Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34bfc0b2-9b92-3272-9c81-8a0186cf6d8f.roa
File: 34bfc0b2-9b92-3272-9c81-8a0186cf6d8f.roa (raw, json)
Hash identifier: x7pAD/aCx29gP+TKYFDPL1mQhPb4jCdQDHmDx2UDBz4=
Subject key identifier: 5C:4C:8C:E2:BB:A4:6E:13:09:CE:91:A3:B9:88:F2:7E:43:19:9C:50
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584909E69CB34DF9DB211FAE9D40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34bfc0b2-9b92-3272-9c81-8a0186cf6d8f.roa
Signing time: Sat 01 Mar 2025 02:00:39 +0000
ROA not before: Sat 01 Mar 2025 02:00:39 +0000
ROA not after: Fri 30 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 172.68.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:e6:9c:b3:4d:f9:db:21:1f:ae:9d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 1 02:00:39 2025 GMT
Not After : May 30 01:00:39 2025 GMT
Subject: CN=7ed174a2-5bf7-42fa-9097-ca735ad923fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9b:69:7a:33:79:a3:9a:55:26:de:7d:9c:3a:
42:e9:af:f7:ed:1e:ad:ee:9a:3d:dd:c2:ce:5b:cc:
4f:99:4e:c5:5b:ea:96:fa:14:7e:fb:d8:99:ac:a3:
d6:27:ed:c6:3e:21:a6:de:d7:4a:98:67:72:66:85:
13:e8:42:37:e2:1b:d8:16:bf:35:2f:22:d0:7f:38:
bf:ff:ce:97:c5:66:ae:96:12:7c:64:a5:01:92:ca:
95:58:8f:3c:62:e4:0b:23:66:8c:70:c3:23:76:da:
ce:6e:26:24:4b:5e:ac:0c:93:72:9d:de:e3:75:b3:
ac:c5:a3:62:2e:a1:74:f6:9c:37:01:8d:ac:8f:47:
fd:cf:79:7e:7b:0e:fa:08:98:26:01:a8:2c:95:58:
23:ff:d6:37:51:9c:f6:90:ad:9c:e6:4f:a7:11:d7:
f6:8d:16:6c:50:7b:cb:e3:71:3a:68:a0:a0:11:c2:
2a:db:6f:b7:13:1e:f5:cc:62:21:af:b8:da:e7:00:
ee:48:f5:4b:28:67:9e:9e:3d:12:61:57:a5:73:f0:
13:64:bc:37:b6:e1:fa:26:7d:84:b6:99:ae:d3:ea:
05:48:0f:e0:b0:83:89:e1:4c:fb:34:a3:11:61:fa:
71:26:24:0d:83:71:2e:0c:3d:86:59:92:14:e5:eb:
e8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4C:8C:E2:BB:A4:6E:13:09:CE:91:A3:B9:88:F2:7E:43:19:9C:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34bfc0b2-9b92-3272-9c81-8a0186cf6d8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:78:a7:8c:b0:1b:78:f1:f1:d2:9a:1d:80:22:1a:c8:86:44:
ed:25:be:97:6c:57:b2:53:0d:0e:ae:73:53:c1:59:66:c6:0a:
91:47:99:be:e0:53:27:f1:ed:d0:c4:5f:b7:9f:db:05:a1:89:
08:a0:cc:a3:86:28:43:3d:8f:65:17:3b:67:22:bf:b2:8c:a5:
e6:6f:a7:8d:82:73:db:ce:2f:b2:e3:48:88:18:4f:a0:dc:a1:
94:02:c1:20:a7:5f:cd:f2:01:e9:6d:37:a6:16:36:6e:d7:54:
67:6d:0d:be:b2:91:87:ee:47:67:d0:2d:fe:52:dd:15:4d:dd:
fc:35:18:d8:7a:4a:43:8f:1a:70:0f:5e:15:73:ea:41:fa:23:
ae:d6:d0:f5:7e:f3:50:26:4a:55:60:62:85:31:67:a0:f9:e3:
68:88:97:ae:90:d4:09:46:9b:4e:71:a3:6c:a8:03:43:29:04:
c6:43:69:ab:fb:75:8b:0e:9d:6e:03:e3:63:28:36:f1:f4:3a:
36:50:73:95:86:c4:b9:5a:67:a1:44:94:88:48:a6:9b:ef:18:
71:b2:0c:91:5e:00:da:33:4e:7b:4e:53:fb:1e:35:e7:39:3e:
02:7e:a6:44:e0:7d:6d:c6:4f:60:3d:35:52:75:e0:04:f7:98:
c0:4b:9e:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5pyzTfnbIR+unUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk
N2VkMTc0YTItNWJmNy00MmZhLTkwOTctY2E3MzVhZDkyM2ZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5tpejN5o5pVJt59nDpC6a/37R6t7po93cLO
W8xPmU7FW+qW+hR++9iZrKPWJ+3GPiGm3tdKmGdyZoUT6EI34hvYFr81LyLQfzi/
/86XxWaulhJ8ZKUBksqVWI88YuQLI2aMcMMjdtrObiYkS16sDJNynd7jdbOsxaNi
LqF09pw3AY2sj0f9z3l+ew76CJgmAagslVgj/9Y3UZz2kK2c5k+nEdf2jRZsUHvL
43E6aKCgEcIq22+3Ex71zGIhr7ja5wDuSPVLKGeenj0SYVelc/ATZLw3tuH6Jn2E
tpmu0+oFSA/gsIOJ4Uz7NKMRYfpxJiQNg3EuDD2GWZIU5evoSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFxMjOK7pG4TCc6Ro7mI8n5DGZxQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzRiZmMwYjItOWI5Mi0z
MjcyLTljODEtOGEwMTg2Y2Y2ZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC54p4ywG3jx8dKaHYAiGsiGRO0lvpdsV7JTDQ6uc1PBWWbGCpFHmb7g
Uyfx7dDEX7ef2wWhiQigzKOGKEM9j2UXO2civ7KMpeZvp42Cc9vOL7LjSIgYT6Dc
oZQCwSCnX83yAeltN6YWNm7XVGdtDb6ykYfuR2fQLf5S3RVN3fw1GNh6SkOPGnAP
XhVz6kH6I67W0PV+81AmSlVgYoUxZ6D542iIl66Q1AlGm05xo2yoA0MpBMZDaav7
dYsOnW4D42MoNvH0OjZQc5WGxLlaZ6FElIhIppvvGHGyDJFeANozTntOU/seNec5
PgJ+pkTgfW3GT2A9NVJ14AT3mMBLntc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:53:19 2025 by rpki-client