Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24829d14-985d-3bf3-bc5c-2f773de283d5.roa
File: 24829d14-985d-3bf3-bc5c-2f773de283d5.roa (raw, json)
Hash identifier: kOp3Mi9grmHepcdstbiG25dFPjJ1dnU6X2WLBH+0aYo=
Subject key identifier: DC:FD:41:94:2B:37:CB:B9:A0:2A:ED:47:E4:8B:69:D6:92:77:AA:22
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584908818E5FDC043A8775980CC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24829d14-985d-3bf3-bc5c-2f773de283d5.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.67.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:8e:5f:dc:04:3a:87:75:98:0c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=ba910bd9-6790-4407-914f-317b7ab9b1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e8:66:28:67:d4:72:78:2d:63:aa:53:b5:ca:
df:ae:ef:5d:c7:8e:b7:f5:be:5e:4b:c7:92:5c:de:
cc:1b:4b:d1:95:a2:a2:ce:50:7f:11:2a:e2:8c:bf:
36:54:c1:6d:7c:71:08:00:36:16:06:02:0c:4f:4c:
02:ab:c2:5c:e2:92:08:09:0f:e4:31:5f:74:44:ad:
9c:12:33:3c:05:9e:81:b2:04:b6:a7:88:0b:63:47:
3d:88:a5:9d:bb:48:96:21:f2:1d:3c:f9:a8:73:53:
fd:60:47:bb:9e:ee:ee:7b:51:02:29:12:84:1e:44:
ce:c0:62:2f:6d:83:6c:19:80:76:2c:9b:7b:e1:d1:
a4:3c:64:4a:47:25:e8:9c:ee:21:47:01:10:ff:e1:
6d:8c:d5:68:e7:63:cf:92:39:bf:87:5f:b7:63:78:
0a:cc:0a:ca:15:fd:8d:17:aa:06:65:c7:77:4e:80:
10:e5:f0:cb:d9:d8:e2:89:05:f5:d1:d4:8e:e6:04:
c9:01:4f:ba:56:f7:14:e8:bd:b6:eb:ae:9c:9a:79:
ac:bf:3a:02:96:d5:03:5a:16:f5:63:a6:37:94:6d:
fe:05:ce:fc:ab:e4:98:83:8f:ef:6a:4d:50:ac:30:
e0:fb:f2:62:b9:b0:3d:46:71:d7:f3:07:b0:d7:55:
bf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FD:41:94:2B:37:CB:B9:A0:2A:ED:47:E4:8B:69:D6:92:77:AA:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24829d14-985d-3bf3-bc5c-2f773de283d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.67.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:0a:99:ee:05:6b:77:af:a8:1c:98:22:76:29:23:1b:fc:6c:
65:21:d1:78:4e:0c:62:56:bc:22:98:13:6a:a0:78:f6:3c:9e:
45:f0:c1:2f:09:e1:f6:f3:32:99:a0:d5:90:ba:bf:f4:c5:e0:
80:7e:d6:bc:df:ac:49:a8:f7:e4:8e:c5:1d:e7:1b:45:31:73:
be:74:60:75:2c:9e:b0:da:1c:2b:88:0c:9d:5a:77:f1:39:b5:
0a:be:50:7a:6c:1a:53:32:6e:82:72:81:79:0f:c8:46:5d:3b:
ef:a6:e5:7e:ed:4d:9c:02:aa:03:9d:e6:d8:f5:c7:44:67:84:
93:b8:63:eb:bb:fd:e4:e1:10:73:69:b9:37:9c:e8:a6:f6:ea:
da:1c:17:e2:4e:61:08:18:8c:a5:7c:ac:95:f5:0b:e8:9d:c9:
32:8c:30:e6:64:96:50:82:c6:b6:2a:cd:20:21:56:a4:5b:c2:
39:29:7d:39:29:69:52:cf:b1:92:9d:f7:f7:95:c3:09:10:93:
b7:b3:81:51:43:c0:6d:c8:ee:40:97:5a:d7:78:64:2f:d8:f1:
07:76:d9:5f:5a:1f:41:f9:1a:d9:b0:3e:d1:dc:9c:ee:c0:e8:
64:49:63:3d:58:45:eb:d4:86:1a:84:8d:f2:64:71:42:f6:9d:
9e:4b:11:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgY5f3AQ6h3WYDMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk
YmE5MTBiZDktNjc5MC00NDA3LTkxNGYtMzE3YjdhYjliMWJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzehmKGfUcngtY6pTtcrfru9dx4639b5eS8eS
XN7MG0vRlaKizlB/ESrijL82VMFtfHEIADYWBgIMT0wCq8Jc4pIICQ/kMV90RK2c
EjM8BZ6BsgS2p4gLY0c9iKWdu0iWIfIdPPmoc1P9YEe7nu7ue1ECKRKEHkTOwGIv
bYNsGYB2LJt74dGkPGRKRyXonO4hRwEQ/+FtjNVo52PPkjm/h1+3Y3gKzArKFf2N
F6oGZcd3ToAQ5fDL2djiiQX10dSO5gTJAU+6VvcU6L22666cmnmsvzoCltUDWhb1
Y6Y3lG3+Bc78q+SYg4/vak1QrDDg+/JiubA9RnHX8wew11W/WwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNz9QZQrN8u5oCrtR+SLadaSd6oiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjQ4MjlkMTQtOTg1ZC0z
YmYzLWJjNWMtMmY3NzNkZTI4M2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEOAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHEKme4Fa3evqByYInYpIxv8bGUh0XhODGJWvCKYE2qgePY8nkXwwS8J
4fbzMpmg1ZC6v/TF4IB+1rzfrEmo9+SOxR3nG0Uxc750YHUsnrDaHCuIDJ1ad/E5
tQq+UHpsGlMyboJygXkPyEZdO++m5X7tTZwCqgOd5tj1x0RnhJO4Y+u7/eThEHNp
uTec6Kb26tocF+JOYQgYjKV8rJX1C+idyTKMMOZkllCCxrYqzSAhVqRbwjkpfTkp
aVLPsZKd9/eVwwkQk7ezgVFDwG3I7kCXWtd4ZC/Y8Qd22V9aH0H5GtmwPtHcnO7A
6GRJYz1YRevUhhqEjfJkcUL2nZ5LESY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:41 2025 by rpki-client