Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/023c2728-c60b-35c6-bebd-293d9fa56f1a.roa
File: 023c2728-c60b-35c6-bebd-293d9fa56f1a.roa (raw, json)
Hash identifier: seMhd2LDhbcIun5dvdFMGrV74DJETxRUN8BHTqo8VwY=
Subject key identifier: 08:F5:06:06:17:DC:2A:70:B8:D8:AA:55:CD:1B:DD:3C:75:14:74:9D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584910E16B55DC69E0DC36BD1380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/023c2728-c60b-35c6-bebd-293d9fa56f1a.roa
Signing time: Mon 03 Mar 2025 14:00:53 +0000
ROA not before: Mon 03 Mar 2025 14:00:53 +0000
ROA not after: Sun 01 Jun 2025 13:00:53 +0000
asID: 13335
IP address blocks: 172.70.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:e1:6b:55:dc:69:e0:dc:36:bd:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 14:00:53 2025 GMT
Not After : Jun 1 13:00:53 2025 GMT
Subject: CN=8ae48a3c-282c-40e4-ad8f-85cd4ed78ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:21:5c:34:96:c9:0e:12:5c:90:9e:25:f3:a3:
0e:45:62:9b:54:d0:b4:d8:d7:5c:9b:56:4b:cb:b8:
0e:53:10:8a:2e:10:d9:5e:3e:85:9d:e7:d6:96:b5:
da:2e:2b:52:98:54:d9:df:79:09:5e:9c:9c:bb:ee:
94:b0:cb:26:ee:0b:ac:38:5d:a5:8d:88:58:27:47:
8e:b9:fe:f2:3b:29:ff:d9:64:c0:d5:2c:ca:32:4a:
c0:b7:10:c4:33:b3:f4:a2:22:a0:10:09:8f:ac:5c:
61:44:44:fa:b4:c9:7e:c0:3b:8e:3d:0e:6f:5f:85:
43:3b:7e:8d:bb:1c:03:df:a6:e2:dd:89:d5:0a:65:
eb:77:5a:50:64:e0:af:f7:74:0f:1b:b2:01:1f:61:
ec:48:27:86:dc:fc:ff:c2:bc:13:8b:d7:93:32:59:
1f:fb:e9:06:e3:68:7f:56:d5:13:09:a0:c9:ab:ef:
e7:77:60:ce:b1:bb:8b:22:78:98:a7:32:9a:50:c4:
1c:49:41:ae:0b:b4:81:97:4e:1f:dc:a4:bc:9e:1f:
a9:8d:c7:01:f0:f5:c9:c8:ff:f8:86:78:b3:9d:f4:
1f:e0:f6:df:54:d7:f4:6b:00:34:32:6e:c2:81:c4:
07:17:0f:16:e0:0d:f7:85:70:4c:be:94:14:c2:2b:
5e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F5:06:06:17:DC:2A:70:B8:D8:AA:55:CD:1B:DD:3C:75:14:74:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/023c2728-c60b-35c6-bebd-293d9fa56f1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.206.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:78:35:f4:d6:03:fc:85:ae:aa:79:a2:ab:d6:60:c5:61:4f:
19:12:aa:be:d1:f3:15:99:e4:a2:e9:f6:0f:2c:cd:12:07:ea:
6e:f7:8e:8f:f1:75:cd:15:82:25:da:8a:a2:b5:db:cf:47:fd:
60:b9:6c:fc:c7:c6:cc:03:9a:74:1b:8f:03:cd:61:9c:0a:57:
92:1a:8a:61:b9:7d:eb:ab:19:16:13:ed:ab:00:b2:6c:fb:46:
09:9e:d5:1c:32:e2:be:dd:50:93:ce:d7:6f:a2:b3:be:39:9e:
c5:76:2b:59:55:35:c6:ec:62:e9:42:db:71:9f:4a:34:16:41:
26:c4:3b:14:ff:87:f9:98:65:c0:67:69:ae:0a:a0:08:a2:91:
d1:70:27:e2:b5:d0:50:10:05:7c:00:93:e0:b2:cb:49:09:28:
a7:a7:c0:03:90:1e:46:22:d4:0e:5c:ec:8f:66:82:f2:39:cd:
67:c4:f7:fa:eb:66:46:64:cb:03:3f:1f:48:7a:97:a3:1b:6d:
df:8d:e6:9a:3c:11:c2:8f:0e:bb:44:d3:65:f6:45:43:7d:a0:
7e:e1:37:0f:13:ca:43:48:ef:27:24:fe:6f:d0:64:e6:7f:64:
cf:6a:b1:dd:f1:86:9d:df:08:5b:37:12:6b:f0:05:6f:41:81:
6b:91:69:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4WtV3Gng3Da9E4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk
OGFlNDhhM2MtMjgyYy00MGU0LWFkOGYtODVjZDRlZDc4YmE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiFcNJbJDhJckJ4l86MORWKbVNC02Ndcm1ZL
y7gOUxCKLhDZXj6FnefWlrXaLitSmFTZ33kJXpycu+6UsMsm7gusOF2ljYhYJ0eO
uf7yOyn/2WTA1SzKMkrAtxDEM7P0oiKgEAmPrFxhRET6tMl+wDuOPQ5vX4VDO36N
uxwD36bi3YnVCmXrd1pQZOCv93QPG7IBH2HsSCeG3Pz/wrwTi9eTMlkf++kG42h/
VtUTCaDJq+/nd2DOsbuLIniYpzKaUMQcSUGuC7SBl04f3KS8nh+pjccB8PXJyP/4
hniznfQf4PbfVNf0awA0Mm7CgcQHFw8W4A33hXBMvpQUwiteJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAj1BgYX3CpwuNiqVc0b3Tx1FHSdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDIzYzI3MjgtYzYwYi0z
NWM2LWJlYmQtMjkzZDlmYTU2ZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHV4NfTWA/yFrqp5oqvWYMVhTxkSqr7R8xWZ5KLp9g8szRIH6m73jo/x
dc0VgiXaiqK1289H/WC5bPzHxswDmnQbjwPNYZwKV5IaimG5feurGRYT7asAsmz7
Rgme1Rwy4r7dUJPO12+is745nsV2K1lVNcbsYulC23GfSjQWQSbEOxT/h/mYZcBn
aa4KoAiikdFwJ+K10FAQBXwAk+Cyy0kJKKenwAOQHkYi1A5c7I9mgvI5zWfE9/rr
ZkZkywM/H0h6l6Mbbd+N5po8EcKPDrtE02X2RUN9oH7hNw8TykNI7yck/m/QZOZ/
ZM9qsd3xhp3fCFs3EmvwBW9BgWuRaYI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:49:58 2025 by rpki-client