Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/d6fd106e-e9cf-3331-8ab8-57fe025a7fee.roa
File: d6fd106e-e9cf-3331-8ab8-57fe025a7fee.roa (raw, json)
Hash identifier: EUARNP9WH/2FSPYNkNhWOHFxh+CGiIBd19Rv+P+tGDQ=
Subject key identifier: CD:74:00:8F:91:82:7C:9D:63:E1:27:5A:57:8B:8B:95:ED:64:55:50
Certificate issuer: /CN=ae61ef28-fe03-45bb-a38f-17e4725b6c25
Certificate serial: 010D0C9F4328584929E3CB5748598D469057F780
Authority key identifier: AC:9C:DD:19:64:FA:91:50:77:CA:9F:DF:E1:53:16:6B:53:5A:2C:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/d6fd106e-e9cf-3331-8ab8-57fe025a7fee.roa
Signing time: Wed 12 Mar 2025 13:00:53 +0000
ROA not before: Wed 12 Mar 2025 13:00:53 +0000
ROA not after: Tue 10 Jun 2025 13:00:53 +0000
asID: 14618
IP address blocks: 216.24.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:29:e3:cb:57:48:59:8d:46:90:57:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae61ef28-fe03-45bb-a38f-17e4725b6c25
Validity
Not Before: Mar 12 13:00:53 2025 GMT
Not After : Jun 10 13:00:53 2025 GMT
Subject: CN=4cad16f9-e7b0-4ee9-a305-1ba6daa8ab2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ae:74:e9:ca:1b:2b:e5:2b:cd:48:f0:9f:f1:
c9:20:6a:3e:0e:33:34:52:7e:84:b9:49:e5:9a:7e:
64:dd:d9:a4:34:bb:2e:e1:98:41:2b:cb:d3:ad:62:
eb:f9:35:b2:0e:7a:8c:ab:35:7d:d2:79:ab:24:d3:
ec:32:4b:5d:9f:fd:02:39:67:35:97:42:63:b4:c1:
b9:ab:98:e5:03:2f:9c:39:36:d0:af:36:b1:57:71:
c5:75:d8:82:e0:b1:75:e0:63:b8:35:c9:f2:7a:82:
52:db:d4:2b:de:ca:01:9a:99:db:49:cd:ba:16:ea:
ee:e8:e4:44:60:de:0b:0b:77:4f:fb:26:c7:9f:d8:
ae:9a:b1:d0:b2:6c:48:0e:ec:49:a9:67:88:36:e1:
d8:13:20:66:23:14:d4:fb:ca:10:86:35:73:c0:cf:
c2:dd:21:33:3c:58:cb:83:01:ee:ae:dc:58:df:db:
42:7f:b2:89:f8:fe:ad:9c:51:9b:4d:32:5e:48:a7:
67:12:17:b9:81:ea:7c:51:34:69:72:ab:9d:c9:2a:
86:5b:bc:fa:56:4d:23:92:84:aa:3e:52:1e:86:90:
84:e9:7f:97:56:2c:7a:ae:01:e7:61:20:58:9e:3a:
0e:44:21:98:0d:4c:ff:b5:e1:b7:d5:4d:9c:ed:c8:
fc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:74:00:8F:91:82:7C:9D:63:E1:27:5A:57:8B:8B:95:ED:64:55:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/d6fd106e-e9cf-3331-8ab8-57fe025a7fee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/ae61ef28-fe03-45bb-a38f-17e4725b6c25.crl
X509v3 Authority Key Identifier:
keyid:AC:9C:DD:19:64:FA:91:50:77:CA:9F:DF:E1:53:16:6B:53:5A:2C:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer
sbgp-ipAddrBlock: critical
IPv4:
216.24.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:57:5c:d4:c2:b9:42:1f:f3:c2:80:8d:b9:3e:0a:b9:f0:0c:
01:bd:f9:b6:cd:06:1d:bc:ea:e5:88:92:38:1a:0d:4b:a5:5d:
8c:c6:c1:f1:e8:17:01:b7:d0:d4:bc:7d:2b:c3:20:a4:77:c0:
64:4c:fd:ff:5d:e1:ef:ce:21:36:2c:f9:f7:a6:84:cf:5f:23:
5a:30:3a:45:c4:fd:e0:26:c9:49:ca:1e:1a:6f:45:28:43:d7:
9f:dd:2f:bd:b7:bf:57:68:91:23:44:b7:fa:8c:f8:7d:ef:23:
5b:fe:64:5c:46:b3:98:20:7e:b6:a6:08:7c:ba:43:0d:f8:97:
35:eb:41:c9:0e:27:bd:b6:d2:e3:e5:ca:a7:e8:8c:2f:7f:ba:
96:34:79:96:c7:7e:a0:6d:38:89:4f:9f:83:23:19:82:b5:54:
40:58:be:e1:c7:45:db:a6:6c:79:e7:c8:c8:62:8f:3d:a0:1b:
e4:2b:73:48:52:6d:1b:8d:71:e8:d6:cd:e2:80:bf:f2:f0:ff:
c2:1c:4d:a3:3a:32:4f:8a:99:87:bf:82:86:6d:36:a7:a4:4f:
6d:33:e1:5d:f7:b0:32:cf:0b:73:c3:1d:bf:35:12:28:cf:a8:
b9:6f:fd:ce:f2:81:fc:d3:54:20:62:22:a2:60:bc:77:58:c3:
68:78:bd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:34:24 2025 by rpki-client