Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2c800565-0350-3f92-96a1-5c4ba4fe455c.roa
File: 2c800565-0350-3f92-96a1-5c4ba4fe455c.roa (raw, json)
Hash identifier: cx9MX8x2r5ALWdUMGGG3YYPjDYB1M7TWJY9xOp1H3RE=
Subject key identifier: 24:10:B0:D2:B8:98:A7:CD:9B:02:54:E1:9D:A0:C8:C5:3D:A8:4C:C8
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848F4F698DD3002DCA2541179C0
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2c800565-0350-3f92-96a1-5c4ba4fe455c.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 29889
IP address blocks: 209.9.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:98:dd:30:02:dc:a2:54:11:79:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=f9cfbe41-21b5-4ca0-893e-4a56fee6e0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e8:b3:3b:39:4b:c1:3a:93:fb:f6:ab:88:3d:
a9:00:bc:7f:b5:b8:a1:c5:b1:a8:96:c4:1c:7b:c4:
d9:9c:f6:4e:12:db:8e:cc:04:0d:4f:ff:0f:60:56:
17:6c:a6:a3:68:6d:ec:fd:c0:8d:8a:13:27:a9:a7:
4f:fe:46:09:27:09:f5:0d:b2:5d:0b:ff:5c:e9:f2:
16:9f:e0:64:cd:23:fd:d1:aa:50:97:ad:56:e6:18:
01:28:59:c1:43:69:52:1a:b4:7e:e7:a0:cf:87:01:
b2:d8:e1:a9:bd:a7:cd:a9:68:1d:f3:1c:32:7c:5e:
6e:91:5e:93:bd:c8:99:66:f5:9c:f4:45:5c:58:3c:
98:11:7d:47:32:cd:d6:a9:30:17:55:13:0d:b6:a4:
f2:03:f7:f0:d6:b8:e9:40:88:e9:9c:98:df:86:40:
fe:15:e3:90:29:b2:e0:09:f4:8f:01:58:99:3a:0f:
19:9b:a5:c2:6e:ce:2d:20:3a:fd:3a:00:61:0c:10:
15:45:46:80:8e:4b:ad:25:78:8d:df:12:df:ba:ee:
3d:f9:33:67:f0:06:6e:b5:a4:4c:89:c8:15:68:c1:
4b:c8:ad:25:26:73:74:70:06:e3:ac:7e:d5:16:96:
1b:0c:3f:27:89:cc:6e:29:55:3e:fd:57:c1:16:31:
44:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:10:B0:D2:B8:98:A7:CD:9B:02:54:E1:9D:A0:C8:C5:3D:A8:4C:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2c800565-0350-3f92-96a1-5c4ba4fe455c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
209.9.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:14:6c:0e:13:e6:8e:10:e9:5b:ee:c7:7a:57:15:51:3e:9a:
29:59:c3:af:c0:53:22:0b:13:fe:c8:30:31:1f:5a:e0:3d:8f:
75:50:2e:ba:93:04:81:14:21:f6:10:5f:88:32:44:c9:eb:06:
5e:30:b7:ca:85:d9:9f:57:65:a8:45:db:cb:f5:78:7b:4c:81:
13:25:57:2a:59:02:36:69:9e:99:0b:47:e4:80:d5:4c:d3:7a:
bc:d2:3f:da:f1:45:9b:22:cd:de:47:13:c7:34:ae:62:a8:b0:
50:5d:e8:03:48:d0:44:1f:51:3e:2c:ab:3b:85:19:1e:47:a1:
d8:8e:56:43:de:70:82:15:00:31:8b:37:89:fc:ff:f2:4c:e0:
dc:98:55:83:d2:32:b2:ef:51:6d:03:a4:0d:d3:a8:8f:cb:5d:
db:a7:7b:4d:5e:65:a8:a0:2f:f7:02:f3:9e:69:45:c7:93:23:
85:90:57:e5:da:0e:4e:87:07:3a:6c:33:86:5e:37:9c:a2:ef:
67:c0:71:92:1d:91:9c:99:67:61:16:9c:ba:63:a7:2e:25:f3:
ad:d3:3f:49:82:1c:fd:bc:95:4b:4d:15:10:af:12:c1:70:b4:
3d:e3:da:f0:f9:4e:2c:b3:d8:8f:7a:3a:ae:aa:b5:13:f8:47:
8d:37:84:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09pjdMALcolQRecAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw
YzQ4MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
ZjljZmJlNDEtMjFiNS00Y2EwLTg5M2UtNGE1NmZlZTZlMGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOizOzlLwTqT+/ariD2pALx/tbihxbGolsQc
e8TZnPZOEtuOzAQNT/8PYFYXbKajaG3s/cCNihMnqadP/kYJJwn1DbJdC/9c6fIW
n+BkzSP90apQl61W5hgBKFnBQ2lSGrR+56DPhwGy2OGpvafNqWgd8xwyfF5ukV6T
vciZZvWc9EVcWDyYEX1HMs3WqTAXVRMNtqTyA/fw1rjpQIjpnJjfhkD+FeOQKbLg
CfSPAViZOg8Zm6XCbs4tIDr9OgBhDBAVRUaAjkutJXiN3xLfuu49+TNn8AZutaRM
icgVaMFLyK0lJnN0cAbjrH7VFpYbDD8nicxuKVU+/VfBFjFESQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCQQsNK4mKfNmwJU4Z2gyMU9qEzIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5
ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvMmM4MDA1NjUtMDM1MC0z
ZjkyLTk2YTEtNWM0YmE0ZmU0NTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm
MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy
MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl
ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0QnuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABcUbA4T5o4Q6Vvux3pXFVE+milZw6/AUyILE/7IMDEfWuA9j3VQLrqT
BIEUIfYQX4gyRMnrBl4wt8qF2Z9XZahF28v1eHtMgRMlVypZAjZpnpkLR+SA1UzT
erzSP9rxRZsizd5HE8c0rmKosFBd6ANI0EQfUT4sqzuFGR5HodiOVkPecIIVADGL
N4n8//JM4NyYVYPSMrLvUW0DpA3TqI/LXdune01eZaigL/cC855pRceTI4WQV+Xa
Dk6HBzpsM4ZeN5yi72fAcZIdkZyZZ2EWnLpjpy4l863TP0mCHP28lUtNFRCvEsFw
tD3j2vD5Tiyz2I96Oq6qtRP4R403hN8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:30:08 2025 by rpki-client