Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b59fd3ef-9c4b-3d58-bb4a-c53936bc6743.roa
File: b59fd3ef-9c4b-3d58-bb4a-c53936bc6743.roa (raw, json)
Hash identifier: OgLdr2eDuIkm/RyQhnwiPoMMSfLy16OpODSIQPccq3o=
Subject key identifier: 22:12:3F:70:88:49:00:0E:2C:15:EF:93:F6:21:C3:85:49:AD:0D:DD
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926E75AC54DD9A4F56A3040
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b59fd3ef-9c4b-3d58-bb4a-c53936bc6743.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 1492
IP address blocks: 216.66.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:e7:5a:c5:4d:d9:a4:f5:6a:30:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=b4b3234f-2df2-4fb9-a754-5a93d41f94c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:53:45:29:87:5e:ed:0f:73:04:86:da:9a:52:
7f:78:d5:6d:00:d8:29:2e:42:15:49:aa:d7:13:f6:
35:81:e6:96:4b:18:45:82:bd:d1:21:3f:2d:c7:09:
47:0a:83:99:f4:e3:a0:29:90:e5:fc:3f:c3:19:44:
a5:96:68:02:e8:ce:0a:33:99:9d:e7:cd:f6:de:2e:
06:bb:f8:d0:9f:42:d7:f7:3f:dd:b3:38:90:b0:8e:
30:71:b5:c0:21:5d:06:22:ed:c8:b8:22:af:a6:4d:
60:d5:0b:68:5b:97:36:fe:05:01:0d:a4:60:83:c0:
a1:6f:09:64:cf:19:71:85:85:b6:01:0a:12:ca:c1:
30:f6:c1:1c:75:ff:59:35:cf:5a:ba:c4:9b:11:97:
bf:c3:00:b5:4b:f9:a9:44:15:c6:dc:81:19:45:b8:
86:b3:99:f1:28:d6:0f:30:4f:b9:1b:c7:95:16:72:
22:dd:c7:f8:ed:52:6b:f1:ea:df:c4:94:61:fb:11:
eb:49:2b:73:13:0c:b5:a1:55:6d:b3:e4:a1:bd:84:
6a:0b:23:21:b4:28:de:c1:df:77:c8:2e:3e:d8:cd:
73:bd:e2:b2:ce:d0:bb:a6:6e:43:a2:a3:f1:15:b0:
17:31:00:d3:6d:0b:c8:66:90:00:01:ff:ed:1b:41:
8d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:12:3F:70:88:49:00:0E:2C:15:EF:93:F6:21:C3:85:49:AD:0D:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b59fd3ef-9c4b-3d58-bb4a-c53936bc6743.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.66.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:ef:ec:15:0f:f7:3d:f3:ac:fa:66:b0:3e:e0:12:87:47:8b:
79:f9:82:b8:6f:91:b1:54:c4:7a:33:95:9b:c9:61:9e:82:5e:
a8:83:a1:91:a0:71:1f:36:1a:52:9d:50:e3:7f:d6:2d:96:3b:
ff:9c:bf:2a:dc:8a:e4:de:13:43:8a:e2:6e:eb:53:58:18:10:
a0:5e:26:08:25:af:5c:74:ee:de:2a:97:8c:3c:c8:e9:b0:87:
e7:ef:fd:cc:12:f0:ce:55:fe:af:de:6d:7d:24:9c:cd:1e:35:
d3:c8:9d:43:ea:1e:f4:ad:97:bd:08:7f:37:25:45:de:76:10:
a4:f3:27:d0:d6:2c:08:4a:cf:5c:94:2a:21:86:81:f2:3f:cd:
49:e3:c1:00:9e:ff:f9:39:8f:7e:41:a9:02:0a:a0:9a:b9:e5:
d1:a4:06:97:72:c7:1a:c4:52:54:c6:3e:d6:3e:f1:8b:b9:3e:
01:ab:4e:b5:b6:86:7a:33:da:74:16:40:32:b5:62:05:24:f4:
ec:89:d8:45:f8:bd:48:a3:94:0e:79:ce:d2:f1:76:04:e3:71:
a8:ac:b1:04:47:8b:78:78:94:6b:af:15:73:45:f0:71:9c:65:
9b:e6:86:02:7c:1c:84:08:d3:a8:06:c6:0b:c7:9b:46:a8:08:
2a:fd:36:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JudaxU3ZpPVqMEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
YjRiMzIzNGYtMmRmMi00ZmI5LWE3NTQtNWE5M2Q0MWY5NGM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVNFKYde7Q9zBIbamlJ/eNVtANgpLkIVSarX
E/Y1geaWSxhFgr3RIT8txwlHCoOZ9OOgKZDl/D/DGUSllmgC6M4KM5md58323i4G
u/jQn0LX9z/dsziQsI4wcbXAIV0GIu3IuCKvpk1g1QtoW5c2/gUBDaRgg8Chbwlk
zxlxhYW2AQoSysEw9sEcdf9ZNc9ausSbEZe/wwC1S/mpRBXG3IEZRbiGs5nxKNYP
ME+5G8eVFnIi3cf47VJr8erfxJRh+xHrSStzEwy1oVVts+ShvYRqCyMhtCjewd93
yC4+2M1zveKyztC7pm5DoqPxFbAXMQDTbQvIZpAAAf/tG0GNYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCISP3CISQAOLBXvk/Yhw4VJrQ3dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjU5ZmQzZWYtOWM0Yi0z
ZDU4LWJiNGEtYzUzOTM2YmM2NzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EIiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACXv7BUP9z3zrPpmsD7gEodHi3n5grhvkbFUxHozlZvJYZ6CXqiDoZGg
cR82GlKdUON/1i2WO/+cvyrciuTeE0OK4m7rU1gYEKBeJgglr1x07t4ql4w8yOmw
h+fv/cwS8M5V/q/ebX0knM0eNdPInUPqHvStl70IfzclRd52EKTzJ9DWLAhKz1yU
KiGGgfI/zUnjwQCe//k5j35BqQIKoJq55dGkBpdyxxrEUlTGPtY+8Yu5PgGrTrW2
hnoz2nQWQDK1YgUk9OyJ2EX4vUijlA55ztLxdgTjcaissQRHi3h4lGuvFXNF8HGc
ZZvmhgJ8HIQI06gGxgvHm0aoCCr9NnI=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:48:44 2025 by rpki-client