Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/8c021314-84f0-3f55-a21d-d6278fb7b41a.roa
File: 8c021314-84f0-3f55-a21d-d6278fb7b41a.roa (raw, json)
Hash identifier: 6M2v4piIp5aF58nBb6jPLWcM+YDUj7pB1+Z+gjuWGpQ=
Subject key identifier: 36:04:19:6C:8F:08:FA:50:07:9C:ED:F0:5C:D5:3A:9F:40:71:C7:8E
Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial: 010D0C9F4328584951307B85C802229C97ABB680
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/8c021314-84f0-3f55-a21d-d6278fb7b41a.roa
Signing time: Wed 26 Mar 2025 14:51:59 +0000
ROA not before: Wed 26 Mar 2025 14:51:59 +0000
ROA not after: Tue 24 Jun 2025 14:51:59 +0000
asID: 21947
IP address blocks: 209.137.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:51:30:7b:85:c8:02:22:9c:97:ab:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Validity
Not Before: Mar 26 14:51:59 2025 GMT
Not After : Jun 24 14:51:59 2025 GMT
Subject: CN=00ef4d4e-d812-461d-bc60-097916061df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7f:cc:0e:6f:84:8e:2c:8e:e9:51:21:b3:2a:
8a:b0:3f:81:0d:57:7f:81:de:8d:6a:ca:d4:d3:a2:
5a:d5:97:ff:af:af:e9:f7:ba:b3:ef:14:19:ab:1d:
b9:27:e6:35:96:19:c6:ec:ba:c3:76:8e:66:74:47:
aa:16:c5:68:3f:f5:ad:92:82:4f:a9:fc:aa:33:01:
d8:66:9c:fc:c4:97:50:3a:0d:57:80:1b:a5:b4:28:
01:e2:4c:d8:f8:0b:64:fd:31:de:f3:e2:bc:76:cd:
db:b5:a9:b3:bd:f8:dc:e3:b2:bb:60:31:b3:11:8c:
1e:cf:5f:a9:7c:84:d9:68:2f:7d:10:a5:cc:41:51:
6e:4d:96:5c:4a:22:00:50:2b:b8:ee:b8:0f:8f:da:
69:d5:69:e7:05:7d:07:64:da:32:42:a0:25:c9:1c:
85:15:7d:ba:7b:8b:30:f0:bf:0a:86:d9:40:56:6a:
72:76:64:bc:ab:b5:96:0d:ba:7c:98:36:05:e2:f5:
99:57:5e:9d:e0:3f:a0:61:65:43:ec:f6:c9:f9:56:
05:8e:76:fd:0c:36:93:8e:76:e8:bc:85:81:73:7f:
31:16:73:47:7d:9a:ac:52:35:50:11:5d:a9:54:71:
fc:9c:d3:21:8a:31:b3:be:5c:86:51:12:58:a8:20:
f2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:04:19:6C:8F:08:FA:50:07:9C:ED:F0:5C:D5:3A:9F:40:71:C7:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/8c021314-84f0-3f55-a21d-d6278fb7b41a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
X509v3 Authority Key Identifier:
keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.137.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:f0:b9:7b:9d:56:8d:e6:f7:b4:a4:22:dc:df:a5:5c:69:92:
c0:d8:29:03:cf:52:47:15:f0:8a:93:35:fc:20:bf:38:c2:b3:
6a:90:78:06:1b:11:86:e1:72:c0:b7:2e:4f:04:2f:f6:5f:b7:
c9:5b:a7:0c:a1:d1:1f:db:9d:bf:20:16:07:cb:cc:fd:a6:24:
d0:2b:4e:f6:8b:17:b2:25:d8:41:f4:05:f1:58:11:33:3f:ec:
ca:d8:bf:fd:28:3f:3f:7b:a5:d7:f9:7f:b9:3c:a3:72:76:69:
c1:8d:61:88:f6:69:97:ca:1f:d5:71:b2:63:75:00:47:14:b3:
96:57:17:29:78:e9:e0:b2:a8:cf:92:ef:1e:ad:d6:d4:4a:8e:
4f:4b:a9:ab:a9:94:34:dc:6b:ad:f4:c1:79:bb:cb:04:16:c2:
7f:9b:16:ec:fa:25:79:3f:71:9e:45:fc:f3:8f:5f:e6:39:5a:
88:32:52:a4:9d:3f:ac:6d:50:61:5d:d4:05:35:1b:a0:c0:b6:
03:e3:4e:fa:84:19:40:0b:23:af:52:fe:c5:b7:c6:c8:48:38:
b3:68:9b:e2:1c:e7:a7:06:01:e9:a5:be:b7:aa:8d:74:47:b7:
0d:ce:72:fc:7f:06:9f:8e:c3:b4:e0:54:89:38:b2:33:40:e0:
40:44:cf:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElRMHuFyAIinJertoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz
OGEzMB4XDTI1MDMyNjE0NTE1OVoXDTI1MDYyNDE0NTE1OVowLzEtMCsGA1UEAxMk
MDBlZjRkNGUtZDgxMi00NjFkLWJjNjAtMDk3OTE2MDYxZGY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3/MDm+EjiyO6VEhsyqKsD+BDVd/gd6NasrU
06Ja1Zf/r6/p97qz7xQZqx25J+Y1lhnG7LrDdo5mdEeqFsVoP/WtkoJPqfyqMwHY
Zpz8xJdQOg1XgBultCgB4kzY+Atk/THe8+K8ds3btamzvfjc47K7YDGzEYwez1+p
fITZaC99EKXMQVFuTZZcSiIAUCu47rgPj9pp1WnnBX0HZNoyQqAlyRyFFX26e4sw
8L8KhtlAVmpydmS8q7WWDbp8mDYF4vWZV16d4D+gYWVD7PbJ+VYFjnb9DDaTjnbo
vIWBc38xFnNHfZqsUjVQEV2pVHH8nNMhijGzvlyGURJYqCDyuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDYEGWyPCPpQB5zt8FzVOp9AcceOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3
MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvOGMwMjEzMTQtODRmMC0z
ZjU1LWEyMWQtZDYyNzhmYjdiNDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk
YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj
MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1
NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0YngMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAETwuXudVo3m97SkItzfpVxpksDYKQPPUkcV8IqTNfwgvzjCs2qQeAYb
EYbhcsC3Lk8EL/Zft8lbpwyh0R/bnb8gFgfLzP2mJNArTvaLF7Il2EH0BfFYETM/
7MrYv/0oPz97pdf5f7k8o3J2acGNYYj2aZfKH9VxsmN1AEcUs5ZXFyl46eCyqM+S
7x6t1tRKjk9LqauplDTca630wXm7ywQWwn+bFuz6JXk/cZ5F/POPX+Y5WogyUqSd
P6xtUGFd1AU1G6DAtgPjTvqEGUALI69S/sW3xshIOLNom+Ic56cGAemlvreqjXRH
tw3Ocvx/Bp+Ow7TgVIk4sjNA4EBEz9o=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:26:48 2025 by rpki-client