Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bfcb1b8-fdc8-33e4-a1e0-0741f7b101ee.roa
File: 5bfcb1b8-fdc8-33e4-a1e0-0741f7b101ee.roa (raw, json)
Hash identifier: wRhRP46TROvmCW5wXCiN8zBvcsr+QJbnWEqxiuAoKPQ=
Subject key identifier: F1:0E:AF:D4:C7:E5:08:75:B0:1F:9F:70:CD:D3:E9:CE:3D:6B:A9:18
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584908819040BC168EF066376380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bfcb1b8-fdc8-33e4-a1e0-0741f7b101ee.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.68.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:90:40:bc:16:8e:f0:66:37:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=53f5c5f6-bebf-4d74-bc2e-4ca071119629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e9:87:7d:90:34:2c:50:0a:8d:42:b1:1b:d5:
0f:03:4a:a4:ef:65:64:1d:49:d7:71:94:e9:9d:75:
09:04:d8:76:4c:63:4d:e0:e6:e5:5c:27:cc:27:be:
04:19:f3:36:31:12:03:38:3f:ec:fd:72:a6:77:ea:
18:44:92:3d:da:21:90:ed:11:c3:6e:43:44:ce:64:
40:94:a5:9a:77:fe:cd:f2:57:59:18:b7:41:b2:e3:
73:80:4e:f2:99:d9:ae:1c:f7:a1:0b:7a:e8:3e:f5:
38:47:eb:33:df:aa:0e:41:f9:fd:7c:89:03:db:3b:
44:d4:b0:c0:2b:81:6d:b4:30:fe:7d:94:02:e0:df:
c0:9f:dc:36:a9:28:83:d4:6d:61:00:c9:08:a4:c9:
64:44:a8:86:5d:89:61:27:c7:62:b6:23:21:fc:ea:
2a:bf:eb:af:74:47:2b:3d:4b:86:11:3b:7f:70:7f:
3a:3e:99:e8:b5:a1:95:78:df:86:da:ea:80:33:79:
09:74:dd:d0:83:f8:f6:6b:7c:59:8c:d1:5d:d7:41:
4b:92:06:11:bb:64:6c:7a:61:85:bb:ba:2b:35:74:
87:40:b7:46:ec:bd:29:7d:88:aa:84:c5:03:b4:2a:
eb:b4:bd:63:6b:0e:0b:18:50:e0:c3:92:21:78:c5:
2b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0E:AF:D4:C7:E5:08:75:B0:1F:9F:70:CD:D3:E9:CE:3D:6B:A9:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bfcb1b8-fdc8-33e4-a1e0-0741f7b101ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:ea:2b:ea:46:88:7e:84:3c:2a:31:2f:30:84:8d:d9:44:56:
08:27:57:3c:2a:0e:17:99:32:1c:18:ad:5c:d1:7e:49:5b:1e:
a2:4e:63:34:6a:3f:11:2d:18:a3:0c:91:54:bc:38:d3:f0:7a:
30:62:95:b9:4c:64:f6:ae:ec:86:f1:ff:4d:d7:2f:20:68:5b:
73:8f:ac:16:54:18:8a:36:c7:c5:8f:04:ad:1b:7a:29:4e:0a:
ca:11:2a:b3:0f:f5:da:0d:09:5e:e4:57:05:42:36:b0:e4:bb:
b3:79:bc:8d:b2:76:43:8d:1f:1e:ac:b4:22:21:8d:fb:d2:af:
a1:38:ad:1a:7f:24:cc:b9:92:4e:a2:74:11:45:74:c5:85:83:
93:26:5b:3b:cd:24:b5:42:cd:5f:cd:77:65:f7:28:2e:78:44:
ae:2f:b8:44:d0:52:ec:29:da:78:3b:be:88:15:be:b0:19:a8:
da:9b:5c:6c:b3:66:2b:d9:ac:5c:2b:a5:80:7e:58:17:ae:d5:
57:c6:5c:a1:c2:13:5d:72:a5:06:45:6a:e5:62:c6:d1:80:e1:
d2:cc:47:10:27:7c:ac:ab:a1:3d:21:ef:ea:82:67:d2:6a:35:
70:5b:32:dd:89:ee:4e:7c:0f:02:58:bd:2c:77:0a:b6:f8:bc:
ae:74:fb:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgZBAvBaO8GY3Y4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk
NTNmNWM1ZjYtYmViZi00ZDc0LWJjMmUtNGNhMDcxMTE5NjI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqemHfZA0LFAKjUKxG9UPA0qk72VkHUnXcZTp
nXUJBNh2TGNN4OblXCfMJ74EGfM2MRIDOD/s/XKmd+oYRJI92iGQ7RHDbkNEzmRA
lKWad/7N8ldZGLdBsuNzgE7ymdmuHPehC3roPvU4R+sz36oOQfn9fIkD2ztE1LDA
K4FttDD+fZQC4N/An9w2qSiD1G1hAMkIpMlkRKiGXYlhJ8ditiMh/Ooqv+uvdEcr
PUuGETt/cH86PpnotaGVeN+G2uqAM3kJdN3Qg/j2a3xZjNFd10FLkgYRu2RsemGF
u7orNXSHQLdG7L0pfYiqhMUDtCrrtL1jaw4LGFDgw5IheMUrCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPEOr9TH5Qh1sB+fcM3T6c49a6kYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWJmY2IxYjgtZmRjOC0z
M2U0LWExZTAtMDc0MWY3YjEwMWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB/qK+pGiH6EPCoxLzCEjdlEVggnVzwqDheZMhwYrVzRfklbHqJOYzRq
PxEtGKMMkVS8ONPwejBilblMZPau7Ibx/03XLyBoW3OPrBZUGIo2x8WPBK0beilO
CsoRKrMP9doNCV7kVwVCNrDku7N5vI2ydkONHx6stCIhjfvSr6E4rRp/JMy5kk6i
dBFFdMWFg5MmWzvNJLVCzV/Nd2X3KC54RK4vuETQUuwp2ng7vogVvrAZqNqbXGyz
ZivZrFwrpYB+WBeu1VfGXKHCE11ypQZFauVixtGA4dLMRxAnfKyroT0h7+qCZ9Jq
NXBbMt2J7k58DwJYvSx3Crb4vK50+yg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:25 2025 by rpki-client