Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8ab7577-6ab3-3ba8-885e-129bbb1da814.roa
File: d8ab7577-6ab3-3ba8-885e-129bbb1da814.roa (raw, json)
Hash identifier: HTVRh2WtZ9LXhYSV95A8fISYEcxWi2c8N1nfQFBLeJ0=
Subject key identifier: E5:D2:83:EF:69:AF:B0:7C:20:CD:D3:53:7C:F1:32:75:25:81:88:31
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926BB9AF5F2258B98C29B70
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8ab7577-6ab3-3ba8-885e-129bbb1da814.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 397659
IP address blocks: 216.66.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:bb:9a:f5:f2:25:8b:98:c2:9b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=7366fe52-a0ff-41a5-bfa7-0e7e338d1417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0e:24:c7:75:a9:6c:ec:c4:74:80:cc:50:2b:
a9:66:7b:cf:89:12:e5:85:ae:8c:05:31:e8:d9:26:
52:ee:f0:c5:25:d6:29:19:27:86:89:71:4d:49:fb:
04:ec:d1:e3:cc:d8:7f:43:91:8d:50:f5:de:bd:83:
58:67:21:07:ad:f6:24:ab:29:04:19:57:cc:7f:a9:
15:5d:f6:6d:f8:37:75:4a:c6:58:d4:c1:c8:fd:dd:
56:04:4d:15:4a:84:f0:8e:40:5a:60:c6:8e:d2:29:
34:a0:aa:46:4b:07:06:6b:4d:02:d1:b8:69:85:fb:
6c:c9:ee:de:1e:35:1c:90:7f:ab:4f:09:77:bb:2a:
16:2f:ce:54:80:54:ee:9f:39:63:3a:e9:17:38:71:
ca:53:06:cd:7e:0b:cb:81:85:7c:5c:37:6d:6c:f8:
09:45:3e:c5:2b:a9:10:ce:57:ab:cf:43:7a:a0:a6:
c1:ab:9f:99:ea:d2:d2:df:df:78:9c:fb:7b:e1:22:
0b:04:dc:cf:88:dc:1f:fe:19:0c:10:6a:9d:59:b9:
7f:24:3b:29:fa:b1:13:67:98:fa:ac:c0:cf:f1:71:
9f:f6:6e:59:b8:5b:74:50:07:a3:e9:e6:b5:8b:61:
23:a3:73:a9:02:c3:07:4c:97:58:95:d2:75:28:4a:
73:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D2:83:EF:69:AF:B0:7C:20:CD:D3:53:7C:F1:32:75:25:81:88:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8ab7577-6ab3-3ba8-885e-129bbb1da814.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.66.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:bb:25:79:ef:30:9f:19:60:a0:62:33:6e:c6:b5:52:46:b6:
dc:f4:97:44:b9:7f:14:87:77:11:b7:6a:46:e6:7a:69:9d:32:
a0:2c:e2:a3:dc:c1:a1:f9:9c:25:89:ca:d7:91:99:e9:d1:f9:
37:ca:8e:21:1a:58:b7:0d:e7:ae:d1:8f:88:ce:06:e5:da:b4:
64:40:e6:90:e3:08:98:b9:47:bb:9f:dd:56:20:ce:2a:11:77:
d2:73:00:f3:fa:cb:80:a5:7a:b0:d1:8a:04:dd:cd:f1:fb:b8:
6b:1b:a2:b0:38:a1:3d:a9:67:bd:ff:33:5b:d2:db:dc:d8:d3:
fe:24:d6:7c:45:af:dc:60:d1:a0:e1:11:ff:94:5d:29:69:1d:
da:69:e6:21:74:59:dd:b1:ff:95:63:fb:00:51:6a:b7:27:19:
23:6d:28:64:7e:dd:5f:95:1e:bb:bb:7e:8b:9a:c0:66:55:f2:
56:cf:25:57:bd:1a:14:bd:5c:c9:88:15:8a:31:b0:97:2c:a2:
be:25:b2:4c:c5:94:93:93:e1:66:2d:63:ca:96:4d:20:78:15:
51:a0:2b:1f:17:26:4c:ac:56:83:83:0a:24:c1:0b:01:6c:6f:
2a:e6:54:41:a0:8a:c6:02:40:98:1d:e1:58:c1:9b:9a:b8:bc:
bb:b5:72:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5Jrua9fIli5jCm3AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
NzM2NmZlNTItYTBmZi00MWE1LWJmYTctMGU3ZTMzOGQxNDE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ4kx3WpbOzEdIDMUCupZnvPiRLlha6MBTHo
2SZS7vDFJdYpGSeGiXFNSfsE7NHjzNh/Q5GNUPXevYNYZyEHrfYkqykEGVfMf6kV
XfZt+Dd1SsZY1MHI/d1WBE0VSoTwjkBaYMaO0ik0oKpGSwcGa00C0bhphftsye7e
HjUckH+rTwl3uyoWL85UgFTunzljOukXOHHKUwbNfgvLgYV8XDdtbPgJRT7FK6kQ
zlerz0N6oKbBq5+Z6tLS3994nPt74SILBNzPiNwf/hkMEGqdWbl/JDsp+rETZ5j6
rMDP8XGf9m5ZuFt0UAej6ea1i2Ejo3OpAsMHTJdYldJ1KEpzFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOXSg+9pr7B8IM3TU3zxMnUlgYgxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDhhYjc1NzctNmFiMy0z
YmE4LTg4NWUtMTI5YmJiMWRhODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EIqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAES7JXnvMJ8ZYKBiM27GtVJGttz0l0S5fxSHdxG3akbmemmdMqAs4qPc
waH5nCWJyteRmenR+TfKjiEaWLcN567Rj4jOBuXatGRA5pDjCJi5R7uf3VYgzioR
d9JzAPP6y4ClerDRigTdzfH7uGsborA4oT2pZ73/M1vS29zY0/4k1nxFr9xg0aDh
Ef+UXSlpHdpp5iF0Wd2x/5Vj+wBRarcnGSNtKGR+3V+VHru7fouawGZV8lbPJVe9
GhS9XMmIFYoxsJcsor4lskzFlJOT4WYtY8qWTSB4FVGgKx8XJkysVoODCiTBCwFs
byrmVEGgisYCQJgd4VjBm5q4vLu1cvs=
-----END CERTIFICATE-----
Generated at Wed Apr 9 03:00:13 2025 by rpki-client