Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aec0193e-814b-3e6b-b99b-76fc52393561.roa
File: aec0193e-814b-3e6b-b99b-76fc52393561.roa (raw, json)
Hash identifier: yqUWLGJn9Hqo5z0u8lJ9KCMrcbaJNs4mUBVT6TrygWk=
Subject key identifier: AA:B4:E3:D8:30:F5:DB:12:EA:B0:FB:97:B3:FA:14:7A:86:9C:35:83
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849088191460082FFBD494BA2C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aec0193e-814b-3e6b-b99b-76fc52393561.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.68.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:91:46:00:82:ff:bd:49:4b:a2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=744a9d57-caf4-400b-a0b5-dfb5f20d9a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:87:24:5a:6c:f3:73:42:8c:29:ca:a9:a8:3d:
02:d8:bf:76:a7:93:d3:4b:23:08:b5:9a:ef:13:47:
37:81:98:e9:9d:fb:dc:de:85:50:6a:4e:7b:40:30:
1d:4f:b3:a2:6a:10:2b:5e:1c:9c:50:f3:9d:70:58:
54:16:31:5a:39:3e:ef:ce:41:bd:97:03:b6:f0:df:
66:8f:80:13:c2:24:70:08:71:94:17:f8:66:39:42:
2b:dc:78:ac:4f:fb:4e:b2:16:09:b3:04:08:05:1d:
e0:6d:13:18:f1:cf:66:a8:3f:d6:9c:c2:2a:26:fa:
39:a4:80:57:34:8b:2e:32:ea:ed:43:23:85:95:3e:
f5:6b:67:1a:24:2e:5a:e7:30:fd:09:b3:e1:e5:c3:
d9:a1:9b:8c:3a:d2:c3:6c:b9:31:78:78:7d:37:a0:
ae:eb:13:f8:ca:ed:9c:d2:ba:a3:cb:7e:d5:23:7c:
44:7b:84:4c:b7:2c:b3:a7:87:a5:b0:cb:87:79:97:
69:74:28:1b:60:69:6e:2a:b9:78:ef:db:16:72:85:
0e:7e:59:96:93:04:12:80:e7:1e:c3:dd:b4:40:99:
56:1b:24:14:ef:a3:b9:44:23:ed:45:8c:a1:f1:a9:
10:39:8e:5c:7a:e5:fd:e0:74:cd:46:3a:fc:1e:67:
47:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B4:E3:D8:30:F5:DB:12:EA:B0:FB:97:B3:FA:14:7A:86:9C:35:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aec0193e-814b-3e6b-b99b-76fc52393561.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:02:28:9c:3b:5a:d2:9f:6f:ee:1d:28:57:f0:f7:2c:a8:ca:
6b:db:f5:b8:a0:b0:93:33:3c:3b:9d:1a:6a:ec:42:aa:22:bf:
67:08:da:22:52:94:b1:e4:51:36:b3:39:5e:2a:a2:e3:01:1c:
06:1f:42:df:51:77:07:b1:44:e1:ef:f2:97:45:66:b2:b5:df:
bf:8c:fc:36:68:0b:6f:ff:af:bf:38:ae:66:2a:99:2c:9b:a3:
3c:18:c0:04:08:8c:27:b5:55:9d:89:2c:96:2a:f3:cc:98:b4:
26:55:38:9c:f1:fd:b2:86:6b:14:c1:c4:b2:5c:c8:79:06:a1:
58:be:b7:1e:9a:ce:fa:1f:ee:0b:bf:7b:b7:81:5a:2b:b4:d7:
68:a8:4a:15:c6:0c:13:48:1c:f4:c4:b0:f1:3c:59:ef:e9:22:
92:ce:6c:cc:87:8b:0d:b4:d8:5f:f7:75:cc:e2:a0:b8:75:87:
fd:b9:58:ba:cd:a0:54:d9:11:38:ab:35:be:c3:55:64:27:3e:
3c:7b:25:5d:e2:ff:5a:46:b3:e7:6d:76:20:67:59:f0:94:2b:
f4:f2:14:a4:20:2b:bf:40:4e:39:4c:58:35:d0:dc:6d:a0:38:
c8:5e:f4:e8:4c:d4:77:a6:71:43:8b:fc:8b:1c:30:d6:a2:7a:
c8:6c:07:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgZFGAIL/vUlLosAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk
NzQ0YTlkNTctY2FmNC00MDBiLWEwYjUtZGZiNWYyMGQ5YTI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIckWmzzc0KMKcqpqD0C2L92p5PTSyMItZrv
E0c3gZjpnfvc3oVQak57QDAdT7OiahArXhycUPOdcFhUFjFaOT7vzkG9lwO28N9m
j4ATwiRwCHGUF/hmOUIr3HisT/tOshYJswQIBR3gbRMY8c9mqD/WnMIqJvo5pIBX
NIsuMurtQyOFlT71a2caJC5a5zD9CbPh5cPZoZuMOtLDbLkxeHh9N6Cu6xP4yu2c
0rqjy37VI3xEe4RMtyyzp4elsMuHeZdpdCgbYGluKrl479sWcoUOflmWkwQSgOce
w920QJlWGyQU76O5RCPtRYyh8akQOY5ceuX94HTNRjr8HmdHRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKq049gw9dsS6rD7l7P6FHqGnDWDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWVjMDE5M2UtODE0Yi0z
ZTZiLWI5OWItNzZmYzUyMzkzNTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEQ0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJcCKJw7WtKfb+4dKFfw9yyoymvb9bigsJMzPDudGmrsQqoiv2cI2iJS
lLHkUTazOV4qouMBHAYfQt9RdwexROHv8pdFZrK137+M/DZoC2//r784rmYqmSyb
ozwYwAQIjCe1VZ2JLJYq88yYtCZVOJzx/bKGaxTBxLJcyHkGoVi+tx6azvof7gu/
e7eBWiu012ioShXGDBNIHPTEsPE8We/pIpLObMyHiw202F/3dczioLh1h/25WLrN
oFTZETirNb7DVWQnPjx7JV3i/1pGs+dtdiBnWfCUK/TyFKQgK79ATjlMWDXQ3G2g
OMhe9OhM1HemcUOL/IscMNaieshsB/4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:57:11 2025 by rpki-client