Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8ac69690-c3b8-3bba-82fc-102f743b397b.roa
File: 8ac69690-c3b8-3bba-82fc-102f743b397b.roa (raw, json)
Hash identifier: oUvrVnqh7wkQqC8NIydq+N/Ipuvk89+8tkHtzv6pZZA=
Subject key identifier: 58:CF:49:B6:CF:CA:81:9C:BC:8D:12:11:9B:F4:F1:CA:4E:29:54:76
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848F4F698B8E4B496013987FF00
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8ac69690-c3b8-3bba-82fc-102f743b397b.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 136448
IP address blocks: 209.9.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:98:b8:e4:b4:96:01:39:87:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=fea9149e-3b0e-49d4-8085-9d0d3f2f699e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4c:6a:f2:b9:74:7b:d7:d2:7e:9b:3a:e0:d3:
71:ce:d9:d8:36:04:c4:ae:46:1b:66:2c:66:f6:b7:
65:a7:40:17:78:05:0e:91:9a:3c:66:96:af:47:5b:
38:cb:37:1c:b0:da:84:22:6e:28:e8:df:aa:ec:c8:
67:51:d7:e3:56:d1:72:be:08:ee:11:cb:04:1f:b5:
1a:3a:d8:c4:e0:13:8c:c6:a5:54:08:3d:49:dc:5c:
fd:32:b3:87:cd:45:96:f7:07:78:c8:22:8f:79:97:
e2:3a:00:a1:f9:fa:21:08:86:74:cf:cf:a9:5f:7a:
bf:dd:74:8d:2a:e0:16:73:c7:79:2d:3f:37:32:8c:
a2:7a:c1:3f:54:de:c5:01:32:a7:aa:99:0e:ac:ff:
95:21:69:ab:c4:76:46:2e:fa:6f:1a:15:a0:80:d8:
61:f7:23:ac:11:5c:bf:69:bd:de:f0:82:73:f5:0a:
a7:92:55:9f:92:a7:f5:48:d1:43:09:ab:71:fe:e0:
6a:09:63:7f:7b:a3:a7:f8:eb:f8:99:62:85:28:a2:
82:cf:e0:ac:6b:9f:fe:f3:8b:df:04:b4:2d:a3:56:
c3:df:4d:46:40:5e:bf:3e:e5:ec:6a:7e:a6:94:ae:
28:06:e0:e2:08:bc:5d:e9:14:8b:18:b4:9b:e8:36:
5a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CF:49:B6:CF:CA:81:9C:BC:8D:12:11:9B:F4:F1:CA:4E:29:54:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8ac69690-c3b8-3bba-82fc-102f743b397b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
209.9.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:75:aa:4f:c3:57:fc:eb:bf:52:4c:02:0a:f3:14:1e:38:5c:
a5:2b:29:98:e1:03:b1:ad:8e:a2:a6:f9:9e:3a:7e:1e:dd:65:
8a:b0:13:de:89:b9:69:31:5d:3a:a6:34:e0:68:ab:ee:b0:26:
fd:57:d0:de:92:8c:fe:d5:60:a8:d4:1e:ea:9f:64:5c:e8:41:
84:f5:19:44:f1:fb:be:97:7f:c2:be:59:59:af:5b:a9:39:c5:
33:10:08:a1:17:c9:64:e8:7e:9f:cb:c5:b1:aa:01:c4:03:ce:
89:1a:8a:15:f0:6a:ed:44:bc:85:36:5b:b0:ee:e4:54:e8:98:
23:d4:7c:6e:13:b0:6b:eb:34:18:88:d9:0f:ee:ea:ff:78:c5:
b3:a0:21:7f:81:09:02:09:e4:a9:69:c4:0b:9d:10:60:ac:ec:
43:e1:89:c3:21:b3:32:e9:19:a1:2f:5f:15:8a:ca:16:ba:e1:
88:87:43:d8:70:8b:90:1e:25:37:44:75:cd:9c:f1:25:6c:3e:
7b:24:5f:6b:65:f7:77:f3:3c:b9:ff:4a:8a:98:5f:fd:ca:2b:
aa:b5:16:8b:75:c6:f7:b1:cb:c3:e9:89:a1:eb:f8:a7:33:28:
e9:33:91:d3:99:9a:ea:d2:ff:21:52:eb:13:69:aa:66:55:19:
fe:74:12:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09pi45LSWATmH/wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw
YzQ4MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
ZmVhOTE0OWUtM2IwZS00OWQ0LTgwODUtOWQwZDNmMmY2OTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUxq8rl0e9fSfps64NNxztnYNgTErkYbZixm
9rdlp0AXeAUOkZo8ZpavR1s4yzccsNqEIm4o6N+q7MhnUdfjVtFyvgjuEcsEH7Ua
OtjE4BOMxqVUCD1J3Fz9MrOHzUWW9wd4yCKPeZfiOgCh+fohCIZ0z8+pX3q/3XSN
KuAWc8d5LT83MoyiesE/VN7FATKnqpkOrP+VIWmrxHZGLvpvGhWggNhh9yOsEVy/
ab3e8IJz9QqnklWfkqf1SNFDCatx/uBqCWN/e6On+Ov4mWKFKKKCz+Csa5/+84vf
BLQto1bD301GQF6/PuXsan6mlK4oBuDiCLxd6RSLGLSb6DZaJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFjPSbbPyoGcvI0SEZv08cpOKVR2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5
ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvOGFjNjk2OTAtYzNiOC0z
YmJhLTgyZmMtMTAyZjc0M2IzOTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm
MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy
MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl
ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0QnUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABp1qk/DV/zrv1JMAgrzFB44XKUrKZjhA7GtjqKm+Z46fh7dZYqwE96J
uWkxXTqmNOBoq+6wJv1X0N6SjP7VYKjUHuqfZFzoQYT1GUTx+76Xf8K+WVmvW6k5
xTMQCKEXyWTofp/LxbGqAcQDzokaihXwau1EvIU2W7Du5FTomCPUfG4TsGvrNBiI
2Q/u6v94xbOgIX+BCQIJ5KlpxAudEGCs7EPhicMhszLpGaEvXxWKyha64YiHQ9hw
i5AeJTdEdc2c8SVsPnskX2tl93fzPLn/SoqYX/3KK6q1Fot1xvexy8PpiaHr+Kcz
KOkzkdOZmurS/yFS6xNpqmZVGf50Evo=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:32:36 2025 by rpki-client