Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6cf133a6-67a8-3e4e-80af-fa70c70aba7b.roa
File: 6cf133a6-67a8-3e4e-80af-fa70c70aba7b.roa (raw, json)
Hash identifier: rgY6B0/dIly65iEHeeTFDTfVEWZNA58e/2X/w2jmns8=
Subject key identifier: 20:05:5F:ED:93:EF:D2:6E:DF:BA:74:B9:5E:B5:EB:D0:7C:C8:DA:71
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F43285848BFEBA56ED508AA10BE2DA300
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6cf133a6-67a8-3e4e-80af-fa70c70aba7b.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 14618
IP address blocks: 67.217.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:a5:6e:d5:08:aa:10:be:2d:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=057d959d-6337-47c2-a1e3-6909f3084fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a7:9d:67:e5:02:80:95:70:03:dc:96:cc:66:
d6:73:fc:de:45:8d:50:36:db:96:1d:79:44:a6:88:
3d:bc:50:69:ea:8f:9e:ed:56:c1:b4:8d:bb:1b:dc:
2b:d9:a6:69:da:4c:64:f1:11:e2:ac:4a:b6:7e:60:
0d:0e:ed:a4:6a:83:3c:65:af:3e:6a:37:02:13:68:
09:28:a7:75:1b:bd:e9:86:cf:fe:20:37:72:71:d0:
41:98:42:9c:43:49:ae:38:71:f6:ec:f3:8c:db:a7:
1c:4b:bf:e6:32:3c:db:f0:5c:d9:aa:56:f0:df:45:
0f:cb:37:1a:3b:d3:11:4f:a6:f5:5e:9f:7d:be:87:
ab:76:43:c5:0c:d9:72:4d:6d:23:be:34:d0:a1:d2:
2c:ee:fc:31:0b:a7:ba:61:f5:c2:28:ca:27:8b:21:
22:25:64:4f:f2:60:0d:c3:48:68:26:78:12:5a:c6:
2a:71:3f:90:f0:df:29:ef:d9:75:26:cb:b9:a7:0c:
50:35:4e:97:9f:b3:63:35:cd:b6:63:ff:b1:db:e0:
99:df:4d:e6:28:c6:68:91:d5:c6:fa:a1:58:23:8a:
b2:a7:ba:47:b8:a0:56:a4:57:ee:3d:e2:c4:5b:5b:
4d:cd:2a:19:40:f1:c6:5a:b6:2d:ca:62:05:2d:4e:
37:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:05:5F:ED:93:EF:D2:6E:DF:BA:74:B9:5E:B5:EB:D0:7C:C8:DA:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6cf133a6-67a8-3e4e-80af-fa70c70aba7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
67.217.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:87:4e:3a:a6:78:5f:c7:6e:7d:fc:e4:1b:6c:6e:98:e1:86:
49:49:1b:28:69:8d:35:e9:87:71:51:c5:83:55:b0:ac:b2:85:
dd:cc:dc:6e:0f:4f:a3:84:78:83:26:e7:80:46:fc:76:3d:94:
f8:93:03:ab:50:51:a3:91:d4:d3:ef:9f:6c:b0:a6:1e:0d:17:
ec:56:d3:59:1a:d0:ec:08:fb:29:9b:ea:d4:8d:b7:c0:23:be:
94:ed:c3:24:14:72:5c:70:2f:9e:06:84:bf:6d:d4:54:80:f0:
b0:9a:45:de:88:83:3d:fa:f9:0c:5f:1e:5b:ca:12:45:cd:51:
ec:46:fa:c4:88:0f:cf:72:63:bf:78:88:67:c6:af:f0:fc:55:
54:09:e1:06:b2:0d:71:14:c0:21:1e:5e:02:0c:2a:fc:71:57:
45:0b:b6:60:2b:00:14:91:14:ae:cf:cd:8d:83:a5:d4:07:ce:
4d:35:b3:de:7a:e8:a4:b8:69:15:6e:b6:0e:7a:78:a8:c5:1c:
2f:fb:67:5a:7e:0f:6a:5e:cd:83:a7:20:ef:64:6a:9c:4b:68:
f8:3b:f0:b2:0a:58:1c:ba:f3:8d:58:24:29:cf:bd:91:e0:11:
5e:04:c5:9a:ec:71:fd:0b:0b:68:4a:2d:86:c3:af:28:23:da:
5d:0a:b1:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/66Vu1QiqEL4towAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
MDU3ZDk1OWQtNjMzNy00N2MyLWExZTMtNjkwOWYzMDg0ZmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqedZ+UCgJVwA9yWzGbWc/zeRY1QNtuWHXlE
pog9vFBp6o+e7VbBtI27G9wr2aZp2kxk8RHirEq2fmANDu2kaoM8Za8+ajcCE2gJ
KKd1G73phs/+IDdycdBBmEKcQ0muOHH27POM26ccS7/mMjzb8FzZqlbw30UPyzca
O9MRT6b1Xp99voerdkPFDNlyTW0jvjTQodIs7vwxC6e6YfXCKMoniyEiJWRP8mAN
w0hoJngSWsYqcT+Q8N8p79l1Jsu5pwxQNU6Xn7NjNc22Y/+x2+CZ303mKMZokdXG
+qFYI4qyp7pHuKBWpFfuPeLEW1tNzSoZQPHGWrYtymIFLU43aQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCAFX+2T79Ju37p0uV6169B8yNpxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNmNmMTMzYTYtNjdhOC0z
ZTRlLTgwYWYtZmE3MGM3MGFiYTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJuHTjqmeF/Hbn385BtsbpjhhklJGyhpjTXph3FRxYNVsKyyhd3M3G4P
T6OEeIMm54BG/HY9lPiTA6tQUaOR1NPvn2ywph4NF+xW01ka0OwI+ymb6tSNt8Aj
vpTtwyQUclxwL54GhL9t1FSA8LCaRd6Igz36+QxfHlvKEkXNUexG+sSID89yY794
iGfGr/D8VVQJ4QayDXEUwCEeXgIMKvxxV0ULtmArABSRFK7PzY2DpdQHzk01s956
6KS4aRVutg56eKjFHC/7Z1p+D2pezYOnIO9kapxLaPg78LIKWBy6841YJCnPvZHg
EV4ExZrscf0LC2hKLYbDrygj2l0KsaM=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:45:26 2025 by rpki-client