Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/d276ac5d-18b3-388d-9bdf-4f7aca4cabb5.roa
File: d276ac5d-18b3-388d-9bdf-4f7aca4cabb5.roa (raw, json)
Hash identifier: aCrcd8Ccl7jP7BRwNvpo7gKDpJojjYnlEDrXG6j4tqw=
Subject key identifier: 85:B5:B6:8F:5E:C0:36:A2:F4:E0:3B:23:6F:02:4D:BF:B7:54:82:DB
Certificate issuer: /CN=ae61ef28-fe03-45bb-a38f-17e4725b6c25
Certificate serial: 010D0C9F4328584929E3CB37D64103CB324BA000
Authority key identifier: AC:9C:DD:19:64:FA:91:50:77:CA:9F:DF:E1:53:16:6B:53:5A:2C:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/d276ac5d-18b3-388d-9bdf-4f7aca4cabb5.roa
Signing time: Wed 12 Mar 2025 13:00:53 +0000
ROA not before: Wed 12 Mar 2025 13:00:53 +0000
ROA not after: Tue 10 Jun 2025 13:00:53 +0000
asID: 16509
IP address blocks: 216.24.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:29:e3:cb:37:d6:41:03:cb:32:4b:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae61ef28-fe03-45bb-a38f-17e4725b6c25
Validity
Not Before: Mar 12 13:00:53 2025 GMT
Not After : Jun 10 13:00:53 2025 GMT
Subject: CN=ac02e8d3-1a53-4e8f-939a-c81f6fe8d545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:36:3e:2b:b6:49:44:19:6b:51:02:3f:9d:f6:
22:1e:c9:e5:53:d9:e0:f0:f2:66:db:54:c7:c9:d3:
b7:90:f1:8f:03:40:23:e3:9f:dc:88:1e:9c:2e:03:
27:af:2e:bc:6c:42:c0:b9:f1:ed:ae:41:14:3e:17:
3b:1e:9d:c9:0d:ad:d6:a6:36:8c:f5:6a:22:71:4e:
7f:f5:68:1b:d9:31:39:7a:da:55:cf:d7:48:6e:39:
60:b3:3a:1d:8c:00:3c:cc:e8:5e:0d:2d:62:11:98:
00:08:77:03:d2:0c:6f:b0:5e:b3:29:8a:5d:13:9f:
d5:27:82:6e:cb:a2:ef:94:15:3f:80:4f:4f:5f:59:
58:47:27:b2:a9:df:d0:ea:90:1c:b1:63:01:79:45:
77:12:57:c8:ed:5f:17:07:32:58:bf:d2:d5:67:47:
ff:ef:26:18:68:73:1a:dd:80:57:a8:fe:91:f0:31:
89:98:e4:b7:91:ff:77:31:b3:c4:d3:82:13:c3:a7:
17:f5:8e:3c:5f:39:e2:0b:9e:0e:ad:5a:d6:3c:10:
c3:96:31:c3:6b:5d:28:28:6a:a9:1d:a9:d0:5a:97:
c8:03:a3:8d:d9:34:5d:c0:ec:47:8a:94:53:e8:6e:
87:28:27:b9:69:38:76:77:16:d4:cd:ad:91:d1:ff:
ce:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B5:B6:8F:5E:C0:36:A2:F4:E0:3B:23:6F:02:4D:BF:B7:54:82:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/d276ac5d-18b3-388d-9bdf-4f7aca4cabb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/ae61ef28-fe03-45bb-a38f-17e4725b6c25.crl
X509v3 Authority Key Identifier:
keyid:AC:9C:DD:19:64:FA:91:50:77:CA:9F:DF:E1:53:16:6B:53:5A:2C:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer
sbgp-ipAddrBlock: critical
IPv4:
216.24.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:1f:e2:5e:d3:6d:4d:bd:41:b1:40:0c:45:c6:fd:f2:13:45:
