Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/281263a3-971c-3965-88f1-27c35caa37de.roa
File: 281263a3-971c-3965-88f1-27c35caa37de.roa (raw, json)
Hash identifier: sgmjDkpuq5kR6+e4bKMWNGq8OdLh/BMH3nUH5mLAp18=
Subject key identifier: F9:07:ED:73:78:E9:21:E1:EC:A3:15:DF:96:D6:EA:E1:E1:94:85:46
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584910E1766F0AFBC173F6071980
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/281263a3-971c-3965-88f1-27c35caa37de.roa
Signing time: Mon 03 Mar 2025 14:00:53 +0000
ROA not before: Mon 03 Mar 2025 14:00:53 +0000
ROA not after: Sun 01 Jun 2025 13:00:53 +0000
asID: 13335
IP address blocks: 172.71.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:e1:76:6f:0a:fb:c1:73:f6:07:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 14:00:53 2025 GMT
Not After : Jun 1 13:00:53 2025 GMT
Subject: CN=5bc69a8e-9dbc-4640-b506-88481babe50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:94:3b:44:95:ed:1e:68:e5:b0:82:65:90:
5d:7a:47:a6:06:3d:56:4d:d9:88:1c:61:22:00:2c:
52:ff:74:b7:2f:7b:01:ec:b2:95:1a:77:f0:8d:b0:
fb:02:52:28:ae:47:ee:18:a8:d1:14:b7:9e:9f:c2:
09:11:19:e2:b0:51:57:38:a8:45:c1:8c:33:de:64:
d9:e7:51:f6:23:99:72:50:23:86:a6:a3:01:b4:51:
f4:94:73:36:88:54:16:e9:12:f6:33:35:08:02:4a:
2d:35:43:0b:2f:ba:a8:48:83:d2:f0:31:c1:13:c4:
91:bb:a3:54:e8:20:ab:98:63:32:3f:fc:3a:6e:b1:
00:5e:60:bb:e5:cb:f3:4d:a2:50:fe:5b:54:e3:4e:
e2:3a:e1:28:db:16:d9:5c:eb:75:c8:54:87:28:11:
0d:21:01:99:7f:0e:a1:37:e5:29:d3:a6:8a:98:5f:
76:11:8a:d9:9b:07:62:e0:61:e1:7d:ee:47:c3:13:
a8:5e:7e:e9:c6:d4:59:f3:a2:a2:45:70:18:7e:4d:
61:6a:1d:03:ec:12:bc:2e:d9:16:aa:96:25:af:34:
04:83:c0:9f:7b:f5:b4:3c:83:af:66:d4:81:26:18:
80:5b:62:d8:12:38:99:2c:9a:8a:af:ec:ac:75:88:
06:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:07:ED:73:78:E9:21:E1:EC:A3:15:DF:96:D6:EA:E1:E1:94:85:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/281263a3-971c-3965-88f1-27c35caa37de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:e9:0b:b7:bb:f9:d9:62:d0:52:29:11:13:3d:ee:cf:7b:59:
af:7f:09:38:ca:eb:27:e3:20:e2:37:32:6f:4c:e8:c4:9d:9b:
fc:7e:1a:2b:66:5e:1c:6e:87:8e:77:56:59:0a:29:0c:45:05:
55:f0:47:aa:2f:00:a3:41:80:16:15:5d:4a:41:f9:b8:58:63:
52:da:c0:5f:76:83:a7:98:d2:f4:1a:46:3c:ab:c0:6f:02:40:
de:34:cf:97:38:79:02:91:26:38:31:ed:7e:b7:d3:5f:5a:2c:
7f:0e:4c:1a:c6:6f:a0:3d:25:f8:dd:b9:13:59:be:87:a3:f2:
b0:41:ac:2f:24:9d:a5:66:ff:1b:ad:24:cb:77:27:c0:e9:38:
37:04:a6:a1:00:0a:b9:ba:ed:f9:6b:60:c8:81:d1:4a:57:f5:
6d:fa:19:36:aa:79:e6:1f:06:05:a9:21:1d:88:21:38:29:0e:
b2:5e:ac:f0:dc:f6:82:2c:32:ce:63:da:3b:73:4b:7b:b4:d0:
2b:d2:1c:fb:77:59:28:8f:bc:dd:96:f1:21:2f:48:30:6a:2c:
68:95:4f:1d:b6:a7:42:f3:42:be:fd:cc:75:6c:b2:b0:4e:a8:
a0:af:e6:1c:c4:dd:97:e5:15:21:1a:5c:08:cd:3d:57:54:35:
a7:2d:db:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4XZvCvvBc/YHGYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk
NWJjNjlhOGUtOWRiYy00NjQwLWI1MDYtODg0ODFiYWJlNTBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOOUO0SV7R5o5bCCZZBdekemBj1WTdmIHGEi
ACxS/3S3L3sB7LKVGnfwjbD7AlIorkfuGKjRFLeen8IJERnisFFXOKhFwYwz3mTZ
51H2I5lyUCOGpqMBtFH0lHM2iFQW6RL2MzUIAkotNUMLL7qoSIPS8DHBE8SRu6NU
6CCrmGMyP/w6brEAXmC75cvzTaJQ/ltU407iOuEo2xbZXOt1yFSHKBENIQGZfw6h
N+Up06aKmF92EYrZmwdi4GHhfe5HwxOoXn7pxtRZ86KiRXAYfk1hah0D7BK8LtkW
qpYlrzQEg8Cfe/W0PIOvZtSBJhiAW2LYEjiZLJqKr+ysdYgGcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPkH7XN46SHh7KMV35bW6uHhlIVGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjgxMjYzYTMtOTcxYy0z
OTY1LTg4ZjEtMjdjMzVjYWEzN2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFnpC7e7+dli0FIpERM97s97Wa9/CTjK6yfjIOI3Mm9M6MSdm/x+Gitm
Xhxuh453VlkKKQxFBVXwR6ovAKNBgBYVXUpB+bhYY1LawF92g6eY0vQaRjyrwG8C
QN40z5c4eQKRJjgx7X63019aLH8OTBrGb6A9JfjduRNZvoej8rBBrC8knaVm/xut
JMt3J8DpODcEpqEACrm67flrYMiB0UpX9W36GTaqeeYfBgWpIR2IITgpDrJerPDc
9oIsMs5j2jtzS3u00CvSHPt3WSiPvN2W8SEvSDBqLGiVTx22p0LzQr79zHVssrBO
qKCv5hzE3ZflFSEaXAjNPVdUNact23c=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:48:59 2025 by rpki-client