51:8e:3c:00:be:d5:
d8:ca:95:55:52:e4:3e:3e:b0:60:92:33:27:5e:8d:d0:7c:25:
d0:51:57:69:9d:52:d4:41:dc:e6:2a:57:64:60:3b:84:0f:05:
bc:30:08:93:85:6a:59:83:e7:19:7f:67:a0:62:28:e2:71:59:
07:6d:94:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi2JhRbMJcetFOE+0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDEzMDAyMDA0MFoXDTI1MDQzMDAxMDA0MFowLzEtMCsGA1UEAxMk
MWM5MjlmM2UtMzg2Mi00Nzg5LWE2NjctMzQxY2QxMzZkM2U2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2rFNh5r2nB/J6Hz3a7LsOGhw3mGixKQ3TBF
/b9jBCLNpTQeVlzEqJzokN75Ro6nTL5iiDfGpgQfxKXjIn5GayC3kYapJdm4aBaJ
xUa1Ao9hflbszzWfmjZnTDOErdAZ6hOz1m1Z8lf3h+rJY3vmyYoxGZXyhDxE8uvz
bCxTFUD9quCoL8o9GyW5jQtTUpJbw2I8hiD0/Vgn6cmhbfyi5wmdFSlZ+n4Jfpk5
Ov6JspmYGyMi53GOY+GZMJubZh+MnQE6nGBccjeH8p0WQFbHYPkxwmvBZhcC1413
DoK2ORwdN+s/y5njpAv6JP1ZiqL/7xB57hWoyfGxvtJYGEhzvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCSn9SZ1a/4PuWYh1vlMOYrm7XKjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzk0NDAwOWUtYjVmMi0z
N2I2LWI2NWYtYWVlMGI2YTc3M2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TX5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABSz/sxe7I6QcH+AWKWdxO10b2tvSqq8vmKdSPqvdw9JZcfupbq6s17T
M0R4AGso5C73YXmfByMtn+GtuTlG7vrBMRZ/ludf7h9FAlRG7GDFSy7A4SQf3Xj7
rqpY3XbWvsDJBXKXp0uYQ2fTPa48Xv1P3HrM21fggePcpavs9lnTgPL2wMBdnW9Y
7difEEj6WgpOXQ/wGCi52nDv261vqVy7vxH8254UUzCfakoeYvlJRy5xwmaSA+0W
ZtO87FScT1GOPAC+1djKlVVS5D4+sGCSMydejdB8JdBRV2mdUtRB3OYqV2RgO4QP
BbwwCJOFalmD5xl/Z6BiKOJxWQdtlKQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:37 2025 by rpki-client