Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2c199e06-0061-3f8d-8062-186a6d89c327.roa
File: 2c199e06-0061-3f8d-8062-186a6d89c327.roa (raw, json)
Hash identifier: RczPp2pWW3b9CjZxD7iqYyVhQpRndhcTm/xRtcdb3pA=
Subject key identifier: E4:E8:E6:C6:A8:E6:06:04:DB:00:05:92:88:74:FF:3D:CD:13:A4:2E
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848FD56B57E88544592B8445AA0
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2c199e06-0061-3f8d-8062-186a6d89c327.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 17057
IP address blocks: 209.8.5.0/24 maxlen: 24
209.8.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:b5:7e:88:54:45:92:b8:44:5a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=89f2fc2b-2358-4285-8b97-cd5093dc500a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f7:d9:65:b7:ae:38:d8:1f:48:5d:73:e4:91:
de:8d:7c:92:ab:60:b3:60:1b:4d:39:49:f6:6b:89:
fa:6c:5d:58:89:a7:3d:e0:cb:e6:48:61:3f:a8:3f:
df:df:2b:16:56:b3:eb:89:17:96:b7:96:74:5d:ac:
3e:34:cd:79:26:89:48:70:f2:f0:13:15:69:dd:ba:
dd:3c:60:33:ea:31:6a:f2:42:21:92:c0:87:bf:2e:
10:18:79:66:f3:4b:4b:f7:31:94:08:f8:fa:2f:03:
fd:30:1b:0f:9f:d2:9f:db:6b:91:a1:69:ed:2a:2a:
2b:da:2a:bf:33:b3:4e:93:af:29:13:b0:81:eb:63:
13:f5:89:f6:89:28:3d:37:3e:ab:64:c7:f1:59:db:
58:80:5c:43:0d:85:f8:83:05:d0:ea:64:9d:3a:2f:
c9:9e:48:08:da:32:41:85:ea:36:bb:8f:bb:b0:59:
97:9d:fa:92:07:37:4e:55:7b:3a:85:1a:aa:a1:1b:
5f:cb:f7:2b:68:e7:e2:d6:94:b4:2c:ce:46:05:63:
0e:c8:68:20:5a:dc:35:67:ca:36:43:8b:72:1e:e0:
b0:dc:c4:f7:83:c2:0b:4d:57:9d:bd:ba:b6:a4:ec:
b9:4e:22:83:47:26:3f:77:89:33:94:85:5f:e9:33:
98:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E8:E6:C6:A8:E6:06:04:DB:00:05:92:88:74:FF:3D:CD:13:A4:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2c199e06-0061-3f8d-8062-186a6d89c327.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
209.8.5.0/24
209.8.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:de:25:78:8d:00:4b:b5:79:00:2e:0e:20:07:69:74:4b:e8:
20:48:99:82:43:42:ca:2a:12:12:a0:fc:b9:02:05:d2:eb:1b:
f2:1e:3f:0c:fe:78:94:eb:ba:a3:6c:39:61:23:ba:24:2f:6d:
76:39:9e:16:3e:3f:1c:1e:9b:23:ea:10:af:c4:c4:fc:86:9f:
63:9e:c8:3c:43:80:31:9d:e5:9b:6e:e2:65:02:c0:a6:df:55:
d0:5e:5d:27:81:03:fe:b0:17:63:72:ea:1a:88:77:ea:18:ae:
fe:01:a7:1d:89:3a:02:e2:bb:8f:6c:94:ab:e5:d4:9a:ea:28:
96:69:79:18:53:8f:37:fe:9f:a4:4f:f8:dc:fa:ae:82:a0:e0:
e9:02:7a:72:d3:c2:96:8f:30:ab:85:e6:01:c6:df:30:87:22:
4c:fe:92:1a:99:08:d6:6b:9d:97:8c:4b:c3:66:35:23:f4:cc:
9a:b4:c7:19:b6:d0:f5:6b:a0:13:8a:e1:84:59:93:96:bc:e0:
36:bc:93:b1:48:02:22:d8:d9:b7:0a:b2:81:fc:1c:c3:a6:c2:
f5:19:c5:3b:34:13:25:f0:2f:70:b6:67:c3:64:93:1a:9a:cf:
e9:37:33:d2:74:f2:61:17:1a:a7:93:bb:a3:37:84:c3:71:af:
07:1b:0a:6d
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEj9VrV+iFRFkrhEWqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw
YzQ4MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ODlmMmZjMmItMjM1OC00Mjg1LThiOTctY2Q1MDkzZGM1MDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPfZZbeuONgfSF1z5JHejXySq2CzYBtNOUn2
a4n6bF1Yiac94MvmSGE/qD/f3ysWVrPriReWt5Z0Xaw+NM15JolIcPLwExVp3brd
PGAz6jFq8kIhksCHvy4QGHlm80tL9zGUCPj6LwP9MBsPn9Kf22uRoWntKior2iq/
M7NOk68pE7CB62MT9Yn2iSg9Nz6rZMfxWdtYgFxDDYX4gwXQ6mSdOi/JnkgI2jJB
heo2u4+7sFmXnfqSBzdOVXs6hRqqoRtfy/craOfi1pS0LM5GBWMOyGggWtw1Z8o2
Q4tyHuCw3MT3g8ILTVedvbq2pOy5TiKDRyY/d4kzlIVf6TOYmQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFOTo5sao5gYE2wAFkoh0/z3NE6QuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5
ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvMmMxOTllMDYtMDA2MS0z
ZjhkLTgwNjItMTg2YTZkODljMzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm
MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy
MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl
ZGEyMjBjNDguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0QgFAwQA
0QgHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAJzeJXiNAEu1eQAuDiAHaXRL6CBImYJDQsoqEhKg/LkCBdLr
G/IePwz+eJTruqNsOWEjuiQvbXY5nhY+PxwemyPqEK/ExPyGn2OeyDxDgDGd5Ztu
4mUCwKbfVdBeXSeBA/6wF2Ny6hqId+oYrv4Bpx2JOgLiu49slKvl1JrqKJZpeRhT
jzf+n6RP+Nz6roKg4OkCenLTwpaPMKuF5gHG3zCHIkz+khqZCNZrnZeMS8NmNSP0
zJq0xxm20PVroBOK4YRZk5a84Da8k7FIAiLY2bcKsoH8HMOmwvUZxTs0EyXwL3C2
Z8Nkkxqaz+k3M9J08mEXGqeTu6M3hMNxrwcbCm0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:25:47 2025 by rpki-client