Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/15df6323-166d-36ee-90e1-6f182912f6ef.roa
File: 15df6323-166d-36ee-90e1-6f182912f6ef.roa (raw, json)
Hash identifier: euLyitbKEZqiwe/EWzTpM9f7FEdTKsVR5EBNqLJf5tI=
Subject key identifier: C1:E7:AF:BF:0C:BB:B7:75:8C:0F:FF:41:09:E2:45:D0:E5:D6:D7:64
Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial: 010D0C9F432858491D718A570032B7FD0FE3EF80
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/15df6323-166d-36ee-90e1-6f182912f6ef.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 19107
IP address blocks: 68.235.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:8a:57:00:32:b7:fd:0f:e3:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=9674b54f-3e47-471d-8ec9-6b8a1dcf7640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4b:16:9c:a5:86:c9:8e:d2:ee:c5:f6:ed:bd:
b4:96:a8:29:d0:a2:ff:8c:b2:0f:f7:5b:02:84:34:
72:12:cb:92:59:22:87:28:24:96:c3:a1:a2:31:6e:
ba:52:33:74:d5:99:b6:08:b1:fa:60:94:a7:22:b8:
c3:a1:f1:1f:a4:20:3f:18:9a:5b:8f:b3:d7:0d:a1:
06:8d:03:31:1e:7a:cd:07:33:19:86:4b:ed:a3:73:
fd:e2:c3:37:28:cc:63:ce:81:9f:39:5e:db:0f:ab:
26:e6:c6:e2:99:15:78:30:ae:b5:61:41:75:37:a4:
5d:59:46:9e:35:3e:45:d3:58:ed:da:40:eb:b2:b8:
13:a0:c9:bc:36:b1:7b:ab:89:aa:2d:c5:87:30:c4:
4b:04:74:37:6a:7f:f8:cb:e0:b1:c3:5e:f6:a8:27:
60:1a:af:27:6d:c4:5f:38:93:16:0c:b8:46:9a:50:
f7:39:83:ea:d6:02:2f:cb:65:7c:90:31:44:1f:48:
5d:7f:43:4e:05:a2:d0:8d:20:e6:bc:4f:08:fe:e5:
b4:2c:34:a9:08:1b:45:57:d2:7f:e2:e4:ce:07:58:
fe:00:90:05:e4:21:fd:d1:c6:90:d8:3d:f3:54:76:
a5:08:7e:91:0b:b3:57:03:3f:94:22:c5:33:66:cc:
91:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E7:AF:BF:0C:BB:B7:75:8C:0F:FF:41:09:E2:45:D0:E5:D6:D7:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/15df6323-166d-36ee-90e1-6f182912f6ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
X509v3 Authority Key Identifier:
keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
sbgp-ipAddrBlock: critical
IPv4:
68.235.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:a0:93:cd:9d:3f:89:b3:44:9f:a9:48:5e:c2:82:6d:bb:ad:
a4:8a:49:a1:a1:d9:36:07:37:16:94:3c:b2:48:2a:f0:9c:9e:
97:f3:db:34:90:1b:9b:43:43:44:ab:62:7e:5a:86:f0:c8:ac:
0c:00:3a:cc:b1:d2:86:a3:90:56:16:59:87:b0:13:4f:16:99:
c3:49:d9:9a:f0:cf:1f:75:dd:3b:77:a6:47:71:6e:50:03:1b:
f1:e7:b0:8c:88:e8:88:56:63:1b:c6:8e:0b:e1:17:e0:4b:b3:
f4:8e:16:12:40:b7:f8:b8:49:3b:9d:64:7c:de:90:76:6a:f8:
f4:62:8c:b2:7a:1e:ac:93:b1:be:32:0f:a8:97:ca:e0:0b:5d:
17:ed:bd:10:ed:6e:b1:64:4b:02:ce:98:da:c8:b3:00:2c:10:
dd:cd:6f:67:54:c4:2d:07:34:ae:75:ef:69:68:cd:99:94:34:
cf:1e:d6:f7:14:64:1d:6b:56:fa:6f:7d:cc:51:22:9b:ed:d1:
f6:42:6d:9b:25:cc:ec:e1:37:88:d0:57:2f:4c:77:bf:39:61:
92:31:57:55:e7:74:09:b9:1f:53:b8:c4:f9:14:95:b3:3b:ab:
48:9b:05:a2:6d:1a:70:05:72:5f:4f:fc:57:89:c4:bb:a1:10:
a2:17:a8:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcYpXADK3/Q/j74AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2
ODZiMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk
OTY3NGI1NGYtM2U0Ny00NzFkLThlYzktNmI4YTFkY2Y3NjQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEsWnKWGyY7S7sX27b20lqgp0KL/jLIP91sC
hDRyEsuSWSKHKCSWw6GiMW66UjN01Zm2CLH6YJSnIrjDofEfpCA/GJpbj7PXDaEG
jQMxHnrNBzMZhkvto3P94sM3KMxjzoGfOV7bD6sm5sbimRV4MK61YUF1N6RdWUae
NT5F01jt2kDrsrgToMm8NrF7q4mqLcWHMMRLBHQ3an/4y+Cxw172qCdgGq8nbcRf
OJMWDLhGmlD3OYPq1gIvy2V8kDFEH0hdf0NOBaLQjSDmvE8I/uW0LDSpCBtFV9J/
4uTOB1j+AJAF5CH90caQ2D3zVHalCH6RC7NXAz+UIsUzZsyR2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMHnr78Mu7d1jA//QQniRdDl1tdkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz
YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvMTVkZjYzMjMtMTY2ZC0z
NmVlLTkwZTEtNmYxODI5MTJmNmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3
M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh
Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2
NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG+gk82dP4mzRJ+pSF7Cgm27raSKSaGh2TYHNxaUPLJIKvCcnpfz2zSQ
G5tDQ0SrYn5ahvDIrAwAOsyx0oajkFYWWYewE08WmcNJ2Zrwzx913Tt3pkdxblAD
G/HnsIyI6IhWYxvGjgvhF+BLs/SOFhJAt/i4STudZHzekHZq+PRijLJ6HqyTsb4y
D6iXyuALXRftvRDtbrFkSwLOmNrIswAsEN3Nb2dUxC0HNK5172lozZmUNM8e1vcU
ZB1rVvpvfcxRIpvt0fZCbZslzOzhN4jQVy9Md785YZIxV1XndAm5H1O4xPkUlbM7
q0ibBaJtGnAFcl9P/FeJxLuhEKIXqLQ=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:32 2025 by rpki-client