Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1bb99555-9458-3ab3-883d-a5b2af0621de.roa
File: 1bb99555-9458-3ab3-883d-a5b2af0621de.roa (raw, json)
Hash identifier: s5q6cgoku/jONZDAAND4na9RblnDapvTbL9ixl7v96g=
Subject key identifier: 86:C2:E0:33:E9:24:9B:C5:D0:E3:F1:EE:FB:A7:14:CC:42:34:B3:22
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584910E16D5963CD13978C7154B0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1bb99555-9458-3ab3-883d-a5b2af0621de.roa
Signing time: Mon 03 Mar 2025 14:00:53 +0000
ROA not before: Mon 03 Mar 2025 14:00:53 +0000
ROA not after: Sun 01 Jun 2025 13:00:53 +0000
asID: 13335
IP address blocks: 172.70.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:e1:6d:59:63:cd:13:97:8c:71:54:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 14:00:53 2025 GMT
Not After : Jun 1 13:00:53 2025 GMT
Subject: CN=2b883dbd-7121-4b54-9601-1577978fcc9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:be:85:39:a0:e8:fe:c3:cb:c8:0f:d6:15:6b:
9c:dc:ef:3a:39:e6:08:a3:d4:bc:4f:d8:6a:c0:6a:
fa:d5:7d:5a:7e:2c:38:bd:de:a4:88:54:7c:6a:e9:
e8:88:06:31:86:0f:73:70:f6:44:c5:47:11:78:4c:
c8:d9:1e:31:6c:8c:e3:33:aa:01:18:89:ab:e3:1a:
ab:63:9e:b8:3b:9b:ff:38:50:08:0b:3d:46:ad:3a:
45:9f:81:69:98:3a:36:0c:cd:08:51:b4:d3:a5:a3:
31:b8:c3:26:be:f0:b5:d3:54:17:b9:2c:d0:d7:e5:
9e:7b:6c:26:a8:76:d9:d1:68:3d:45:c5:52:2d:ce:
35:16:cc:0f:fc:2d:ba:e4:e7:f3:11:21:66:e4:5c:
3e:77:62:20:72:be:e3:98:c3:5b:95:13:5b:74:31:
f6:1c:f4:ca:63:dd:9c:b6:6e:99:14:d3:05:76:46:
bc:f6:59:aa:f6:85:38:d0:3a:63:26:95:1a:7a:21:
b4:fe:e8:ad:aa:08:20:95:9e:d5:70:20:31:1b:60:
c3:13:53:6c:97:8b:12:0f:be:83:d9:2d:9d:3d:8d:
df:61:05:3b:d8:31:31:ed:65:67:45:04:80:aa:42:
6c:ec:e7:50:2d:e9:12:58:93:8b:f4:c5:34:b6:f0:
71:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C2:E0:33:E9:24:9B:C5:D0:E3:F1:EE:FB:A7:14:CC:42:34:B3:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1bb99555-9458-3ab3-883d-a5b2af0621de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:3f:51:d1:34:83:fa:50:b0:6b:8d:d3:5e:65:46:d0:db:09:
ca:ae:4c:6c:be:16:68:2e:4d:c9:c7:31:2f:f9:2d:9c:2c:db:
2c:c5:3d:9f:7c:1a:90:5b:31:be:8e:ea:5b:41:53:0a:ce:8a:
61:2e:b3:16:10:50:58:5a:9b:d9:4c:7b:ce:5d:2a:fa:e3:c3:
98:f5:61:c8:95:e4:e3:35:1c:4f:a3:af:84:c9:b4:e0:09:f7:
f0:17:ac:b3:8e:6b:30:f1:5a:af:36:b0:5e:12:59:13:a0:3c:
dd:83:46:11:18:b7:19:4c:a2:f4:e9:35:85:b4:8d:d0:19:0d:
32:f7:9c:cc:fb:56:eb:00:26:f9:db:a9:9c:04:17:5c:41:f2:
85:ab:45:ce:4a:fd:2d:3f:f1:4f:73:c3:f6:bc:a7:20:8e:ed:
22:c4:44:49:db:43:88:26:eb:cb:3f:d6:27:10:d8:b2:47:3e:
dc:fc:10:4f:52:71:7d:c3:55:a1:82:9d:52:4a:ec:55:c9:9f:
d1:1a:04:2b:30:43:60:97:57:22:65:be:26:74:64:05:a3:44:
43:fe:15:3e:0d:b7:75:75:54:44:63:25:af:52:71:18:02:e1:
f6:48:3a:5b:ad:a5:92:37:c7:a1:c4:e5:df:de:70:0f:75:9d:
3b:8c:1e:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4W1ZY80Tl4xxVLAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk
MmI4ODNkYmQtNzEyMS00YjU0LTk2MDEtMTU3Nzk3OGZjYzllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb6FOaDo/sPLyA/WFWuc3O86OeYIo9S8T9hq
wGr61X1afiw4vd6kiFR8aunoiAYxhg9zcPZExUcReEzI2R4xbIzjM6oBGImr4xqr
Y564O5v/OFAICz1GrTpFn4FpmDo2DM0IUbTTpaMxuMMmvvC101QXuSzQ1+Wee2wm
qHbZ0Wg9RcVSLc41FswP/C265OfzESFm5Fw+d2Igcr7jmMNblRNbdDH2HPTKY92c
tm6ZFNMFdka89lmq9oU40DpjJpUaeiG0/uitqggglZ7VcCAxG2DDE1Nsl4sSD76D
2S2dPY3fYQU72DEx7WVnRQSAqkJs7OdQLekSWJOL9MU0tvBxSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIbC4DPpJJvF0OPx7vunFMxCNLMiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWJiOTk1NTUtOTQ1OC0z
YWIzLTg4M2QtYTViMmFmMDYyMWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGA/UdE0g/pQsGuN015lRtDbCcquTGy+FmguTcnHMS/5LZws2yzFPZ98
GpBbMb6O6ltBUwrOimEusxYQUFham9lMe85dKvrjw5j1YciV5OM1HE+jr4TJtOAJ
9/AXrLOOazDxWq82sF4SWROgPN2DRhEYtxlMovTpNYW0jdAZDTL3nMz7VusAJvnb
qZwEF1xB8oWrRc5K/S0/8U9zw/a8pyCO7SLEREnbQ4gm68s/1icQ2LJHPtz8EE9S
cX3DVaGCnVJK7FXJn9EaBCswQ2CXVyJlviZ0ZAWjREP+FT4Nt3V1VERjJa9ScRgC
4fZIOlutpZI3x6HE5d/ecA91nTuMHmI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:51:31 2025 by rpki-client