Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/059111c1-8037-3bc2-ad66-f0d2659067c9.roa
File: 059111c1-8037-3bc2-ad66-f0d2659067c9.roa (raw, json)
Hash identifier: 5N8/uZ8DX5O9Vg3ek7v8I0y3j2FQmS4tXAOEQrdS6dg=
Subject key identifier: 20:25:73:A3:A3:4E:8E:A9:8E:E7:75:F3:95:D7:61:20:65:D3:77:64
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926D8670914F11F624BA000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/059111c1-8037-3bc2-ad66-f0d2659067c9.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 46872
IP address blocks: 216.66.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:d8:67:09:14:f1:1f:62:4b:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=4f0206ca-81c3-476b-adf8-24cf664f4f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:c5:82:4f:77:d2:cb:10:9e:5f:31:28:a4:
f5:3a:21:2b:79:5f:9e:13:c9:32:38:a3:14:c1:0d:
bb:4d:cf:3c:70:b0:76:6f:e4:df:9b:23:92:c6:9d:
d7:f1:37:56:9a:24:70:b6:ef:e9:89:60:17:7e:da:
b0:da:6b:4c:b2:cf:f1:d1:f6:37:f9:9b:f1:12:53:
6a:d3:4a:d2:f9:4b:46:ff:58:c4:b1:ef:88:b8:28:
11:80:fa:2e:43:e0:19:6c:0a:9d:23:0e:89:c9:1b:
9f:c4:5a:e3:a5:60:65:cc:77:ee:bb:3a:20:03:75:
5d:45:ee:3d:88:09:df:39:a1:ed:18:78:8e:f9:29:
82:9c:56:32:53:05:93:20:36:01:98:57:be:16:f4:
06:bb:79:b2:d3:b1:f5:f9:bf:46:71:7d:60:38:5a:
7a:6f:57:ad:40:23:d5:2c:34:90:6e:03:d5:cf:a7:
6c:39:eb:cb:ff:50:b0:af:40:82:1f:4e:ce:14:cb:
7f:57:f4:2a:29:12:56:4d:e9:6c:1f:9f:4b:7c:90:
ee:48:ad:7a:42:c4:b4:ba:12:2f:40:6f:90:15:21:
ed:1e:91:d3:15:89:d8:7a:32:fa:a3:fd:41:97:42:
9b:55:0d:17:d9:9d:1d:ed:b2:be:77:f9:08:67:3a:
51:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:25:73:A3:A3:4E:8E:A9:8E:E7:75:F3:95:D7:61:20:65:D3:77:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/059111c1-8037-3bc2-ad66-f0d2659067c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.66.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:0d:1e:de:a6:a1:4f:25:03:b1:33:ef:33:b3:3a:c7:77:44:
a9:a9:1f:11:a1:ae:29:47:8d:3e:92:dc:4c:49:26:9e:08:a9:
5f:8d:62:00:3e:69:7a:d6:92:f0:6f:d8:e8:cf:d6:e4:c5:71:
74:bd:b7:df:31:78:6f:79:a9:d3:3c:28:3d:46:44:04:04:f0:
ef:01:fc:13:ab:8a:61:e8:f7:89:3e:51:1e:fc:68:19:82:53:
05:9a:91:13:5c:3b:f4:21:7e:d3:a8:81:67:ed:9b:94:06:6b:
6d:35:90:e3:78:61:37:13:58:c6:f6:08:7e:b5:e7:2a:43:99:
13:a5:6c:d6:cf:fc:92:0b:e9:26:a8:fe:d6:ea:22:99:f0:23:
d2:7c:f1:90:2e:b2:fb:5f:89:68:da:c0:35:6b:aa:43:52:c9:
62:62:f7:3b:ba:0a:43:e7:84:25:39:8f:64:b7:a6:5c:5f:c1:
9b:86:d0:ff:9a:ca:e3:03:c3:cc:f3:97:21:05:e1:be:3a:41:
db:5f:85:86:75:f1:33:6f:51:ea:52:83:bc:be:3b:92:c2:9b:
72:de:f6:d8:61:33:b8:2f:66:fc:c2:db:32:89:e0:5d:a1:e1:
4e:5f:5a:51:9b:5c:27:f7:33:f8:82:de:55:89:d6:ca:e9:b7:
05:f0:8c:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JthnCRTxH2JLoAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
NGYwMjA2Y2EtODFjMy00NzZiLWFkZjgtMjRjZjY2NGY0ZjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSbFgk930ssQnl8xKKT1OiEreV+eE8kyOKMU
wQ27Tc88cLB2b+TfmyOSxp3X8TdWmiRwtu/piWAXftqw2mtMss/x0fY3+ZvxElNq
00rS+UtG/1jEse+IuCgRgPouQ+AZbAqdIw6JyRufxFrjpWBlzHfuuzogA3VdRe49
iAnfOaHtGHiO+SmCnFYyUwWTIDYBmFe+FvQGu3my07H1+b9GcX1gOFp6b1etQCPV
LDSQbgPVz6dsOevL/1Cwr0CCH07OFMt/V/QqKRJWTelsH59LfJDuSK16QsS0uhIv
QG+QFSHtHpHTFYnYejL6o/1Bl0KbVQ0X2Z0d7bK+d/kIZzpRXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCAlc6OjTo6pjud185XXYSBl03dkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDU5MTExYzEtODAzNy0z
YmMyLWFkNjYtZjBkMjY1OTA2N2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EIqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADANHt6moU8lA7Ez7zOzOsd3RKmpHxGhrilHjT6S3ExJJp4IqV+NYgA+
aXrWkvBv2OjP1uTFcXS9t98xeG95qdM8KD1GRAQE8O8B/BOrimHo94k+UR78aBmC
UwWakRNcO/QhftOogWftm5QGa201kON4YTcTWMb2CH615ypDmROlbNbP/JIL6Sao
/tbqIpnwI9J88ZAusvtfiWjawDVrqkNSyWJi9zu6CkPnhCU5j2S3plxfwZuG0P+a
yuMDw8zzlyEF4b46QdtfhYZ18TNvUepSg7y+O5LCm3Le9thhM7gvZvzC2zKJ4F2h
4U5fWlGbXCf3M/iC3lWJ1srptwXwjMg=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:54:06 2025 by rpki-client