Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/f44d1fc1-7b77-3156-9214-4a2a059c2b3f.roa
File: f44d1fc1-7b77-3156-9214-4a2a059c2b3f.roa (raw, json)
Hash identifier: Spn9Lsw0tMI/e7vWfL6oQvszjOByOaBuUo6hIsAsj/I=
Subject key identifier: 1E:06:80:AE:10:B8:AC:C7:CB:03:C5:06:9D:D8:5F:04:2D:A4:DE:94
Certificate issuer: /CN=ae67d891-3b16-4302-bf8b-4adb69436dbe
Certificate serial: 010D0C9F4328584944694555BF343C4837A5D400
Authority key identifier: A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/f44d1fc1-7b77-3156-9214-4a2a059c2b3f.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 16604
IP address blocks: 209.124.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:45:55:bf:34:3c:48:37:a5:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae67d891-3b16-4302-bf8b-4adb69436dbe
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=26a4a0d6-0aea-4076-9334-89fa2bde186a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:dd:b2:ff:8e:c2:0e:86:0d:b8:a5:ea:f8:
f6:73:5f:62:7e:46:9b:6a:a1:00:ff:4a:38:69:40:
7f:89:21:5d:bb:e2:9e:76:f3:1c:2e:f5:26:96:fc:
ad:43:89:04:f9:15:cb:26:ab:27:a2:15:47:7b:fd:
18:b7:d8:97:22:ce:c4:b7:c6:b3:9f:a5:e4:81:c4:
41:95:66:6f:85:c0:47:a0:a3:59:e4:39:ed:be:41:
30:6d:81:13:05:69:54:9d:12:7a:dd:70:46:97:c2:
c5:4b:f4:73:e3:85:b4:14:c4:eb:07:38:81:d4:c1:
7d:6e:5f:d5:d9:dd:2c:fd:fb:85:5b:fd:58:a3:62:
2a:2f:70:e2:c9:18:81:25:ad:19:51:df:25:cc:92:
a9:7b:d6:09:bc:58:54:8e:0c:39:59:b4:41:e2:e0:
85:b0:bb:b3:2a:ff:4c:74:8b:50:6e:41:2d:7d:9c:
2f:33:5a:cb:e8:59:1e:e3:9a:b8:d8:f4:71:b9:14:
43:f9:e4:2c:57:e1:d0:e6:91:de:07:2b:56:94:db:
22:0c:b3:25:5a:4f:73:33:61:a9:7e:3d:e0:d0:2e:
07:f2:f4:95:60:1b:7f:69:13:e9:17:02:ef:b7:e6:
44:a3:dc:9d:41:de:ff:23:be:1f:5c:32:7a:2d:a7:
bf:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:06:80:AE:10:B8:AC:C7:CB:03:C5:06:9D:D8:5F:04:2D:A4:DE:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/f44d1fc1-7b77-3156-9214-4a2a059c2b3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl
X509v3 Authority Key Identifier:
keyid:A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer
sbgp-ipAddrBlock: critical
IPv4:
209.124.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:55:e9:81:f0:ec:c8:ff:5d:63:bc:2d:1c:a0:81:ee:e6:a2:
de:23:9b:70:86:7a:42:bf:2a:ff:9c:c6:ae:7a:53:3e:77:07:
e3:c9:d7:07:f1:ab:ea:6a:e3:bc:3d:bc:e1:23:a3:ed:fb:d1:
71:c0:d8:fb:11:58:25:20:3d:81:ff:40:b1:1a:a8:a8:93:51:
1d:a2:2a:c5:9c:49:1d:7c:08:bb:37:c3:a8:84:b4:dc:cd:66:
f2:29:59:99:d4:88:f4:f4:0b:e8:17:02:92:fd:c8:c2:04:4f:
53:96:40:d0:4d:2e:7d:6d:d6:27:e1:5b:2c:5d:80:2f:9c:75:
44:c9:e6:ab:e4:5c:23:73:f4:69:ec:72:ce:25:51:37:07:75:
a7:be:fa:25:7f:aa:57:09:92:39:6d:a4:a6:88:3b:1f:a4:72:
63:1a:71:dc:01:aa:fe:7c:78:d5:9d:4f:f8:4e:22:d6:7d:cf:
26:f1:9c:48:e1:91:c7:2f:4f:91:fb:72:80:df:b0:e7:c6:20:
6c:f7:66:a8:d0:9f:e8:7b:1e:05:d1:33:12:f4:6d:01:f1:7a:
21:57:63:7b:3e:a3:7d:c2:cc:38:54:14:7f:57:af:f3:ea:38:
d4:95:ec:6e:5f:93:32:4b:49:8b:1c:19:10:b4:fa:22:9e:2f:
7b:91:cc:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaUVVvzQ8SDel1AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWU2N2Q4OTEtM2IxNi00MzAyLWJmOGItNGFkYjY5NDM2
ZGJlMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk
MjZhNGEwZDYtMGFlYS00MDc2LTkzMzQtODlmYTJiZGUxODZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu3dsv+Owg6GDbil6vj2c19ifkabaqEA/0o4
aUB/iSFdu+KedvMcLvUmlvytQ4kE+RXLJqsnohVHe/0Yt9iXIs7Et8azn6XkgcRB
lWZvhcBHoKNZ5DntvkEwbYETBWlUnRJ63XBGl8LFS/Rz44W0FMTrBziB1MF9bl/V
2d0s/fuFW/1Yo2IqL3DiyRiBJa0ZUd8lzJKpe9YJvFhUjgw5WbRB4uCFsLuzKv9M
dItQbkEtfZwvM1rL6Fke45q42PRxuRRD+eQsV+HQ5pHeBytWlNsiDLMlWk9zM2Gp
fj3g0C4H8vSVYBt/aRPpFwLvt+ZEo9ydQd7/I74fXDJ6Lae/pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB4GgK4QuKzHywPFBp3YXwQtpN6UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hZTY3
ZDg5MS0zYjE2LTQzMDItYmY4Yi00YWRiNjk0MzZkYmUvZjQ0ZDFmYzEtN2I3Ny0z
MTU2LTkyMTQtNGEyYTA1OWMyYjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWU2N2Q4OTEtM2IxNi00MzAyLWJm
OGItNGFkYjY5NDM2ZGJlL2FlNjdkODkxLTNiMTYtNDMwMi1iZjhiLTRhZGI2OTQz
NmRiZS5jcmwwHwYDVR0jBBgwFoAUqQTSjf5p6pOv5FCHULU1zbydkCgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hZTY3ZDg5MS0zYjE2LTQzMDItYmY4Yi00YWRi
Njk0MzZkYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XyEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABtV6YHw7Mj/XWO8LRygge7mot4jm3CGekK/Kv+cxq56Uz53B+PJ1wfx
q+pq47w9vOEjo+370XHA2PsRWCUgPYH/QLEaqKiTUR2iKsWcSR18CLs3w6iEtNzN
ZvIpWZnUiPT0C+gXApL9yMIET1OWQNBNLn1t1ifhWyxdgC+cdUTJ5qvkXCNz9Gns
cs4lUTcHdae++iV/qlcJkjltpKaIOx+kcmMacdwBqv58eNWdT/hOItZ9zybxnEjh
kccvT5H7coDfsOfGIGz3ZqjQn+h7HgXRMxL0bQHxeiFXY3s+o33CzDhUFH9Xr/Pq
ONSV7G5fkzJLSYscGRC0+iKeL3uRzAo=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:58 2025 by rpki-client