Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/0a2d5461-dab2-3bd7-bbae-4cff0f986bf8.roa
File: 0a2d5461-dab2-3bd7-bbae-4cff0f986bf8.roa (raw, json)
Hash identifier: Uu5MCZajGE1fw1tbWeyD0VnD9Hw9pwiguyTxDS7ry6c=
Subject key identifier: 2F:D4:96:E2:CB:8A:49:4D:58:2C:22:EB:CA:98:69:70:63:BD:84:A4
Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial: 010D0C9F432858494F225DC809AB053879E75100
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/0a2d5461-dab2-3bd7-bbae-4cff0f986bf8.roa
Signing time: Tue 25 Mar 2025 21:11:56 +0000
ROA not before: Tue 25 Mar 2025 21:11:56 +0000
ROA not after: Mon 23 Jun 2025 21:11:56 +0000
asID: 21947
IP address blocks: 209.200.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4f:22:5d:c8:09:ab:05:38:79:e7:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Validity
Not Before: Mar 25 21:11:56 2025 GMT
Not After : Jun 23 21:11:56 2025 GMT
Subject: CN=e04a81a1-263d-4c45-b978-3f5ab23813ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:22:22:bc:71:11:fd:30:e8:4f:76:ad:3b:b9:
ef:92:f9:5e:86:a6:b9:72:b8:88:00:9e:29:26:51:
fd:60:a3:54:e2:17:06:a7:4e:7d:81:c6:9d:2b:78:
fb:59:bb:77:74:98:80:b5:a2:55:a4:bf:e4:12:5c:
f2:9b:89:5c:08:29:ee:f3:f9:a3:db:d2:2f:db:ad:
79:0d:e6:e1:96:c0:d8:37:c9:5a:ec:68:e8:62:b0:
11:4b:88:e2:8d:2f:40:25:9f:4b:66:5b:bb:ca:c7:
c2:50:e6:f2:eb:bc:ff:57:9d:2b:7f:30:75:ea:db:
91:62:4b:a1:37:36:0e:60:32:b3:fc:59:95:85:56:
b1:6e:4e:1a:32:6f:c4:45:6e:aa:3a:10:d6:95:74:
d4:2a:a5:5f:0e:da:02:e8:1a:8d:cd:77:63:b6:94:
16:07:c4:60:f7:e1:f0:ab:24:7a:58:9e:e2:66:e6:
14:4c:d0:62:0e:09:69:c6:f0:65:65:27:24:03:7f:
bd:e1:b7:71:fa:23:74:53:e0:d8:3c:61:e3:9e:3d:
05:ee:1e:51:e5:e5:62:aa:21:a0:26:1e:bb:50:10:
d8:77:16:21:83:60:92:82:44:40:a2:12:10:7f:e0:
bf:e8:2a:c5:7b:47:69:e9:7a:7b:f6:d0:f4:ba:8e:
33:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D4:96:E2:CB:8A:49:4D:58:2C:22:EB:CA:98:69:70:63:BD:84:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/0a2d5461-dab2-3bd7-bbae-4cff0f986bf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
X509v3 Authority Key Identifier:
keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.200.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:47:52:96:29:8b:9c:d1:2c:3e:c4:56:36:db:b9:a2:59:fb:
48:86:93:c9:3e:6a:f4:1c:2c:02:c7:ef:e5:d2:45:7d:80:0c:
90:25:28:0c:13:5d:0b:df:24:8c:c3:b0:76:0d:10:bb:30:1f:
36:d5:31:b4:36:75:6f:50:04:5f:c4:63:2d:15:a5:21:ff:53:
3d:f7:06:a1:67:ad:ad:01:a5:9d:e0:81:b2:f3:19:ee:3f:63:
94:6a:34:51:a2:6d:f6:30:d9:80:12:2d:1e:39:ea:d1:8e:66:
e5:b8:96:58:85:50:46:f8:35:8f:4d:33:f6:68:65:e5:27:48:
c9:ef:a5:77:09:5c:96:4b:2d:02:55:b4:20:d4:68:22:31:18:
17:1f:89:9c:ca:21:5e:d4:3b:00:c3:f0:b0:51:64:53:a0:27:
5c:25:dd:7d:f0:42:2e:b0:06:f6:73:07:87:44:7e:2a:f8:d2:
f5:7d:f6:b8:50:ca:36:c9:64:eb:4e:97:0f:b0:af:04:5a:bd:
8a:75:d7:7a:ff:a0:3a:7e:09:c5:a7:a5:07:c3:58:d2:de:6b:
19:71:c6:99:b4:4b:34:96:a3:03:58:b8:11:92:f0:c4:84:86:
6a:1c:0e:5b:e9:c6:ce:d0:ef:13:1c:70:ee:28:11:7b:78:f6:
da:ef:16:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElPIl3ICasFOHnnUQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz
OGEzMB4XDTI1MDMyNTIxMTE1NloXDTI1MDYyMzIxMTE1NlowLzEtMCsGA1UEAxMk
ZTA0YTgxYTEtMjYzZC00YzQ1LWI5NzgtM2Y1YWIyMzgxM2VhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSIivHER/TDoT3atO7nvkvlehqa5criIAJ4p
JlH9YKNU4hcGp059gcadK3j7Wbt3dJiAtaJVpL/kElzym4lcCCnu8/mj29Iv2615
DebhlsDYN8la7GjoYrARS4jijS9AJZ9LZlu7ysfCUOby67z/V50rfzB16tuRYkuh
NzYOYDKz/FmVhVaxbk4aMm/ERW6qOhDWlXTUKqVfDtoC6BqNzXdjtpQWB8Rg9+Hw
qyR6WJ7iZuYUTNBiDglpxvBlZSckA3+94bdx+iN0U+DYPGHjnj0F7h5R5eViqiGg
Jh67UBDYdxYhg2CSgkRAohIQf+C/6CrFe0dp6Xp79tD0uo4zDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC/UluLLiklNWCwi68qYaXBjvYSkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3
MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvMGEyZDU0NjEtZGFiMi0z
YmQ3LWJiYWUtNGNmZjBmOTg2YmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk
YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj
MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1
NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0cjAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIJHUpYpi5zRLD7EVjbbuaJZ+0iGk8k+avQcLALH7+XSRX2ADJAlKAwT
XQvfJIzDsHYNELswHzbVMbQ2dW9QBF/EYy0VpSH/Uz33BqFnra0BpZ3ggbLzGe4/
Y5RqNFGibfYw2YASLR456tGOZuW4lliFUEb4NY9NM/ZoZeUnSMnvpXcJXJZLLQJV
tCDUaCIxGBcfiZzKIV7UOwDD8LBRZFOgJ1wl3X3wQi6wBvZzB4dEfir40vV99rhQ
yjbJZOtOlw+wrwRavYp113r/oDp+CcWnpQfDWNLeaxlxxpm0SzSWowNYuBGS8MSE
hmocDlvpxs7Q7xMccO4oEXt49trvFnw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:27:56 2025 by rpki-client