Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/c8effb7c-3ff5-367a-9768-2bfe031beb26.roa
File: c8effb7c-3ff5-367a-9768-2bfe031beb26.roa (raw, json)
Hash identifier: bMkKvzq5ZFJRFRXgyAl/gQvzNSaMeyu5iIqa+bqnmR4=
Subject key identifier: 16:0C:7E:FC:B1:25:A5:F8:36:A8:B2:4B:B6:DA:5B:67:2D:D9:F4:2E
Certificate issuer: /CN=f4f85718-cda0-442f-9727-709a536e1e27
Certificate serial: 010D0C9F43285848100A7BF5A7AF80FC674F13C0
Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/c8effb7c-3ff5-367a-9768-2bfe031beb26.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 6639
IP address blocks: 209.27.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:7b:f5:a7:af:80:fc:67:4f:13:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=12202c16-4462-4669-bdc2-ce580ee4d5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:61:b6:eb:7a:e3:ff:95:80:39:63:24:c0:cc:
ae:fd:75:ef:5e:a9:ff:ed:a6:7b:1f:65:b1:46:72:
3b:3d:31:fb:af:99:60:55:fe:ad:0e:94:aa:de:70:
82:bf:4b:4e:a6:ea:06:39:6a:8d:50:8e:84:14:29:
1a:ab:7f:64:82:a5:04:1c:19:27:02:84:47:31:f8:
08:ad:7d:13:9d:19:69:50:43:b1:4c:7c:14:46:29:
b1:65:b8:a4:46:89:a5:9e:84:ab:3a:83:99:01:5e:
c6:a5:df:e8:49:ea:02:4c:7a:a2:94:9a:c2:f3:a0:
27:52:f6:2d:0e:d1:a8:3a:8b:07:ce:cd:23:2d:29:
e9:54:da:91:d2:4f:70:c7:02:68:44:52:d9:e6:42:
13:14:2c:0f:fb:b0:5f:7f:1a:cd:7a:b0:2d:68:54:
23:38:5b:c4:28:73:d5:ec:dd:2c:ff:f0:e8:1a:ef:
e5:49:cd:fd:49:b1:9c:69:49:07:13:7e:81:08:a4:
d9:7b:14:c1:47:26:3b:cc:2b:e3:a1:17:c6:54:12:
77:77:99:5f:6c:be:41:22:f1:24:fb:da:cc:84:32:
5c:2a:d3:ba:52:02:1b:5f:14:a5:51:33:b3:c7:25:
87:65:e0:00:69:7e:b0:40:36:2f:51:a8:d0:47:9e:
22:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0C:7E:FC:B1:25:A5:F8:36:A8:B2:4B:B6:DA:5B:67:2D:D9:F4:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/c8effb7c-3ff5-367a-9768-2bfe031beb26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl
X509v3 Authority Key Identifier:
keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
sbgp-ipAddrBlock: critical
IPv4:
209.27.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:2a:a9:19:68:9d:ac:fd:04:82:73:cb:76:ae:23:a8:06:2a:
0d:67:85:50:01:86:a0:22:33:92:2f:05:e2:11:3c:89:34:45:
d5:e5:90:94:af:42:7c:c5:ed:14:55:d9:36:94:cc:df:26:56:
9a:12:9f:62:2e:0b:f5:6a:91:e2:97:2d:6a:ee:35:16:f9:a0:
e7:16:60:bf:e6:5e:19:51:38:67:5e:61:94:5a:28:8e:31:78:
e5:42:05:2d:5b:c6:7d:40:12:83:e1:8c:b0:af:b1:ad:2d:10:
a9:3b:09:56:af:b2:9a:6d:18:26:f7:b6:7e:d0:65:37:fb:1f:
cd:54:a7:d5:10:32:c6:4b:2f:68:c3:b7:71:29:a9:81:0c:6b:
dc:84:df:c5:02:2c:53:93:65:72:72:be:90:fd:1a:e0:cd:28:
88:07:df:42:6a:e8:69:72:41:ee:bb:13:8e:db:af:da:fc:0d:
83:44:0d:be:5c:dd:65:6a:3d:58:55:68:59:b2:78:c2:3a:0c:
4a:b3:66:e5:c5:12:c4:7f:fd:ab:29:db:00:62:91:56:d5:68:
15:5c:4b:97:10:6c:78:b2:71:ef:69:d3:fd:4f:73:fb:2b:b1:
cb:86:b1:6a:b8:b2:75:8f:a1:2b:b3:44:4e:b3:e1:76:31:78:
35:9d:71:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgQCnv1p6+A/GdPE8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjRmODU3MTgtY2RhMC00NDJmLTk3MjctNzA5YTUzNmUx
ZTI3MB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk
MTIyMDJjMTYtNDQ2Mi00NjY5LWJkYzItY2U1ODBlZTRkNWFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmG263rj/5WAOWMkwMyu/XXvXqn/7aZ7H2Wx
RnI7PTH7r5lgVf6tDpSq3nCCv0tOpuoGOWqNUI6EFCkaq39kgqUEHBknAoRHMfgI
rX0TnRlpUEOxTHwURimxZbikRomlnoSrOoOZAV7Gpd/oSeoCTHqilJrC86AnUvYt
DtGoOosHzs0jLSnpVNqR0k9wxwJoRFLZ5kITFCwP+7BffxrNerAtaFQjOFvEKHPV
7N0s//DoGu/lSc39SbGcaUkHE36BCKTZexTBRyY7zCvjoRfGVBJ3d5lfbL5BIvEk
+9rMhDJcKtO6UgIbXxSlUTOzxyWHZeAAaX6wQDYvUajQR54iXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBYMfvyxJaX4NqiyS7baW2ct2fQuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4
NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlhNTM2ZTFlMjcvYzhlZmZiN2MtM2ZmNS0z
NjdhLTk3NjgtMmJmZTAzMWJlYjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjRmODU3MTgtY2RhMC00NDJmLTk3
MjctNzA5YTUzNmUxZTI3L2Y0Zjg1NzE4LWNkYTAtNDQyZi05NzI3LTcwOWE1MzZl
MWUyNy5jcmwwHwYDVR0jBBgwFoAUa2/guyMG6CGl/y1Pb59cNa87Qn8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlh
NTM2ZTFlMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Rs8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIYqqRlonaz9BIJzy3auI6gGKg1nhVABhqAiM5IvBeIRPIk0RdXlkJSv
QnzF7RRV2TaUzN8mVpoSn2IuC/VqkeKXLWruNRb5oOcWYL/mXhlROGdeYZRaKI4x
eOVCBS1bxn1AEoPhjLCvsa0tEKk7CVavspptGCb3tn7QZTf7H81Up9UQMsZLL2jD
t3EpqYEMa9yE38UCLFOTZXJyvpD9GuDNKIgH30Jq6GlyQe67E47br9r8DYNEDb5c
3WVqPVhVaFmyeMI6DEqzZuXFEsR//asp2wBikVbVaBVcS5cQbHiyce9p0/1Pc/sr
scuGsWq4snWPoSuzRE6z4XYxeDWdcZY=
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:32:47 2025 by rpki-client