Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02cd6e3a-7b3b-3146-9cf7-aabe9a8e00e3.roa
File: 02cd6e3a-7b3b-3146-9cf7-aabe9a8e00e3.roa (raw, json)
Hash identifier: LKcfOecCOeF1uhrBNsoLsyvmJcus/jc3Y5IkdSbj/2k=
Subject key identifier: B5:71:1A:EF:D8:B5:10:34:25:49:06:1E:42:99:7C:A6:88:09:91:FC
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490F7BFB123C9A88C9C0C5EA20
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02cd6e3a-7b3b-3146-9cf7-aabe9a8e00e3.roa
Signing time: Mon 03 Mar 2025 02:00:39 +0000
ROA not before: Mon 03 Mar 2025 02:00:39 +0000
ROA not after: Sun 01 Jun 2025 01:00:39 +0000
asID: 13335
IP address blocks: 172.70.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0f:7b:fb:12:3c:9a:88:c9:c0:c5:ea:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 02:00:39 2025 GMT
Not After : Jun 1 01:00:39 2025 GMT
Subject: CN=269371eb-81b3-4367-a2dc-4afb10d15bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c8:c0:a3:8b:4d:d8:63:17:0d:7b:3e:6b:eb:
1e:71:49:ce:9e:4d:d4:4c:b4:5e:b8:8d:8c:16:f9:
2c:ab:74:4e:b5:4c:ea:84:63:34:3c:22:9d:0b:6e:
b8:34:36:0a:07:99:b5:b6:e6:a9:94:88:a7:42:61:
ee:c6:00:f7:7d:ae:78:a0:b8:5f:f4:a5:c5:d1:45:
8a:55:f8:f2:a5:6a:b7:c5:7a:bd:3a:c7:27:a1:03:
9e:77:71:7e:f5:34:3e:71:54:4c:b5:c2:b5:4b:b9:
3a:22:ba:8d:a4:8f:97:2d:80:d6:87:15:da:67:3f:
1c:02:45:5f:b7:a2:d2:eb:8f:db:70:e1:d9:f8:b6:
00:58:04:24:0e:0d:14:87:b3:34:1f:58:50:b9:95:
1c:7e:d9:62:99:86:d2:21:9d:9f:85:6f:1a:f8:62:
f9:00:40:7a:89:c9:90:36:f6:37:ca:35:13:85:2b:
4d:59:f0:2b:89:88:39:75:7a:4f:51:5d:12:e1:d2:
5a:47:2f:4b:f7:12:d8:ef:05:f1:d5:b5:34:75:fe:
04:29:32:16:3a:69:41:ce:38:91:5b:c9:73:2e:a0:
d8:c3:5e:b2:cc:32:af:21:55:2f:17:8a:60:30:55:
80:39:10:c8:92:b7:a8:de:8b:10:33:c1:86:45:64:
ea:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:71:1A:EF:D8:B5:10:34:25:49:06:1E:42:99:7C:A6:88:09:91:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02cd6e3a-7b3b-3146-9cf7-aabe9a8e00e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:2b:16:a3:76:39:89:83:cc:5f:01:3e:41:dd:96:c7:0a:97:
af:07:8a:38:04:0e:92:47:f5:d1:98:73:a3:a8:90:c3:1d:00:
4f:df:09:d4:51:dc:2f:65:97:03:33:51:ec:16:50:28:6f:b0:
5a:97:3c:ad:eb:65:78:bc:56:28:34:e4:5a:55:f8:50:d7:2f:
82:2d:48:f0:6f:28:a4:af:5a:aa:2a:aa:4d:04:19:e7:ae:dd:
dd:1d:2c:a8:11:f1:2a:d8:cd:fd:3e:17:80:de:ae:b4:e9:11:
77:37:2e:4b:45:01:a8:fb:dc:ef:94:c7:bd:e3:cb:fd:9f:9a:
fe:10:ee:5e:b6:e7:7e:88:54:a8:f0:f9:4d:0d:98:9c:10:35:
bb:99:32:b5:fd:60:71:7a:02:12:c1:b3:64:38:c9:dd:4d:35:
42:65:8d:9f:40:fd:fc:a7:8b:3f:5f:f9:22:7a:8c:d1:1f:f2:
f1:11:5f:fb:93:95:14:3b:bd:da:6f:a5:d7:4e:80:73:9c:60:
05:de:49:d5:b1:b0:74:c0:df:2f:bb:92:3a:46:ed:45:b1:56:
58:0f:16:14:f0:0d:a0:35:0d:a5:7b:6a:b9:0d:4f:79:90:1a:
ea:75:ed:f0:bc:0d:52:51:0d:49:19:25:fa:85:b9:cb:88:ae:
1c:da:e7:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkPe/sSPJqIycDF6iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk
MjY5MzcxZWItODFiMy00MzY3LWEyZGMtNGFmYjEwZDE1YmQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8jAo4tN2GMXDXs+a+secUnOnk3UTLReuI2M
Fvksq3ROtUzqhGM0PCKdC264NDYKB5m1tuaplIinQmHuxgD3fa54oLhf9KXF0UWK
VfjypWq3xXq9OscnoQOed3F+9TQ+cVRMtcK1S7k6IrqNpI+XLYDWhxXaZz8cAkVf
t6LS64/bcOHZ+LYAWAQkDg0Uh7M0H1hQuZUcftlimYbSIZ2fhW8a+GL5AEB6icmQ
NvY3yjUThStNWfAriYg5dXpPUV0S4dJaRy9L9xLY7wXx1bU0df4EKTIWOmlBzjiR
W8lzLqDYw16yzDKvIVUvF4pgMFWAORDIkreo3osQM8GGRWTq2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLVxGu/YtRA0JUkGHkKZfKaICZH8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDJjZDZlM2EtN2IzYi0z
MTQ2LTljZjctYWFiZTlhOGUwMGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHorFqN2OYmDzF8BPkHdlscKl68HijgEDpJH9dGYc6OokMMdAE/fCdRR
3C9llwMzUewWUChvsFqXPK3rZXi8Vig05FpV+FDXL4ItSPBvKKSvWqoqqk0EGeeu
3d0dLKgR8SrYzf0+F4DerrTpEXc3LktFAaj73O+Ux73jy/2fmv4Q7l62536IVKjw
+U0NmJwQNbuZMrX9YHF6AhLBs2Q4yd1NNUJljZ9A/fyniz9f+SJ6jNEf8vERX/uT
lRQ7vdpvpddOgHOcYAXeSdWxsHTA3y+7kjpG7UWxVlgPFhTwDaA1DaV7arkNT3mQ
Gup17fC8DVJRDUkZJfqFucuIrhza59w=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:36:49 2025 by rpki-client