Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/7f3d8716-5084-3bfc-ba53-053fa3abb716.roa
File: 7f3d8716-5084-3bfc-ba53-053fa3abb716.roa (raw, json)
Hash identifier: BjuH9nQ8IMDUW8yFXh+NQC75kBQLcMevzZswtahpi8Y=
Subject key identifier: 25:0B:75:FC:F5:07:E8:8D:6B:F8:37:9B:03:EC:DC:80:73:35:3A:C8
Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial: 010D0C9F432858491AA6C7A67EAAAACF3D103C80
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/7f3d8716-5084-3bfc-ba53-053fa3abb716.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 394708
IP address blocks: 216.255.60.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:c7:a6:7e:aa:aa:cf:3d:10:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=314a2a95-0c4d-46b2-bdf1-44cc51dc9d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:76:a5:37:2c:d3:1c:1d:92:b0:11:c1:13:
c2:39:72:f5:fe:eb:97:04:24:77:0d:98:22:d7:f7:
09:02:b2:ee:1b:0e:40:1b:34:05:c4:ad:0b:88:80:
92:89:75:91:e3:09:40:1b:b2:5c:02:34:fd:d9:05:
49:66:21:23:ed:ce:e2:d8:4b:1c:35:c3:90:c8:0a:
63:fd:1b:d9:6c:1f:ec:bc:e4:d8:6a:12:8c:20:bf:
42:d2:21:9d:b8:e5:ce:28:81:1a:0e:fd:f3:83:52:
d2:c1:58:3d:51:fd:44:23:a8:e3:ba:02:64:e8:13:
bf:ec:36:3e:4c:1a:b8:7a:ef:49:82:ee:f6:10:53:
b6:40:80:3b:a0:2a:fa:7b:3e:30:ff:e2:11:12:3b:
f8:2f:5b:c0:df:09:95:28:e6:3d:10:71:b7:b8:b3:
43:d0:f5:38:01:c9:90:4d:41:29:62:f2:38:d8:3c:
fc:75:2a:fe:6a:e3:74:40:60:43:da:76:bc:f2:e0:
c4:a0:63:6a:66:f6:1f:b3:20:0e:de:4e:fb:be:f1:
38:7d:94:63:bd:32:62:83:2d:50:b6:61:50:cf:a2:
96:5c:c7:f4:dd:4e:4e:87:7b:b7:64:73:07:7e:4b:
96:9c:43:b3:00:f5:fd:4d:c6:8f:4c:88:8c:1a:cf:
28:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0B:75:FC:F5:07:E8:8D:6B:F8:37:9B:03:EC:DC:80:73:35:3A:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/7f3d8716-5084-3bfc-ba53-053fa3abb716.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
X509v3 Authority Key Identifier:
keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
sbgp-ipAddrBlock: critical
IPv4:
216.255.60.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:71:b9:a3:44:c9:cd:d7:0c:6d:c8:ec:2a:3f:dd:65:74:08:
76:95:5e:77:0e:5c:6f:e7:3c:d7:5f:b9:dd:31:f7:db:6b:51:
14:a4:f1:30:14:bd:34:83:cc:b5:be:cb:7e:72:ab:47:da:e2:
59:18:c0:a4:7d:a8:e8:b9:d0:98:2c:e3:a7:1e:51:48:bf:e4:
40:98:0c:d8:f6:c0:0d:58:0f:30:ab:64:fe:1f:6e:fa:33:d7:
17:9c:19:e8:75:1f:49:92:76:18:47:f7:40:6c:e3:17:db:28:
95:62:52:3d:7f:b4:35:5e:b1:cc:39:80:c8:89:60:0c:59:c3:
9d:d0:46:fc:dd:4f:7a:c0:79:5c:d7:f3:aa:36:02:0f:c7:ec:
6d:05:5f:33:19:17:10:73:6a:48:38:4c:b2:5d:67:16:39:d6:
58:2a:00:c7:53:3c:fa:c7:95:b0:06:6c:23:80:c4:09:fc:a1:
12:28:88:11:70:0c:ca:b3:df:8c:20:b5:d5:b8:2b:0a:c8:9c:
95:db:ea:13:89:02:49:fa:99:0e:7d:66:49:e1:8d:34:df:4f:
b5:b7:da:9d:66:c4:0c:09:b0:3c:6b:71:f1:b9:8b:00:5e:10:
b6:df:54:68:be:8d:e4:79:43:7b:f8:72:ef:09:78:96:a2:00:
d6:49:76:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkapsemfqqqzz0QPIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk
N2ZiMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk
MzE0YTJhOTUtMGM0ZC00NmIyLWJkZjEtNDRjYzUxZGM5ZDkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6Z2pTcs0xwdkrARwRPCOXL1/uuXBCR3DZgi
1/cJArLuGw5AGzQFxK0LiICSiXWR4wlAG7JcAjT92QVJZiEj7c7i2EscNcOQyApj
/RvZbB/svOTYahKMIL9C0iGduOXOKIEaDv3zg1LSwVg9Uf1EI6jjugJk6BO/7DY+
TBq4eu9Jgu72EFO2QIA7oCr6ez4w/+IREjv4L1vA3wmVKOY9EHG3uLND0PU4AcmQ
TUEpYvI42Dz8dSr+auN0QGBD2na88uDEoGNqZvYfsyAO3k77vvE4fZRjvTJigy1Q
tmFQz6KWXMf03U5Oh3u3ZHMHfkuWnEOzAPX9TcaPTIiMGs8odQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCULdfz1B+iNa/g3mwPs3IBzNTrIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2
ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvN2YzZDg3MTYtNTA4NC0z
YmZjLWJhNTMtMDUzZmEzYWJiNzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl
ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1
ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1
YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2P88MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAERxuaNEyc3XDG3I7Co/3WV0CHaVXncOXG/nPNdfud0x99trURSk8TAU
vTSDzLW+y35yq0fa4lkYwKR9qOi50Jgs46ceUUi/5ECYDNj2wA1YDzCrZP4fbvoz
1xecGeh1H0mSdhhH90Bs4xfbKJViUj1/tDVescw5gMiJYAxZw53QRvzdT3rAeVzX
86o2Ag/H7G0FXzMZFxBzakg4TLJdZxY51lgqAMdTPPrHlbAGbCOAxAn8oRIoiBFw
DMqz34wgtdW4KwrInJXb6hOJAkn6mQ59ZknhjTTfT7W32p1mxAwJsDxrcfG5iwBe
ELbfVGi+jeR5Q3v4cu8JeJaiANZJdvg=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:03 2025 by rpki-client