Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1638eb76-7f11-3efe-9e2b-a56616b7ebfe.roa
File: 1638eb76-7f11-3efe-9e2b-a56616b7ebfe.roa (raw, json)
Hash identifier: MlyRxDnazoznv+K3feMBIHHX6dYYd3iY1PsGNakvrZc=
Subject key identifier: 12:31:24:F1:34:F1:B9:F1:DA:DF:73:F2:CE:13:04:4B:46:2A:E0:50
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C5822FD217152D9071D395C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1638eb76-7f11-3efe-9e2b-a56616b7ebfe.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 209.85.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:2f:d2:17:15:2d:90:71:d3:95:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=c0d91771-70ac-4b70-a37d-536a1179dd9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:e4:f5:97:ae:96:7d:1e:dd:98:00:ce:67:
10:6c:f3:bc:88:c5:59:39:49:8b:63:a0:cb:67:d1:
d5:3a:73:2f:d6:4b:3a:1c:d3:86:4a:38:2c:28:01:
92:65:05:9a:a1:cb:7d:26:32:b5:95:dd:7e:6f:94:
71:5b:bc:b5:1c:44:4d:3f:92:e7:1f:b5:61:06:ca:
fa:97:33:31:08:fb:a7:9a:1d:d4:42:a6:10:66:98:
54:d9:72:ec:ea:6e:3c:1b:3b:dc:e8:77:53:23:aa:
50:d9:4b:7b:0d:cb:87:bb:b8:3e:b7:00:a4:74:28:
a3:83:20:94:2c:6b:06:85:49:1e:6c:e1:b1:ed:a0:
8a:87:53:b2:16:c3:80:74:98:ea:d8:20:32:2b:2a:
35:ea:45:6d:a6:38:c1:25:2a:ba:90:ba:63:7b:50:
a8:9d:7e:5c:6a:f3:8f:90:19:b0:29:2f:26:0f:50:
3c:a1:8b:34:d2:5f:9e:30:66:16:00:65:9f:01:41:
0f:c0:70:ae:47:e5:5c:36:f2:78:2d:e4:24:00:fd:
37:3e:6a:05:c3:34:fb:47:17:0f:eb:47:4c:c8:ca:
ff:8d:e7:fd:50:94:09:dd:8a:a4:0a:c0:fb:01:17:
69:87:97:e4:8f:10:f4:60:54:50:3b:e8:8e:e9:a3:
27:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:31:24:F1:34:F1:B9:F1:DA:DF:73:F2:CE:13:04:4B:46:2A:E0:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1638eb76-7f11-3efe-9e2b-a56616b7ebfe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
209.85.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:ef:c8:d8:75:d8:af:e5:df:72:69:da:68:79:86:cf:97:6c:
71:23:53:64:0d:cd:0a:b5:6d:d9:e8:7e:fb:9a:49:70:f8:58:
28:58:81:f9:67:2a:fd:96:27:aa:59:f1:00:65:87:57:ed:56:
bb:9c:f3:68:1f:ba:62:a7:e0:eb:a2:4c:dd:c6:07:24:9d:1d:
dd:c2:c2:6e:a0:d5:c2:bb:fd:6b:7f:4b:21:5b:34:c9:dd:50:
12:1d:03:f4:c7:67:79:5e:5c:e9:b2:e3:90:d6:8f:a1:e1:90:
de:55:fb:71:b4:21:35:2c:49:79:ac:5e:85:e5:3f:7a:14:96:
7f:14:f9:32:b4:a0:31:3f:5e:04:b6:72:78:4a:1e:dd:b0:a9:
9f:11:b4:3e:be:9c:8f:53:f1:ee:9c:dc:88:6f:2b:70:42:98:
12:23:96:c0:35:2c:74:14:60:b1:37:44:0d:49:06:dd:ce:e5:
c4:f3:d1:45:5b:07:14:52:14:bd:25:9b:fd:a7:1c:51:1c:5a:
ce:73:ac:b4:28:96:b5:da:e6:f6:a5:8a:91:60:1c:f5:87:eb:
fb:99:e2:44:26:03:27:0a:a7:76:a6:02:9f:4f:20:d8:60:a8:
93:b7:af:d2:b2:0b:ab:bd:70:40:96:43:24:1f:b4:6a:c9:5c:
b9:1d:b2:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgi/SFxUtkHHTlcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
YzBkOTE3NzEtNzBhYy00YjcwLWEzN2QtNTM2YTExNzlkZDliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCLk9Zeuln0e3ZgAzmcQbPO8iMVZOUmLY6DL
Z9HVOnMv1ks6HNOGSjgsKAGSZQWaoct9JjK1ld1+b5RxW7y1HERNP5LnH7VhBsr6
lzMxCPunmh3UQqYQZphU2XLs6m48Gzvc6HdTI6pQ2Ut7DcuHu7g+twCkdCijgyCU
LGsGhUkebOGx7aCKh1OyFsOAdJjq2CAyKyo16kVtpjjBJSq6kLpje1ConX5cavOP
kBmwKS8mD1A8oYs00l+eMGYWAGWfAUEPwHCuR+VcNvJ4LeQkAP03PmoFwzT7RxcP
60dMyMr/jef9UJQJ3YqkCsD7ARdph5fkjxD0YFRQO+iO6aMnXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBIxJPE08bnx2t9z8s4TBEtGKuBQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTYzOGViNzYtN2YxMS0z
ZWZlLTllMmItYTU2NjE2YjdlYmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VXpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB7vyNh12K/l33Jp2mh5hs+XbHEjU2QNzQq1bdnofvuaSXD4WChYgfln
Kv2WJ6pZ8QBlh1ftVruc82gfumKn4OuiTN3GBySdHd3Cwm6g1cK7/Wt/SyFbNMnd
UBIdA/THZ3leXOmy45DWj6HhkN5V+3G0ITUsSXmsXoXlP3oUln8U+TK0oDE/XgS2
cnhKHt2wqZ8RtD6+nI9T8e6c3IhvK3BCmBIjlsA1LHQUYLE3RA1JBt3O5cTz0UVb
BxRSFL0lm/2nHFEcWs5zrLQolrXa5valipFgHPWH6/uZ4kQmAycKp3amAp9PINhg
qJO3r9KyC6u9cECWQyQftGrJXLkdsgc=
-----END CERTIFICATE-----
Generated at Fri Apr 4 08:27:17 2025 by rpki-client