a0:68:7b:3f:e2:2d:23:87:1f:1f:2e:60:a0:45:1f:1a:aa:54:
9d:86:cd:6e:e3:1e:09:31:d3:13:23:19:db:82:64:f3:90:b2:
3c:f3:f0:c8:0b:c7:c6:9f:66:f4:9e:38:b5:74:69:f4:3d:12:
08:6f:99:45:f6:30:e5:a3:1c:d5:ae:11:dd:eb:27:1c:f1:ee:
c9:02:30:13:e8:da:c7:f0:d7:ee:e3:c1:90:af:ab:9b:fd:0c:
c3:d8:df:02:8d:24:03:0c:05:75:73:a2:c8:3a:54:9a:fe:fa:
2d:47:e6:97:ed:67:35:6e:b7:64:67:f3:6c:bb:e5:4d:d7:1c:
f6:70:13:55:d8:55:f9:8e:cb:5c:40:5b:7f:fe:82:4b:8b:32:
0a:26:d4:f8:a1:9f:d8:21:d3:30:fc:45:22:de:f0:db:c1:74:
7d:7a:92:0f:ef:aa:17:3b:6d:04:fb:2c:80:62:da:4e:7e:96:
e7:47:17:fb:8a:c6:64:f7:60:5e:06:83:6c:fb:99:3f:57:0a:
3e:f7:9f:df:ed:d0:80:74:c6:cd:b0:12:16:cd:10:38:e0:95:
cb:fd:dc:0b:1b:e9:88:79:be:0c:5a:06:c5:2d:96:46:b5:77:
ca:56:b2:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkp48s31kEDyzJLoAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWU2MWVmMjgtZmUwMy00NWJiLWEzOGYtMTdlNDcyNWI2
YzI1MB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk
YWMwMmU4ZDMtMWE1My00ZThmLTkzOWEtYzgxZjZmZThkNTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizY+K7ZJRBlrUQI/nfYiHsnlU9ng8PJm21TH
ydO3kPGPA0Aj45/ciB6cLgMnry68bELAufHtrkEUPhc7Hp3JDa3WpjaM9WoicU5/
9Wgb2TE5etpVz9dIbjlgszodjAA8zOheDS1iEZgACHcD0gxvsF6zKYpdE5/VJ4Ju
y6LvlBU/gE9PX1lYRyeyqd/Q6pAcsWMBeUV3ElfI7V8XBzJYv9LVZ0f/7yYYaHMa
3YBXqP6R8DGJmOS3kf93MbPE04ITw6cX9Y48XzniC54OrVrWPBDDljHDa10oKGqp
HanQWpfIA6ON2TRdwOxHipRT6G6HKCe5aTh2dxbUza2R0f/ONwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIW1to9ewDai9OA7I28CTb+3VILbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZTYx
ZWYyOC1mZTAzLTQ1YmItYTM4Zi0xN2U0NzI1YjZjMjUvZDI3NmFjNWQtMThiMy0z
ODhkLTliZGYtNGY3YWNhNGNhYmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWU2MWVmMjgtZmUwMy00NWJiLWEz
OGYtMTdlNDcyNWI2YzI1L2FlNjFlZjI4LWZlMDMtNDViYi1hMzhmLTE3ZTQ3MjVi
NmMyNS5jcmwwHwYDVR0jBBgwFoAUrJzdGWT6kVB3yp/f4VMWa1NaLLYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hZTYxZWYyOC1mZTAzLTQ1YmItYTM4Zi0xN2U0
NzI1YjZjMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Bg8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHEf4l7TbU29QbFADEXG/fITRaBoez/iLSOHHx8uYKBFHxqqVJ2GzW7j
Hgkx0xMjGduCZPOQsjzz8MgLx8afZvSeOLV0afQ9EghvmUX2MOWjHNWuEd3rJxzx
7skCMBPo2sfw1+7jwZCvq5v9DMPY3wKNJAMMBXVzosg6VJr++i1H5pftZzVut2Rn
82y75U3XHPZwE1XYVfmOy1xAW3/+gkuLMgom1Pihn9gh0zD8RSLe8NvBdH16kg/v
qhc7bQT7LIBi2k5+ludHF/uKxmT3YF4Gg2z7mT9XCj73n9/t0IB0xs2wEhbNEDjg
lcv93Asb6Yh5vgxaBsUtlka1d8pWsm8=
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:18:57 2025 by rpki-client