Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25cfe413-fd5c-30f5-896a-b6f401efa2d6.roa
File: 25cfe413-fd5c-30f5-896a-b6f401efa2d6.roa (raw, json)
Hash identifier: jAzBTAEKeSJbj3GN58JfpzJHFbAPETPqD8Ljntd05m0=
Subject key identifier: 09:75:8B:B2:2E:AF:80:77:D0:AE:66:35:17:4D:F8:17:31:60:2F:2B
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584908818221FB1CE3BF4D848E40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25cfe413-fd5c-30f5-896a-b6f401efa2d6.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.71.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:82:21:fb:1c:e3:bf:4d:84:8e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=07467ec7-e61d-47f6-bfa0-492d37d0d641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:09:60:f3:6f:85:49:63:4f:e9:05:68:e6:8c:
a1:ff:27:6a:06:ae:30:6b:92:d1:1a:d1:7e:80:72:
f0:0a:39:1b:3d:01:4b:e0:80:58:1b:fd:02:f2:7f:
b7:61:9f:7b:cf:d7:80:ce:40:00:7a:a1:5a:0d:56:
4e:22:00:e0:b0:7e:a0:48:91:33:5e:4a:51:68:cf:
9e:e8:8e:ac:90:55:69:f5:aa:cc:9b:68:29:a7:2d:
5d:58:5a:8d:c2:5a:29:06:59:00:96:48:7f:1a:2d:
75:84:75:78:7e:8c:12:b2:31:c0:69:49:b9:34:a5:
50:b9:20:45:ca:b4:d3:cc:99:9b:b4:97:57:b3:16:
a4:1b:3b:c4:62:5d:b1:9d:4f:5e:8f:cc:50:76:57:
a1:a2:5f:d3:97:6d:ae:eb:af:25:9a:e3:cc:f1:91:
c0:45:9c:57:c0:b7:da:1d:81:e2:29:cc:2e:9c:f4:
7a:53:35:18:2e:20:d9:bc:70:17:26:a4:d1:ec:ce:
dd:fd:ec:13:50:bc:cf:db:68:ff:48:c2:1a:e1:87:
06:ee:44:80:b0:e9:a6:22:c3:97:96:a9:19:50:95:
96:34:40:c5:bf:10:45:fc:13:7b:59:78:4a:5a:f7:
aa:a3:84:d7:b7:af:e6:ce:d2:e2:1c:0d:fd:fc:22:
39:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:75:8B:B2:2E:AF:80:77:D0:AE:66:35:17:4D:F8:17:31:60:2F:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25cfe413-fd5c-30f5-896a-b6f401efa2d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.180.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:bf:b2:38:ce:0e:87:7d:58:1f:3f:6a:f3:5a:b7:55:7f:ac:
dd:fc:78:c4:47:4f:14:cc:aa:90:ae:10:59:c3:a8:80:04:c3:
15:f9:88:52:7e:29:bb:89:ee:11:8f:60:2d:49:2f:8f:0e:d1:
69:2d:52:71:71:9b:26:71:9c:dc:39:37:fe:56:91:70:b6:48:
56:6f:f7:14:c7:55:ea:7b:63:05:20:fe:90:6e:7b:8b:f9:86:
dc:2d:ef:85:34:82:d1:f7:39:e2:5b:de:94:c2:ac:55:40:87:
4e:1f:03:54:ca:ab:57:dc:e9:0f:4a:b5:8e:a8:36:80:88:d9:
7d:35:ed:9c:39:49:dc:b6:99:42:2d:3c:41:e4:3f:68:99:d4:
e4:c9:a5:68:dd:19:23:60:30:fe:aa:08:13:8f:a2:63:ab:8b:
87:8a:49:a5:37:45:d9:cb:90:f2:39:8c:a5:70:f4:12:9d:f8:
c6:23:bd:2a:84:f5:d1:2c:c3:32:c6:4c:d3:e1:e2:bf:b4:66:
c6:d0:ff:c9:6c:d1:98:59:c3:56:e7:22:95:24:73:5e:ef:c6:
45:a9:8c:c6:3c:22:c2:ef:2d:85:ad:c7:79:c6:4d:40:a4:0a:
69:e4:9d:2c:c8:4a:00:36:76:14:09:d7:d7:f8:fe:67:96:8b:
63:81:30:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgYIh+xzjv02EjkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk
MDc0NjdlYzctZTYxZC00N2Y2LWJmYTAtNDkyZDM3ZDBkNjQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAlg82+FSWNP6QVo5oyh/ydqBq4wa5LRGtF+
gHLwCjkbPQFL4IBYG/0C8n+3YZ97z9eAzkAAeqFaDVZOIgDgsH6gSJEzXkpRaM+e
6I6skFVp9arMm2gppy1dWFqNwlopBlkAlkh/Gi11hHV4fowSsjHAaUm5NKVQuSBF
yrTTzJmbtJdXsxakGzvEYl2xnU9ej8xQdlehol/Tl22u668lmuPM8ZHARZxXwLfa
HYHiKcwunPR6UzUYLiDZvHAXJqTR7M7d/ewTULzP22j/SMIa4YcG7kSAsOmmIsOX
lqkZUJWWNEDFvxBF/BN7WXhKWveqo4TXt6/mztLiHA39/CI5rQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAl1i7Iur4B30K5mNRdN+BcxYC8rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjVjZmU0MTMtZmQ1Yy0z
MGY1LTg5NmEtYjZmNDAxZWZhMmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEe0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK2/sjjODod9WB8/avNat1V/rN38eMRHTxTMqpCuEFnDqIAEwxX5iFJ+
KbuJ7hGPYC1JL48O0WktUnFxmyZxnNw5N/5WkXC2SFZv9xTHVep7YwUg/pBue4v5
htwt74U0gtH3OeJb3pTCrFVAh04fA1TKq1fc6Q9KtY6oNoCI2X017Zw5Sdy2mUIt
PEHkP2iZ1OTJpWjdGSNgMP6qCBOPomOri4eKSaU3RdnLkPI5jKVw9BKd+MYjvSqE
9dEswzLGTNPh4r+0ZsbQ/8ls0ZhZw1bnIpUkc17vxkWpjMY8IsLvLYWtx3nGTUCk
CmnknSzISgA2dhQJ19f4/meWi2OBMPw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:32:13 2025 by rpki-client