Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/3cb7fab8-7537-3a90-a460-36313c91e1b5.roa
File: 3cb7fab8-7537-3a90-a460-36313c91e1b5.roa (raw, json)
Hash identifier: LCB0SCzJm7VzoT1+A0cNUlEPBaDwErbHqDO6YWSTQZU=
Subject key identifier: AC:D6:9A:0C:C7:E7:49:93:8F:9B:A9:05:DF:41:F0:84:72:2F:C8:C4
Certificate issuer: /CN=2059c963-068e-4fba-a7d6-639c3f36a91b
Certificate serial: 010D0C9F432858487CEB31C7D3D22B02FDDBF4EC
Authority key identifier: 58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/3cb7fab8-7537-3a90-a460-36313c91e1b5.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 216.247.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:31:c7:d3:d2:2b:02:fd:db:f4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2059c963-068e-4fba-a7d6-639c3f36a91b
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=c46f4701-d70a-4950-b0b8-542386110191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5a:69:76:fc:43:c4:37:75:b7:c0:7d:40:97:
a6:b2:f3:c4:c8:19:fb:f2:c7:c0:ab:4a:4b:b7:67:
87:54:b2:2f:cb:aa:08:cb:e9:96:34:32:c8:38:84:
61:58:29:25:65:84:1e:ad:3e:53:d2:88:b8:ba:c7:
66:ee:0f:86:42:31:30:91:3e:d0:72:a4:ae:d3:86:
b4:d5:71:38:34:ba:d7:8e:7d:f1:ce:72:d8:ec:44:
2d:f9:b5:93:69:3f:40:58:e7:8b:3d:7f:7d:76:6e:
4c:16:72:c0:c6:75:68:a6:66:94:b1:b9:89:18:d6:
9f:e0:93:85:04:cb:68:67:56:65:a0:93:85:e2:47:
20:35:d8:74:38:27:0a:ec:c1:85:ac:2c:7e:76:2e:
03:66:e7:f2:94:c6:03:e6:51:dd:a4:3b:ee:db:72:
f9:12:1e:0f:6e:b8:4a:e1:b8:c5:22:1d:d5:b2:9c:
63:d7:9d:72:cc:84:07:91:f0:81:c6:b2:30:62:c4:
1e:04:16:5c:52:b9:ce:e7:bc:72:cf:8f:18:91:0d:
18:7d:0c:67:79:86:12:e1:07:07:c6:30:26:0f:ed:
4d:3b:db:a5:2a:43:e8:d6:79:05:95:61:c0:51:a1:
11:49:e9:7d:e8:f5:7e:a1:ef:37:fe:81:a9:68:76:
1e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D6:9A:0C:C7:E7:49:93:8F:9B:A9:05:DF:41:F0:84:72:2F:C8:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/3cb7fab8-7537-3a90-a460-36313c91e1b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.crl
X509v3 Authority Key Identifier:
keyid:58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer
sbgp-ipAddrBlock: critical
IPv4:
216.247.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:e4:b8:76:8f:31:91:f5:31:c7:46:6a:c9:7f:a5:4d:bb:5c:
24:ed:ae:41:75:bd:9a:42:71:bf:81:f6:b2:a9:b5:7d:5f:b8:
3d:54:84:7f:fa:8f:2d:fd:9e:b2:2f:ba:91:fa:37:08:ec:88:
35:59:4b:4e:6c:bb:14:59:c1:ce:6f:4a:fd:5c:19:a3:7c:ba:
8b:dd:43:1c:ab:f6:ee:37:6e:07:4b:a5:36:2f:a7:88:9f:e7:
f2:c1:5c:ec:9d:d8:7e:ed:18:1d:ed:56:90:c2:22:f9:36:13:
28:be:8f:7e:dc:6a:30:0f:11:56:99:79:89:b4:98:7d:c3:e4:
a6:03:a9:d9:72:37:40:42:89:ff:71:5b:3f:b2:7d:e6:c9:ae:
65:26:80:77:59:d6:21:38:0d:85:4b:f0:35:e5:dc:b6:71:b4:
27:56:db:75:eb:e5:de:06:58:b3:1b:3c:b5:71:af:18:59:b3:
e6:4c:73:6a:98:88:bf:76:77:dc:d1:ab:61:e7:fe:cf:20:0e:
5c:54:a9:0f:8f:21:d7:5a:3d:87:aa:65:38:6b:66:3f:c0:b1:
46:47:5a:54:35:39:91:ab:d0:03:5a:38:b6:d7:d6:ff:a4:d2:
88:8e:f3:9b:a8:83:53:21:9e:5f:02:d6:10:26:81:00:ce:60:
b9:1d:3e:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh86zHH09IrAv3b9OwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA1OWM5NjMtMDY4ZS00ZmJhLWE3ZDYtNjM5YzNmMzZh
OTFiMB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
YzQ2ZjQ3MDEtZDcwYS00OTUwLWIwYjgtNTQyMzg2MTEwMTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VppdvxDxDd1t8B9QJemsvPEyBn78sfAq0pL
t2eHVLIvy6oIy+mWNDLIOIRhWCklZYQerT5T0oi4usdm7g+GQjEwkT7QcqSu04a0
1XE4NLrXjn3xznLY7EQt+bWTaT9AWOeLPX99dm5MFnLAxnVopmaUsbmJGNaf4JOF
BMtoZ1ZloJOF4kcgNdh0OCcK7MGFrCx+di4DZufylMYD5lHdpDvu23L5Eh4PbrhK
4bjFIh3Vspxj151yzIQHkfCBxrIwYsQeBBZcUrnO57xyz48YkQ0YfQxneYYS4QcH
xjAmD+1NO9ulKkPo1nkFlWHAUaERSel96PV+oe83/oGpaHYeuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKzWmgzH50mTj5upBd9B8IRyL8jEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDU5
Yzk2My0wNjhlLTRmYmEtYTdkNi02MzljM2YzNmE5MWIvM2NiN2ZhYjgtNzUzNy0z
YTkwLWE0NjAtMzYzMTNjOTFlMWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA1OWM5NjMtMDY4ZS00ZmJhLWE3
ZDYtNjM5YzNmMzZhOTFiLzIwNTljOTYzLTA2OGUtNGZiYS1hN2Q2LTYzOWMzZjM2
YTkxYi5jcmwwHwYDVR0jBBgwFoAUWNZYCwcsYV693v/1IVy0dP6S2y0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDU5Yzk2My0wNjhlLTRmYmEtYTdkNi02Mzlj
M2YzNmE5MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PfsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAXkuHaPMZH1McdGasl/pU27XCTtrkF1vZpCcb+B9rKptX1fuD1UhH/6
jy39nrIvupH6NwjsiDVZS05suxRZwc5vSv1cGaN8uovdQxyr9u43bgdLpTYvp4if
5/LBXOyd2H7tGB3tVpDCIvk2Eyi+j37cajAPEVaZeYm0mH3D5KYDqdlyN0BCif9x
Wz+yfebJrmUmgHdZ1iE4DYVL8DXl3LZxtCdW23Xr5d4GWLMbPLVxrxhZs+ZMc2qY
iL92d9zRq2Hn/s8gDlxUqQ+PIddaPYeqZThrZj/AsUZHWlQ1OZGr0ANaOLbX1v+k
0oiO85uog1Mhnl8C1hAmgQDOYLkdPrI=
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:13:54 2025 by rpki-client