Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c242f862-8e12-4ea6-a0aa-d8315a6cb8ea/154be04c-42c9-3d2c-9ca3-c82c6b813389.roa
File: 154be04c-42c9-3d2c-9ca3-c82c6b813389.roa (raw, json)
Hash identifier: GOg0HSW+ARTIGkNTWpPJJVodFggE6CNXDidQRjfCA3A=
Subject key identifier: 7B:12:97:50:04:CB:CC:32:16:1D:23:DC:6B:1C:08:1F:C4:EF:7A:8E
Certificate issuer: /CN=c242f862-8e12-4ea6-a0aa-d8315a6cb8ea
Certificate serial: 010D0C9F4328576D51CC73C042CFC17137602599
Authority key identifier: 14:8A:24:9C:E9:48:C8:3B:7F:8D:FF:9A:5F:84:37:88:8D:12:17:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c242f862-8e12-4ea6-a0aa-d8315a6cb8ea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c242f862-8e12-4ea6-a0aa-d8315a6cb8ea/154be04c-42c9-3d2c-9ca3-c82c6b813389.roa
Signing time: Wed 01 Apr 2020 20:13:00 +0000
ROA not before: Wed 01 Apr 2020 04:00:00 +0000
ROA not after: Tue 05 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 209.51.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:37:60:25:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c242f862-8e12-4ea6-a0aa-d8315a6cb8ea
Validity
Not Before: Apr 1 04:00:00 2020 GMT
Not After : Jul 5 04:00:00 2022 GMT
Subject: CN=cbb43144-0ce6-455c-9e0e-6c5330818637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d7:92:3c:3f:8f:75:d4:0a:5e:b8:4f:7b:07:
b5:6d:59:72:9b:ff:e7:85:c4:3a:b1:de:b5:72:1d:
23:88:9e:2b:27:16:d4:5b:10:29:d5:88:7a:da:01:
cd:11:a7:83:84:39:70:fd:c0:bb:65:e6:27:e7:1e:
7b:bc:38:58:d3:52:21:c2:d4:1f:e3:83:02:9a:ca:
3f:26:52:c9:7c:fb:e7:0b:7a:a3:b2:45:61:10:6a:
e0:2f:2b:e6:14:4a:4d:28:10:4b:c6:0f:3e:41:1c:
e8:ae:5c:2f:b2:1f:93:2e:f8:bd:06:ff:98:a0:85:
a5:52:92:f9:49:12:32:62:55:21:1a:f9:5a:28:23:
6e:8d:66:94:d0:e3:0a:cf:a4:f1:46:d6:aa:91:c0:
f0:ef:2d:99:ed:60:7a:5d:43:57:87:df:d1:09:5c:
4e:00:2a:d2:22:10:ed:c9:dc:fb:55:4c:ea:5f:61:
e7:31:1f:31:64:4a:71:37:b4:16:49:62:99:ec:55:
cd:18:3a:6f:9d:e0:8e:e2:b6:66:da:5d:85:84:83:
d0:2d:38:15:30:64:fc:0c:fb:9c:6b:63:8f:98:68:
aa:9a:21:a7:11:b2:d9:43:d9:8a:72:91:12:c7:6b:
ba:93:22:ee:1c:f6:7c:58:67:d7:5e:ed:76:74:15:
52:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:12:97:50:04:CB:CC:32:16:1D:23:DC:6B:1C:08:1F:C4:EF:7A:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c242f862-8e12-4ea6-a0aa-d8315a6cb8ea/154be04c-42c9-3d2c-9ca3-c82c6b813389.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c242f862-8e12-4ea6-a0aa-d8315a6cb8ea/c242f862-8e12-4ea6-a0aa-d8315a6cb8ea.crl
X509v3 Authority Key Identifier:
keyid:14:8A:24:9C:E9:48:C8:3B:7F:8D:FF:9A:5F:84:37:88:8D:12:17:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c242f862-8e12-4ea6-a0aa-d8315a6cb8ea.cer
sbgp-ipAddrBlock: critical
