Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9f9f5546-442a-3628-8d65-ad3f630e7cb2.roa
File: 9f9f5546-442a-3628-8d65-ad3f630e7cb2.roa (raw, json)
Hash identifier: wDCPfHMwFkqbrd6A1i8IP1Ln2mAkw9m8QRT42ysTOkU=
Subject key identifier: 72:2D:7F:C0:08:E6:9B:D5:73:DF:2C:C9:F2:7A:BB:CC:23:FB:FE:6C
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285837E45CBE0CD11DF3F2312D5C80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9f9f5546-442a-3628-8d65-ad3f630e7cb2.roa
Signing time: Mon 21 Sep 2020 04:00:00 +0000
ROA not before: Mon 21 Sep 2020 04:00:00 +0000
ROA not after: Sun 12 Feb 2023 05:00:00 +0000
asID: 3359
IP address blocks: 209.115.220.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:e4:5c:be:0c:d1:1d:f3:f2:31:2d:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 21 04:00:00 2020 GMT
Not After : Feb 12 05:00:00 2023 GMT
Subject: CN=9d29e001-243e-46b2-a348-a45e9eb58181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:02:72:3d:dd:ea:e4:11:f6:d5:cb:be:b5:c3:
24:8d:df:2e:7c:a1:d6:50:5d:61:22:2c:9a:ed:db:
2f:8e:dd:2e:ea:39:bf:14:0f:11:86:e6:e6:d8:82:
40:d0:72:34:a7:8b:af:14:5a:4b:da:e3:43:ab:b7:
81:26:85:c5:e0:7a:75:51:6d:ce:21:88:c3:68:7d:
dd:42:28:d1:1e:d5:a6:87:c1:13:05:c6:39:e5:19:
ba:71:14:1b:20:b7:61:10:96:d0:e2:4c:1e:f0:21:
08:50:f1:d1:e5:60:75:a0:fd:2a:7c:62:ce:f2:5f:
e8:23:01:c4:10:06:13:0f:1d:af:4d:b4:21:52:a3:
c2:da:63:b5:36:0b:c2:cc:8e:56:bb:d9:c3:55:a4:
57:c6:ce:dd:0a:67:49:00:a3:2a:c4:32:40:a5:51:
88:41:55:06:9c:0b:02:52:8d:22:f4:dd:d2:65:59:
bd:d0:a5:3b:9e:62:40:e4:3a:bd:59:6e:d9:d4:a8:
31:9d:61:30:dd:14:88:e8:c3:fc:87:24:3f:7b:d8:
07:da:49:a6:57:9c:0f:3d:0e:72:25:94:42:84:bc:
8a:30:06:50:2b:ba:df:3e:42:a8:a5:77:2f:4d:00:
38:dc:41:66:57:01:fd:a1:64:d2:88:b9:fe:7d:77:
8c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2D:7F:C0:08:E6:9B:D5:73:DF:2C:C9:F2:7A:BB:CC:23:FB:FE:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9f9f5546-442a-3628-8d65-ad3f630e7cb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
209.115.220.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
e1:73:2a:2f:cb:0a:40:58:55:9d:78:e3:5c:1f:1a:c7:ce:d7:
d4:87:d4:2e:f0:f0:30:80:3c:f4:0f:c5:78:c3:7d:b3:87:9a:
44:38:ca:1d:00:fd:b8:a0:00:d5:b3:73:32:1d:a7:26:fb:46:
36:00:2f:9a:8a:ce:51:c5:2a:58:56:ad:2b:7e:f3:9f:67:3a:
08:bf:f5:bc:13:1c:87:af:49:01:1c:ef:dc:e3:ef:78:ea:e7:
50:2c:2c:66:41:72:5b:62:f3:d3:58:ec:a8:e9:c5:4a:78:9b:
8f:2c:6a:fb:1e:71:c8:24:f5:57:e0:3c:36:72:03:c1:3a:61:
95:fc:25:cd:c5:7f:fa:52:2c:86:37:62:6b:5f:df:1a:e2:3b:
4c:a4:44:d8:71:e5:a7:5f:7c:51:11:8d:ed:05:4a:9b:5d:75:
68:85:6d:db:c8:00:9d:5c:e9:db:72:01:55:f5:03:05:1e:a4:
56:45:25:75:ff:81:39:d9:01:98:30:9c:31:e4:4e:59:d8:8c:
d9:7e:ec:2b:12:2e:e6:52:e7:2b:d9:35:c7:3f:1b:f6:cc:7d:
f3:28:5f:f6:c5:46:65:3e:b3:aa:af:79:09:92:25:bb:22:c3:
f3:a2:a4:60:c9:41:33:45:33:45:6d:13:4c:5e:14:11:a6:73:
36:91:0e:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDfkXL4M0R3z8jEtXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTIwMDkyMTA0MDAwMFoXDTIzMDIxMjA1MDAwMFowLzEtMCsGA1UEAxMk
OWQyOWUwMDEtMjQzZS00NmIyLWEzNDgtYTQ1ZTllYjU4MTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQJyPd3q5BH21cu+tcMkjd8ufKHWUF1hIiya
7dsvjt0u6jm/FA8Rhubm2IJA0HI0p4uvFFpL2uNDq7eBJoXF4Hp1UW3OIYjDaH3d
QijRHtWmh8ETBcY55Rm6cRQbILdhEJbQ4kwe8CEIUPHR5WB1oP0qfGLO8l/oIwHE
EAYTDx2vTbQhUqPC2mO1NgvCzI5Wu9nDVaRXxs7dCmdJAKMqxDJApVGIQVUGnAsC
Uo0i9N3SZVm90KU7nmJA5Dq9WW7Z1KgxnWEw3RSI6MP8hyQ/e9gH2kmmV5wPPQ5y
JZRChLyKMAZQK7rfPkKopXcvTQA43EFmVwH9oWTSiLn+fXeMzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHItf8AI5pvVc98syfJ6u8wj+/5sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOWY5ZjU1NDYtNDQyYS0z
NjI4LThkNjUtYWQzZjYzMGU3Y2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0XPcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAOFzKi/LCkBYVZ1441wfGsfO19SH1C7w8DCAPPQPxXjDfbOHmkQ4yh0A
/bigANWzczIdpyb7RjYAL5qKzlHFKlhWrSt+859nOgi/9bwTHIevSQEc79zj73jq
51AsLGZBclti89NY7KjpxUp4m48savseccgk9VfgPDZyA8E6YZX8Jc3Ff/pSLIY3
Ymtf3xriO0ykRNhx5adffFERje0FSptddWiFbdvIAJ1c6dtyAVX1AwUepFZFJXX/
gTnZAZgwnDHkTlnYjNl+7CsSLuZS5yvZNcc/G/bMffMoX/bFRmU+s6qveQmSJbsi
w/OipGDJQTNFM0VtE0xeFBGmczaRDvg=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:19:58 2025 by rpki-client