Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/03ccc351-efda-3da1-81d1-a4e9948d59c7.roa
File: 03ccc351-efda-3da1-81d1-a4e9948d59c7.roa (raw, json)
Hash identifier: gUTpxVvkmEZDSbZAtTLbe/kln9YKSC4aq2iYR4RcACg=
Subject key identifier: A9:44:9F:67:C7:85:88:57:C5:3E:E3:DF:9F:F7:EF:28:F9:8C:78:6D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490F7BF9CCFECBE8326B97D400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/03ccc351-efda-3da1-81d1-a4e9948d59c7.roa
Signing time: Mon 03 Mar 2025 02:00:39 +0000
ROA not before: Mon 03 Mar 2025 02:00:39 +0000
ROA not after: Sun 01 Jun 2025 01:00:39 +0000
asID: 13335
IP address blocks: 172.70.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0f:7b:f9:cc:fe:cb:e8:32:6b:97:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 02:00:39 2025 GMT
Not After : Jun 1 01:00:39 2025 GMT
Subject: CN=ef8fb0d5-4c87-4647-8c7e-e28886d5750d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:23:ee:3e:9a:2a:35:03:04:28:e3:31:b4:35:
a9:88:45:b3:4b:6e:55:9c:e1:8c:6e:3c:6a:47:a7:
a2:93:65:27:12:4c:63:42:03:de:09:0a:6a:54:38:
3e:e7:83:4a:29:b3:17:3c:4c:b9:6b:3b:34:61:01:
85:08:d4:fb:f4:4c:78:51:30:2d:dd:22:0d:94:e3:
b3:f3:53:6a:4d:94:e1:f5:29:23:13:0c:8e:13:24:
7c:84:a9:40:9c:86:03:66:72:6e:74:29:4f:6c:90:
73:f4:7f:d9:1a:27:88:6a:ae:1a:44:21:24:7d:f9:
a2:68:40:46:e6:66:4d:5e:39:d4:86:f6:cd:6c:35:
0a:72:63:dd:7f:9c:83:23:1f:41:6a:10:be:2b:a7:
5f:06:31:59:0f:a2:c3:07:46:55:69:f2:5f:45:45:
27:69:7a:e7:68:04:61:56:b8:4e:27:80:39:e6:35:
c7:2f:91:82:20:6d:7a:cd:5e:59:74:18:cc:a5:d3:
53:c6:f3:95:ad:e7:87:f6:9c:04:ef:5c:56:5d:ff:
24:c1:b6:07:16:fa:01:80:19:87:26:fb:d7:a9:40:
c9:d9:12:44:55:b0:64:dd:74:dc:0a:06:02:5e:4f:
46:f5:d6:8e:65:e1:84:4c:df:6b:c1:f9:32:02:b9:
95:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:44:9F:67:C7:85:88:57:C5:3E:E3:DF:9F:F7:EF:28:F9:8C:78:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/03ccc351-efda-3da1-81d1-a4e9948d59c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.160.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:0f:a9:53:53:6b:d8:77:4e:06:5d:36:0d:c4:7d:82:a0:a7:
e6:42:16:fd:9c:83:52:00:a4:ea:6e:29:98:0b:ac:a9:4c:09:
41:6b:c3:de:67:d8:c1:61:82:eb:28:4d:82:86:7c:c6:56:ad:
cb:f9:78:a2:81:08:b8:6d:c9:e2:28:c0:bc:d4:bd:72:3d:26:
02:f3:c0:d1:25:5b:6d:be:f7:77:f1:cd:af:67:bd:ab:b2:29:
95:66:03:c9:60:f3:82:c7:22:99:1a:c9:e4:ca:a1:f9:12:7b:
59:b5:6b:cb:58:5f:4d:cd:ee:29:4c:29:7a:ac:8f:ee:32:ad:
7c:5d:6c:3d:ff:75:89:5b:cb:f9:32:c2:4b:a1:1c:06:da:d1:
83:f4:74:34:ac:c1:37:7d:0c:85:76:ee:d4:f6:38:47:1a:97:
be:c1:77:5f:de:16:37:69:d4:f2:63:79:72:0d:c4:c3:f0:7f:
cd:18:40:05:08:69:24:07:34:b0:a0:f7:a1:2b:3e:bd:46:4e:
af:75:bf:d6:e0:af:fd:83:7d:b5:99:2e:4f:46:c6:49:a6:30:
e5:65:df:ac:94:8e:8e:78:fa:de:5c:58:6f:31:79:25:2d:53:
17:e1:b8:50:07:86:ff:7a:66:76:b8:ad:7f:64:15:50:87:fa:
15:b9:82:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkPe/nM/svoMmuX1AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk
ZWY4ZmIwZDUtNGM4Ny00NjQ3LThjN2UtZTI4ODg2ZDU3NTBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiPuPpoqNQMEKOMxtDWpiEWzS25VnOGMbjxq
R6eik2UnEkxjQgPeCQpqVDg+54NKKbMXPEy5azs0YQGFCNT79Ex4UTAt3SINlOOz
81NqTZTh9SkjEwyOEyR8hKlAnIYDZnJudClPbJBz9H/ZGieIaq4aRCEkffmiaEBG
5mZNXjnUhvbNbDUKcmPdf5yDIx9BahC+K6dfBjFZD6LDB0ZVafJfRUUnaXrnaARh
VrhOJ4A55jXHL5GCIG16zV5ZdBjMpdNTxvOVreeH9pwE71xWXf8kwbYHFvoBgBmH
JvvXqUDJ2RJEVbBk3XTcCgYCXk9G9daOZeGETN9rwfkyArmVpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKlEn2fHhYhXxT7j35/37yj5jHhtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDNjY2MzNTEtZWZkYS0z
ZGExLTgxZDEtYTRlOTk0OGQ1OWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEagMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAgPqVNTa9h3TgZdNg3EfYKgp+ZCFv2cg1IApOpuKZgLrKlMCUFrw95n
2MFhgusoTYKGfMZWrcv5eKKBCLhtyeIowLzUvXI9JgLzwNElW22+93fxza9nvauy
KZVmA8lg84LHIpkayeTKofkSe1m1a8tYX03N7ilMKXqsj+4yrXxdbD3/dYlby/ky
wkuhHAba0YP0dDSswTd9DIV27tT2OEcal77Bd1/eFjdp1PJjeXINxMPwf80YQAUI
aSQHNLCg96ErPr1GTq91v9bgr/2DfbWZLk9GxkmmMOVl36yUjo54+t5cWG8xeSUt
UxfhuFAHhv96Zna4rX9kFVCH+hW5ggY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:44:01 2025 by rpki-client