Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9098bda0-9e5c-3679-81a4-6aaee1d0a663.roa
File: 9098bda0-9e5c-3679-81a4-6aaee1d0a663.roa (raw, json)
Hash identifier: YIYFe37mJ1ByXly5nQrmP46KH8dBR78sizYPchgAzKw=
Subject key identifier: D5:A3:2C:2C:88:2F:10:9B:7D:00:B9:62:64:3B:78:4A:DE:E8:40:33
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6BFC0186168849A2337C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9098bda0-9e5c-3679-81a4-6aaee1d0a663.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 172.64.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:bf:c0:18:61:68:84:9a:23:37:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=28f9ad98-ed78-4788-862f-68bf229b0f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:63:26:55:26:97:3b:d2:4a:a7:c3:6c:98:16:
43:07:c7:ef:c9:20:f5:26:e9:44:b0:13:cd:18:0a:
1b:55:7c:46:f5:5a:79:66:d0:f1:9a:e2:e5:c2:f8:
32:91:65:2a:d1:9c:3c:55:db:61:1e:3f:f1:36:a5:
04:90:a0:d5:ab:39:cc:5b:e6:2a:6e:d4:e8:ca:74:
6a:9b:d0:1d:04:d8:7d:5e:fe:34:4e:1c:e7:b4:3e:
0b:ef:24:ff:b3:92:49:3a:ec:bb:8f:04:88:47:79:
f2:3e:7b:f8:62:64:91:c5:00:a3:24:8c:2a:a1:b3:
e6:52:0c:e9:bb:99:02:a0:8f:48:49:4e:f1:8d:5c:
b6:81:4c:a2:cd:2b:d0:f8:80:1b:ce:26:52:e4:66:
23:7d:5f:fd:3d:0e:a7:37:4a:74:c1:c7:b7:3f:1d:
bf:0e:76:79:42:7c:a8:87:f8:72:aa:91:70:fa:36:
7a:57:e6:33:be:fb:ba:83:32:75:4d:a5:fe:53:6a:
0a:0d:d4:6f:e3:38:66:9d:e1:27:7f:33:57:12:08:
5a:ae:a4:2c:db:c4:a9:12:f7:12:0b:f2:ed:2c:22:
7d:8e:a4:19:06:84:bc:ba:ee:12:84:e1:39:70:a3:
a2:84:c0:04:e3:9d:1e:64:67:9d:fe:3d:8f:06:8b:
f6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A3:2C:2C:88:2F:10:9B:7D:00:B9:62:64:3B:78:4A:DE:E8:40:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9098bda0-9e5c-3679-81a4-6aaee1d0a663.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.64.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:28:18:94:28:79:22:55:9f:53:b7:9a:a5:d2:b7:6a:7c:c0:
68:08:73:db:a5:5a:0e:dc:91:ec:ac:3d:05:fc:05:16:09:11:
b4:09:47:42:f2:2c:b2:ee:df:43:11:9e:0d:32:00:e6:8c:27:
e2:46:ca:84:d4:77:6f:da:b5:ec:56:43:90:c2:85:12:f7:b4:
e9:17:c2:6a:99:e8:79:02:84:ef:36:e8:79:ae:29:97:25:1e:
62:c2:e4:34:3f:c8:7c:93:3b:07:2c:f3:dd:67:ef:10:1b:9e:
a1:48:06:82:81:e0:b3:2d:10:cd:c8:e2:17:b1:a9:f9:8f:66:
7d:65:26:97:5e:20:5b:57:a1:21:8b:59:dc:5e:17:c0:7c:ba:
5b:17:b7:ab:8b:77:42:32:09:cd:c1:dc:f4:45:e7:07:a0:2f:
b2:81:0b:be:1c:2c:0b:78:3e:62:eb:c4:5b:fd:8c:4c:2a:ba:
6d:a9:ef:b1:ec:c7:2e:8e:df:a4:c9:2a:34:9e:4f:72:cc:db:
1f:3c:63:ce:cf:ea:41:c1:c5:10:c8:57:b8:c2:92:d5:4a:5c:
09:fc:dc:95:0d:b7:de:36:00:54:b6:fd:bf:1a:e0:40:48:3a:
8a:cc:2b:aa:15:5f:73:c6:44:9d:00:0b:9f:6b:d2:b9:93:c0:
5d:7c:fd:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtr/AGGFohJojN8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk
MjhmOWFkOTgtZWQ3OC00Nzg4LTg2MmYtNjhiZjIyOWIwZjY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWMmVSaXO9JKp8NsmBZDB8fvySD1JulEsBPN
GAobVXxG9Vp5ZtDxmuLlwvgykWUq0Zw8VdthHj/xNqUEkKDVqznMW+YqbtToynRq
m9AdBNh9Xv40ThzntD4L7yT/s5JJOuy7jwSIR3nyPnv4YmSRxQCjJIwqobPmUgzp
u5kCoI9ISU7xjVy2gUyizSvQ+IAbziZS5GYjfV/9PQ6nN0p0wce3Px2/DnZ5Qnyo
h/hyqpFw+jZ6V+Yzvvu6gzJ1TaX+U2oKDdRv4zhmneEnfzNXEgharqQs28SpEvcS
C/LtLCJ9jqQZBoS8uu4ShOE5cKOihMAE450eZGed/j2PBov2ZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNWjLCyILxCbfQC5YmQ7eEre6EAzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTA5OGJkYTAtOWU1Yy0z
Njc5LTgxYTQtNmFhZWUxZDBhNjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArECUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAQoGJQoeSJVn1O3mqXSt2p8wGgIc9ulWg7ckeysPQX8BRYJEbQJR0Ly
LLLu30MRng0yAOaMJ+JGyoTUd2/atexWQ5DChRL3tOkXwmqZ6HkChO826HmuKZcl
HmLC5DQ/yHyTOwcs891n7xAbnqFIBoKB4LMtEM3I4hexqfmPZn1lJpdeIFtXoSGL
WdxeF8B8ulsXt6uLd0IyCc3B3PRF5wegL7KBC74cLAt4PmLrxFv9jEwqum2p77Hs
xy6O36TJKjSeT3LM2x88Y87P6kHBxRDIV7jCktVKXAn83JUNt942AFS2/b8a4EBI
OorMK6oVX3PGRJ0AC59r0rmTwF18/S4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:54:30 2025 by rpki-client