Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4c96ceab-4c5d-4801-82cd-913921cb3c49/a1b9aa9e-23c2-3dd7-b69c-cc3ce4458163.roa
File: a1b9aa9e-23c2-3dd7-b69c-cc3ce4458163.roa (raw, json)
Hash identifier: MxSgNwX2e12xpGPO/HDEjvHbCEHK4LWf2b9LYfddoRg=
Subject key identifier: 02:CA:4A:40:AD:70:8B:72:71:35:0B:03:E4:CE:21:97:EF:FB:49:7F
Certificate issuer: /CN=4c96ceab-4c5d-4801-82cd-913921cb3c49
Certificate serial: 010D0C9F4328583AFE33E62F46B9029AAC29CEC0
Authority key identifier: B9:C2:15:9E:1A:D8:FC:BF:F7:89:E8:75:4E:1A:23:34:86:4E:AB:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4c96ceab-4c5d-4801-82cd-913921cb3c49.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4c96ceab-4c5d-4801-82cd-913921cb3c49/a1b9aa9e-23c2-3dd7-b69c-cc3ce4458163.roa
Signing time: Fri 28 Feb 2020 05:00:00 +0000
ROA not before: Fri 28 Feb 2020 05:00:00 +0000
ROA not after: Sun 23 Nov 2025 05:00:00 +0000
asID: 203
IP address blocks: 209.194.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:fe:33:e6:2f:46:b9:02:9a:ac:29:ce:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c96ceab-4c5d-4801-82cd-913921cb3c49
Validity
Not Before: Feb 28 05:00:00 2020 GMT
Not After : Nov 23 05:00:00 2025 GMT
Subject: CN=7a0bee45-2689-4825-abc4-6f12cc064798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:aa:73:4a:ac:b7:fe:eb:40:8f:16:3b:08:
6d:59:a5:20:0d:77:e6:42:aa:cb:64:65:69:23:c5:
9c:d8:98:f1:ca:36:69:82:5f:6a:ef:2a:db:ae:4a:
9c:e5:cc:74:ac:3c:af:61:6c:e9:0f:ab:9f:13:ad:
1a:23:e7:6b:7f:af:a2:2a:47:bc:6a:4e:ec:89:a1:
31:fe:4e:8c:a7:25:9e:9c:15:83:47:a4:07:f7:58:
31:59:c6:76:66:7c:d4:4f:b3:6b:4c:ec:21:d6:28:
43:bb:ad:a3:f1:ce:a0:a5:e1:9a:3b:ad:01:4d:d2:
fd:7a:06:b7:22:08:1a:ea:84:d6:e8:d4:7a:49:8f:
78:14:6e:55:72:be:1a:6a:e3:7d:f5:8c:cd:9a:1f:
10:40:ba:67:51:2f:20:c6:40:b3:55:5f:ab:7a:9f:
08:8c:8e:60:df:fd:1c:bd:0a:9e:69:b8:b6:6c:2b:
1b:7a:b6:d3:42:7f:9d:61:7e:9b:bc:ff:bb:9b:bb:
4a:df:5f:44:3b:f1:f2:5e:92:80:f5:5b:48:20:88:
6b:c5:89:87:bf:94:fc:82:56:be:dd:20:08:21:ae:
fe:7c:d0:be:a9:cf:30:72:6e:4e:b9:2e:60:0b:2a:
02:ef:40:f8:4a:69:d7:10:f0:8d:c8:ae:6c:09:3e:
16:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CA:4A:40:AD:70:8B:72:71:35:0B:03:E4:CE:21:97:EF:FB:49:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4c96ceab-4c5d-4801-82cd-913921cb3c49/a1b9aa9e-23c2-3dd7-b69c-cc3ce4458163.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4c96ceab-4c5d-4801-82cd-913921cb3c49/4c96ceab-4c5d-4801-82cd-913921cb3c49.crl
X509v3 Authority Key Identifier:
keyid:B9:C2:15:9E:1A:D8:FC:BF:F7:89:E8:75:4E:1A:23:34:86:4E:AB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4c96ceab-4c5d-4801-82cd-913921cb3c49.cer
