Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0475b828-a277-3eeb-8b05-22e0f1e69824.roa
File: 0475b828-a277-3eeb-8b05-22e0f1e69824.roa (raw, json)
Hash identifier: bHBcnEBgkrovI1lWHnPwk/nncqSNn9z0srC0F7PmiLE=
Subject key identifier: 20:92:A5:C5:7C:7C:1C:DC:F9:1A:03:93:DF:FA:78:2A:F4:9A:A4:E0
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F43285848BE862C50AA5E3B6A909B9100
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0475b828-a277-3eeb-8b05-22e0f1e69824.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 8100
IP address blocks: 209.20.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:2c:50:aa:5e:3b:6a:90:9b:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=816fdfe0-cbab-4f91-8ed9-9ce2ddc7539d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e9:84:c3:a3:d6:38:c4:11:ea:89:65:ff:ee:
3d:ef:07:6c:5d:7f:00:a9:7d:e6:3d:ac:2a:ac:5e:
34:0b:90:cc:4b:47:2b:1b:62:53:7b:6c:cb:a2:ee:
cd:f3:76:25:37:07:5a:ad:a7:9c:ae:70:3a:b7:c8:
56:61:6e:90:fb:f9:cd:cb:8f:d7:1d:4e:f3:21:ff:
73:a3:5a:e6:9a:34:bf:dd:18:2e:3f:5b:5a:dd:37:
51:3b:eb:bf:21:f5:e5:25:45:00:9d:96:f5:bb:3e:
99:ed:b9:50:49:5b:0c:1d:fa:72:ff:f0:84:7f:69:
e0:44:b4:4c:7b:04:9a:6b:98:27:cb:1f:5e:81:dc:
e2:ea:99:c2:b8:10:cb:a5:bc:5f:7c:eb:3b:08:49:
1b:98:ce:51:60:37:cd:cb:9c:b2:df:45:a5:a0:a4:
ce:a9:b4:18:68:b1:9b:1b:88:62:2a:bc:59:9c:78:
b2:3b:d3:d0:0b:1c:c0:4b:99:77:73:91:19:41:32:
24:fc:3b:4c:e2:6c:06:a2:4b:73:91:17:3f:61:d9:
11:76:80:94:7a:3f:10:ec:e1:d7:ab:c2:51:51:1a:
4e:90:36:2c:de:23:b3:00:28:2c:40:3b:df:15:09:
1e:03:1e:ab:cf:23:5f:99:e9:92:8e:ee:2a:1a:36:
3b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:92:A5:C5:7C:7C:1C:DC:F9:1A:03:93:DF:FA:78:2A:F4:9A:A4:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0475b828-a277-3eeb-8b05-22e0f1e69824.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
209.20.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:36:95:86:14:6f:60:f6:00:08:ae:10:3d:b7:e8:73:63:43:
97:10:9b:57:74:d2:95:79:93:e8:1d:5d:af:ba:15:0d:69:7b:
50:3c:55:ef:99:8d:cd:23:e1:ca:f6:9a:9a:b7:7f:2d:04:9c:
b5:a4:a3:83:fd:20:c4:c9:39:5d:66:84:bc:37:cc:6c:da:ac:
1c:e4:be:cf:5d:57:c7:a6:96:13:b4:19:15:4e:75:4f:dc:a7:
4c:a2:5d:4f:fc:db:c8:82:9d:90:b0:b9:c3:1d:cb:4b:fa:d3:
98:82:8a:8c:7d:3a:96:46:b7:77:15:ad:08:77:e9:dd:4a:c9:
f4:5d:96:73:3f:b5:da:f1:a5:32:27:b2:c3:6c:51:50:1e:1f:
3a:55:83:a5:11:b2:62:49:8e:5e:e9:c2:63:ed:04:30:07:fc:
2f:17:4b:9e:46:59:ff:4e:5f:e9:0e:1f:19:a6:03:1d:3b:dd:
8c:93:02:71:ac:50:57:a0:51:20:d4:85:2b:29:65:8c:05:25:
ca:a4:a5:fe:bb:80:73:7c:1e:0f:ee:ea:db:47:8a:b0:4b:98:
17:79:59:58:a5:74:90:62:87:c2:22:69:15:c8:57:ef:96:00:
f9:97:95:38:36:d1:83:50:4e:c8:62:14:5a:ab:a4:9c:1d:fd:
9c:16:26:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hixQql47apCbkQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz
NjFiMB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk
ODE2ZmRmZTAtY2JhYi00ZjkxLThlZDktOWNlMmRkYzc1MzlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtumEw6PWOMQR6oll/+497wdsXX8AqX3mPawq
rF40C5DMS0crG2JTe2zLou7N83YlNwdaraecrnA6t8hWYW6Q+/nNy4/XHU7zIf9z
o1rmmjS/3RguP1ta3TdRO+u/IfXlJUUAnZb1uz6Z7blQSVsMHfpy//CEf2ngRLRM
ewSaa5gnyx9egdzi6pnCuBDLpbxffOs7CEkbmM5RYDfNy5yy30WloKTOqbQYaLGb
G4hiKrxZnHiyO9PQCxzAS5l3c5EZQTIk/DtM4mwGoktzkRc/YdkRdoCUej8Q7OHX
q8JRURpOkDYs3iOzACgsQDvfFQkeAx6rzyNfmemSju4qGjY7nQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCCSpcV8fBzc+RoDk9/6eCr0mqTgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx
Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMDQ3NWI4MjgtYTI3Ny0z
ZWViLThiMDUtMjJlMGYxZTY5ODI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2
ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw
MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh
NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RSEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAc2lYYUb2D2AAiuED236HNjQ5cQm1d00pV5k+gdXa+6FQ1pe1A8Ve+Z
jc0j4cr2mpq3fy0EnLWko4P9IMTJOV1mhLw3zGzarBzkvs9dV8emlhO0GRVOdU/c
p0yiXU/828iCnZCwucMdy0v605iCiox9OpZGt3cVrQh36d1KyfRdlnM/tdrxpTIn
ssNsUVAeHzpVg6URsmJJjl7pwmPtBDAH/C8XS55GWf9OX+kOHxmmAx073YyTAnGs
UFegUSDUhSspZYwFJcqkpf67gHN8Hg/u6ttHirBLmBd5WVildJBih8IiaRXIV++W
APmXlTg20YNQTshiFFqrpJwd/ZwWJv0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:20:03 2025 by rpki-client