Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/91312105-e616-3a60-90b9-47e7f5bddb3e.roa
File: 91312105-e616-3a60-90b9-47e7f5bddb3e.roa (raw, json)
Hash identifier: o5BWFbp0VgABkb2ox/OKpk/aHrHA0EVsMkqJm/4QIms=
Subject key identifier: 48:9A:E6:2B:AC:72:CC:16:A3:47:65:09:3D:3D:B6:55:12:83:80:FD
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584910E1754226B92E2C0E538E00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/91312105-e616-3a60-90b9-47e7f5bddb3e.roa
Signing time: Mon 03 Mar 2025 14:00:53 +0000
ROA not before: Mon 03 Mar 2025 14:00:53 +0000
ROA not after: Sun 01 Jun 2025 13:00:53 +0000
asID: 13335
IP address blocks: 172.71.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:e1:75:42:26:b9:2e:2c:0e:53:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 14:00:53 2025 GMT
Not After : Jun 1 13:00:53 2025 GMT
Subject: CN=8d0e11f3-b3d6-4814-86af-19b386fc0b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:7c:68:f8:2e:fa:1a:73:eb:1b:fe:93:f9:
9d:31:65:11:03:29:f5:83:ac:25:9a:a1:f4:2b:0c:
5e:ae:77:09:94:40:a0:15:01:e6:87:9d:cd:b9:aa:
44:e5:21:7f:3d:86:ad:a0:10:1f:1b:a1:7a:fa:31:
91:b5:fe:74:ae:34:da:53:87:d7:a0:aa:b4:86:ef:
40:fd:9d:26:34:4b:f0:7a:9d:1e:5a:de:84:d9:2f:
e5:7d:20:38:ca:90:6f:9a:c2:39:e5:1c:5c:bf:ed:
aa:6e:09:51:6a:33:c4:a2:e1:ca:50:33:11:de:61:
a3:ab:f0:f1:7e:37:f8:9e:7e:d2:30:5c:44:f7:ac:
91:59:3c:05:e3:1f:8e:a9:0e:73:82:21:a7:4f:09:
e6:44:7b:93:4e:7a:87:3c:8e:55:24:f6:46:dd:5c:
20:17:27:64:8d:f7:16:d8:e5:2c:53:69:e8:5a:d6:
32:56:fd:96:9f:82:26:e9:18:36:76:69:81:4e:a9:
de:11:78:ed:1d:b3:a7:5f:0b:6d:6f:4b:4b:fc:12:
58:47:71:8f:b9:14:7a:df:e1:ee:62:b6:1e:94:94:
71:83:6c:5f:93:c9:24:28:74:87:1e:76:92:eb:c3:
bf:00:7e:d7:8f:1b:25:2f:f9:26:01:4f:69:c2:d8:
27:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9A:E6:2B:AC:72:CC:16:A3:47:65:09:3D:3D:B6:55:12:83:80:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/91312105-e616-3a60-90b9-47e7f5bddb3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:be:c5:cc:29:e4:c3:01:72:f0:a7:f9:68:95:31:28:44:07:
bb:aa:6f:94:0d:a1:51:88:71:e0:61:67:69:be:1b:ab:f3:11:
93:a6:1e:4a:15:d3:0e:b6:fa:01:a2:cc:68:0f:2b:78:5e:88:
87:0b:a9:ca:77:bf:68:76:93:68:92:7b:d8:d2:ec:a9:01:29:
aa:9e:53:bd:f2:3c:2a:9a:53:a0:63:00:c9:d6:a7:b9:a2:4c:
26:c6:d4:38:04:ed:38:94:91:30:74:9a:b3:a6:80:83:a7:74:
94:26:9a:5d:bb:fd:18:2a:3e:b6:9d:5f:62:a3:83:05:fe:da:
07:42:67:dd:a1:60:e7:4c:32:55:8b:55:c2:f2:c8:d4:9f:63:
67:b3:5a:81:8b:13:43:08:04:ce:8e:52:5a:30:a9:f1:3c:95:
e8:dc:5e:d3:97:01:b7:de:57:cc:c5:ff:90:b3:e2:be:d6:af:
9b:b9:46:c6:44:67:eb:a9:62:04:d1:31:41:f8:67:75:69:2c:
57:32:39:08:14:49:99:db:79:70:04:50:fb:ea:53:92:04:eb:
b0:92:25:7d:b2:7f:d0:fd:18:ef:02:21:28:06:af:fd:6f:10:
20:cf:00:e1:2a:b9:ce:1e:4e:1d:a6:a9:0c:79:51:bf:86:5f:
12:ee:25:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4XVCJrkuLA5TjgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk
OGQwZTExZjMtYjNkNi00ODE0LTg2YWYtMTliMzg2ZmMwYjA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTt8aPgu+hpz6xv+k/mdMWURAyn1g6wlmqH0
KwxerncJlECgFQHmh53NuapE5SF/PYatoBAfG6F6+jGRtf50rjTaU4fXoKq0hu9A
/Z0mNEvwep0eWt6E2S/lfSA4ypBvmsI55Rxcv+2qbglRajPEouHKUDMR3mGjq/Dx
fjf4nn7SMFxE96yRWTwF4x+OqQ5zgiGnTwnmRHuTTnqHPI5VJPZG3VwgFydkjfcW
2OUsU2noWtYyVv2Wn4Im6Rg2dmmBTqneEXjtHbOnXwttb0tL/BJYR3GPuRR63+Hu
YrYelJRxg2xfk8kkKHSHHnaS68O/AH7XjxslL/kmAU9pwtgnwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEia5iuscswWo0dlCT09tlUSg4D9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTEzMTIxMDUtZTYxNi0z
YTYwLTkwYjktNDdlN2Y1YmRkYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHC+xcwp5MMBcvCn+WiVMShEB7uqb5QNoVGIceBhZ2m+G6vzEZOmHkoV
0w62+gGizGgPK3heiIcLqcp3v2h2k2iSe9jS7KkBKaqeU73yPCqaU6BjAMnWp7mi
TCbG1DgE7TiUkTB0mrOmgIOndJQmml27/RgqPradX2KjgwX+2gdCZ92hYOdMMlWL
VcLyyNSfY2ezWoGLE0MIBM6OUlowqfE8lejcXtOXAbfeV8zF/5Cz4r7Wr5u5RsZE
Z+upYgTRMUH4Z3VpLFcyOQgUSZnbeXAEUPvqU5IE67CSJX2yf9D9GO8CISgGr/1v
ECDPAOEquc4eTh2mqQx5Ub+GXxLuJaI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:17:54 2025 by rpki-client