sbgp-ipAddrBlock: critical
IPv4:
209.194.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:12:14:2e:19:a5:27:9b:60:12:bd:69:f0:1f:06:f0:5a:51:
7e:7d:b7:fe:00:1a:e1:96:a5:b1:06:72:b0:fd:85:a6:ed:35:
26:5f:e3:6e:f5:a0:f4:d6:7e:8c:f5:a5:e6:4e:d9:88:2f:c8:
00:28:e0:07:ca:54:32:e6:cc:85:8c:d7:22:1e:f6:ac:cf:db:
a8:bb:b5:19:b3:63:4c:75:45:26:15:1c:00:81:fb:56:4d:68:
6c:74:1f:5b:91:37:23:c6:c6:e7:e8:e6:56:04:42:9a:18:7d:
ff:7f:ed:60:c3:aa:a7:93:dc:02:dd:4a:1d:65:71:1f:c6:88:
0a:15:98:5e:cc:4f:fe:fd:f0:44:6b:8f:2a:72:5f:1f:1b:ac:
43:4a:56:af:6a:26:8e:d5:ab:f8:7b:ed:8f:f5:8b:57:2f:3d:
bf:af:89:55:9f:1a:77:d9:2e:a9:51:07:95:7f:6c:59:47:09:
69:a3:c7:24:2d:a5:f1:d2:56:7b:e9:53:31:fa:39:11:69:1c:
4b:e5:f8:1d:b3:d4:69:83:99:c5:79:ff:8f:9e:3e:0c:42:17:
18:38:aa:98:81:ed:e8:b8:4f:c6:d9:34:4d:bd:0d:37:f6:17:
d8:48:85:0d:6a:bc:c6:8d:88:33:f6:bc:89:ec:5d:67:bf:a3:
8c:66:f7:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDr+M+YvRrkCmqwpzsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGM5NmNlYWItNGM1ZC00ODAxLTgyY2QtOTEzOTIxY2Iz
YzQ5MB4XDTIwMDIyODA1MDAwMFoXDTI1MTEyMzA1MDAwMFowLzEtMCsGA1UEAxMk
N2EwYmVlNDUtMjY4OS00ODI1LWFiYzQtNmYxMmNjMDY0Nzk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKCqc0qst/7rQI8WOwhtWaUgDXfmQqrLZGVp
I8Wc2JjxyjZpgl9q7yrbrkqc5cx0rDyvYWzpD6ufE60aI+drf6+iKke8ak7siaEx
/k6MpyWenBWDR6QH91gxWcZ2ZnzUT7NrTOwh1ihDu62j8c6gpeGaO60BTdL9ega3
Igga6oTW6NR6SY94FG5Vcr4aauN99YzNmh8QQLpnUS8gxkCzVV+rep8IjI5g3/0c
vQqeabi2bCsberbTQn+dYX6bvP+7m7tK319EO/HyXpKA9VtIIIhrxYmHv5T8gla+
3SAIIa7+fNC+qc8wcm5OuS5gCyoC70D4SmnXEPCNyK5sCT4W4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFALKSkCtcItycTULA+TOIZfv+0l/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80Yzk2
Y2VhYi00YzVkLTQ4MDEtODJjZC05MTM5MjFjYjNjNDkvYTFiOWFhOWUtMjNjMi0z
ZGQ3LWI2OWMtY2MzY2U0NDU4MTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGM5NmNlYWItNGM1ZC00ODAxLTgy
Y2QtOTEzOTIxY2IzYzQ5LzRjOTZjZWFiLTRjNWQtNDgwMS04MmNkLTkxMzkyMWNi
M2M0OS5jcmwwHwYDVR0jBBgwFoAUucIVnhrY/L/3ieh1ThojNIZOq2AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80Yzk2Y2VhYi00YzVkLTQ4MDEtODJjZC05MTM5
MjFjYjNjNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cIAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKMSFC4ZpSebYBK9afAfBvBaUX59t/4AGuGWpbEGcrD9habtNSZf4271
oPTWfoz1peZO2YgvyAAo4AfKVDLmzIWM1yIe9qzP26i7tRmzY0x1RSYVHACB+1ZN
aGx0H1uRNyPGxufo5lYEQpoYff9/7WDDqqeT3ALdSh1lcR/GiAoVmF7MT/798ERr
jypyXx8brENKVq9qJo7Vq/h77Y/1i1cvPb+viVWfGnfZLqlRB5V/bFlHCWmjxyQt
pfHSVnvpUzH6ORFpHEvl+B2z1GmDmcV5/4+ePgxCFxg4qpiB7ei4T8bZNE29DTf2
F9hIhQ1qvMaNiDP2vInsXWe/o4xm9+k=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:27 2025 by rpki-client