Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6f08d253-32e3-370e-97ee-7b41bde60260.roa
File: 6f08d253-32e3-370e-97ee-7b41bde60260.roa (raw, json)
Hash identifier: SY5LJH7nNJX5ck73Yf1zoDw7btI6tr1K3cVU6mQTNY8=
Subject key identifier: AA:45:C5:E7:94:E0:69:85:52:0C:5C:B9:61:BB:1D:45:5C:9D:64:88
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849088190647BAE53B8F2DADE40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6f08d253-32e3-370e-97ee-7b41bde60260.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.68.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:90:64:7b:ae:53:b8:f2:da:de:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=cb8e8c9d-caff-4d99-b365-dfa5c8026139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:01:0e:ae:ca:ce:76:70:0d:b1:31:3c:d1:62:
5d:7b:c0:fe:f8:f2:d9:2b:c7:04:f9:8b:12:44:c7:
eb:0f:72:3b:77:cc:f1:ce:fa:ce:7f:4a:d0:a7:8e:
8d:34:9e:b3:aa:b2:8f:8d:71:c0:b8:1d:2c:63:19:
19:f8:22:67:0e:af:7e:c2:85:84:23:3e:20:49:b6:
8b:73:9c:e7:e9:a6:df:a0:18:73:95:e0:6d:14:a1:
f9:19:28:4b:f2:7c:5f:04:ad:b8:91:dd:7f:69:f7:
66:45:3f:77:72:32:17:bf:c9:df:32:39:d8:61:92:
ff:ce:79:e9:dc:fb:61:f6:e9:73:74:78:a7:20:a7:
dd:b1:e3:0f:06:f8:fe:06:13:6a:67:f5:8a:63:a3:
be:af:ba:e7:e3:4f:a3:b4:32:9c:89:ca:37:fb:43:
b3:f6:c1:67:fd:9b:0b:46:6c:0a:f6:30:df:c0:69:
81:11:a8:08:2d:cf:f5:d0:f3:4a:ec:a4:62:17:f9:
90:be:ed:25:65:4b:03:1f:2a:19:c7:71:49:91:0f:
b2:e1:c8:55:f7:b5:86:e5:ab:cb:8b:2e:a4:a0:b3:
ff:51:ad:a5:e8:5e:8e:b0:94:b5:f4:04:d0:1e:33:
a7:da:de:ea:8c:d9:59:5c:3f:41:b3:e0:58:78:b1:
3a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:45:C5:E7:94:E0:69:85:52:0C:5C:B9:61:BB:1D:45:5C:9D:64:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6f08d253-32e3-370e-97ee-7b41bde60260.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:63:fc:76:0d:d2:aa:f4:8b:92:8e:11:47:38:8e:f6:4d:41:
87:d5:e4:f2:77:cc:91:82:3d:d8:9e:e4:08:ab:58:7c:75:91:
45:4a:e5:0f:99:e9:52:5c:30:d5:2e:33:96:bf:7a:e8:95:ee:
4d:f9:5e:c6:24:c6:21:98:96:20:19:90:a8:17:b8:5d:ec:a2:
ab:7c:39:5d:82:23:2d:22:27:b9:ef:e0:62:27:2b:79:0e:4b:
e9:09:c7:0f:7c:b0:4b:22:40:96:2a:45:5c:4b:e4:fd:b5:93:
85:ee:0b:0d:24:52:40:b5:cf:b7:06:42:3a:d3:03:8a:d9:4c:
d3:4f:62:0d:46:d0:c0:a4:e6:65:43:e6:17:0f:d4:b5:0a:b7:
d2:cb:95:29:0a:7c:56:7d:b4:4e:bf:22:be:d3:8c:1e:2d:25:
44:3b:8c:68:40:63:2e:49:5b:6b:5e:61:1e:d2:6b:a6:11:e1:
3f:d7:6e:cb:1f:77:9f:66:78:b6:5d:b5:34:09:6e:b4:a9:7e:
77:cb:42:8c:7a:f0:93:d0:be:70:43:2d:27:3c:c2:a7:fd:51:
cf:64:b5:c9:b3:af:e5:c0:77:ce:bb:df:ad:61:80:b7:35:7d:
41:ff:5c:a9:03:58:87:9e:3c:65:06:95:8f:c0:67:e5:66:07:
05:14:53:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgZBke65TuPLa3kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk
Y2I4ZThjOWQtY2FmZi00ZDk5LWIzNjUtZGZhNWM4MDI2MTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQEOrsrOdnANsTE80WJde8D++PLZK8cE+YsS
RMfrD3I7d8zxzvrOf0rQp46NNJ6zqrKPjXHAuB0sYxkZ+CJnDq9+woWEIz4gSbaL
c5zn6abfoBhzleBtFKH5GShL8nxfBK24kd1/afdmRT93cjIXv8nfMjnYYZL/znnp
3Pth9ulzdHinIKfdseMPBvj+BhNqZ/WKY6O+r7rn40+jtDKcico3+0Oz9sFn/ZsL
RmwK9jDfwGmBEagILc/10PNK7KRiF/mQvu0lZUsDHyoZx3FJkQ+y4chV97WG5avL
iy6koLP/Ua2l6F6OsJS19ATQHjOn2t7qjNlZXD9Bs+BYeLE6BwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKpFxeeU4GmFUgxcuWG7HUVcnWSIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmYwOGQyNTMtMzJlMy0z
NzBlLTk3ZWUtN2I0MWJkZTYwMjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAhj/HYN0qr0i5KOEUc4jvZNQYfV5PJ3zJGCPdie5AirWHx1kUVK5Q+Z
6VJcMNUuM5a/euiV7k35XsYkxiGYliAZkKgXuF3soqt8OV2CIy0iJ7nv4GInK3kO
S+kJxw98sEsiQJYqRVxL5P21k4XuCw0kUkC1z7cGQjrTA4rZTNNPYg1G0MCk5mVD
5hcP1LUKt9LLlSkKfFZ9tE6/Ir7TjB4tJUQ7jGhAYy5JW2teYR7Sa6YR4T/Xbssf
d59meLZdtTQJbrSpfnfLQox68JPQvnBDLSc8wqf9Uc9ktcmzr+XAd867361hgLc1
fUH/XKkDWIeePGUGlY/AZ+VmBwUUU18=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:44:03 2025 by rpki-client