IPv4:
209.51.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:14:44:de:32:5d:b1:ed:17:17:4d:73:1d:c1:22:f5:b1:e7:
e3:9d:f5:dc:9f:cd:e4:26:f4:36:d3:fd:47:e7:c9:95:08:75:
8a:44:e7:c8:32:ab:08:18:13:2a:a3:1b:6e:56:42:9c:d6:2f:
e2:49:40:ac:ac:bb:75:dc:1f:98:2a:8a:c4:98:d3:10:14:e9:
9a:40:12:9a:cd:8f:4d:e4:50:3a:f5:36:3f:9f:a8:dc:a9:42:
f4:e4:ea:c5:f9:32:f4:73:35:9e:e8:97:f0:71:df:2e:9e:c3:
86:9d:00:31:a4:1b:80:10:6f:60:fe:a0:b9:83:4c:65:62:3a:
11:ee:6d:f6:34:ad:28:8c:e6:ca:1c:58:7e:dc:2a:70:3e:91:
6b:22:a5:a3:7e:9f:c2:d8:b9:b8:9d:b6:ed:64:56:17:8c:f3:
57:72:1c:b1:e1:36:3d:30:f8:be:0b:35:c3:81:20:04:4a:d8:
1e:a7:99:be:c0:6c:fb:e8:a8:93:99:0b:19:7b:53:03:02:80:
e2:99:8f:1d:69:1b:55:10:80:36:66:ab:5f:b1:2c:75:9e:4e:
bc:2b:3a:bb:63:18:9d:5b:ad:3c:d5:b9:43:e2:4c:39:ff:f8:
8f:61:60:4b:cf:c4:cb:6d:72:de:4f:4d:72:05:e5:76:50:23:
4f:b4:a6:e1
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcTdgJZkwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGMyNDJmODYyLThlMTItNGVhNi1hMGFhLWQ4MzE1YTZjYjhl
YTAeFw0yMDA0MDEwNDAwMDBaFw0yMjA3MDUwNDAwMDBaMC8xLTArBgNVBAMTJGNi
YjQzMTQ0LTBjZTYtNDU1Yy05ZTBlLTZjNTMzMDgxODYzNzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAL7Xkjw/j3XUCl64T3sHtW1Zcpv/54XEOrHetXId
I4ieKycW1FsQKdWIetoBzRGng4Q5cP3Au2XmJ+cee7w4WNNSIcLUH+ODAprKPyZS
yXz75wt6o7JFYRBq4C8r5hRKTSgQS8YPPkEc6K5cL7Ifky74vQb/mKCFpVKS+UkS
MmJVIRr5Wigjbo1mlNDjCs+k8UbWqpHA8O8tme1gel1DV4ff0QlcTgAq0iIQ7cnc
+1VM6l9h5zEfMWRKcTe0FklimexVzRg6b53gjuK2ZtpdhYSD0C04FTBk/Az7nGtj
j5hoqpohpxGy2UPZinKREsdrupMi7hz2fFhn117tdnQVUssCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBR7EpdQBMvMMhYdI9xrHAgfxO96jjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzI0MmY4
NjItOGUxMi00ZWE2LWEwYWEtZDgzMTVhNmNiOGVhLzE1NGJlMDRjLTQyYzktM2Qy
Yy05Y2EzLWM4MmM2YjgxMzM4OS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2MyNDJmODYyLThlMTItNGVhNi1hMGFh
LWQ4MzE1YTZjYjhlYS9jMjQyZjg2Mi04ZTEyLTRlYTYtYTBhYS1kODMxNWE2Y2I4
ZWEuY3JsMB8GA1UdIwQYMBaAFBSKJJzpSMg7f43/ml+EN4iNEheQMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvYzI0MmY4NjItOGUxMi00ZWE2LWEwYWEtZDgzMTVh
NmNiOGVhLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA9EzIDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAlRRE3jJdse0XF01zHcEi9bHn45313J/N5Cb0NtP9R+fJlQh1ikTnyDKrCBgT
KqMbblZCnNYv4klArKy7ddwfmCqKxJjTEBTpmkASms2PTeRQOvU2P5+o3KlC9OTq
xfky9HM1nuiX8HHfLp7Dhp0AMaQbgBBvYP6guYNMZWI6Ee5t9jStKIzmyhxYftwq
cD6RayKlo36fwti5uJ227WRWF4zzV3IcseE2PTD4vgs1w4EgBErYHqeZvsBs++io
k5kLGXtTAwKA4pmPHWkbVRCANmarX7EsdZ5OvCs6u2MYnVutPNW5Q+JMOf/4j2Fg
S8/Ey21y3k9NcgXldlAjT7Sm4Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:55 2024 by rpki-client on console-ams.rpki-client.org