Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb9d9ce3-2664-30da-8611-f3adf046b24c.roa
File: cb9d9ce3-2664-30da-8611-f3adf046b24c.roa (raw, json)
Hash identifier: GC7tQcS2yJiKuf5Q7NyBbAn5OKgYu9OogwzC5SqUazc=
Subject key identifier: 8D:56:2A:16:01:37:96:78:60:02:4D:5F:3E:3A:A6:17:37:C4:F6:07
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584910E17315F1852106A6E13400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb9d9ce3-2664-30da-8611-f3adf046b24c.roa
Signing time: Mon 03 Mar 2025 14:00:53 +0000
ROA not before: Mon 03 Mar 2025 14:00:53 +0000
ROA not after: Sun 01 Jun 2025 13:00:53 +0000
asID: 13335
IP address blocks: 172.71.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:e1:73:15:f1:85:21:06:a6:e1:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 14:00:53 2025 GMT
Not After : Jun 1 13:00:53 2025 GMT
Subject: CN=a8eb40ed-d645-4c79-a450-35d472d8de84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d2:67:68:ac:03:64:d8:47:c5:ec:90:31:23:
d2:fe:cf:2d:1f:f6:55:4c:fd:01:44:48:8c:09:4b:
20:01:72:79:8d:2f:3f:16:cd:85:cc:10:0c:3c:aa:
c7:cb:3d:9f:19:e8:f1:70:2c:14:f0:3c:96:20:d0:
d4:87:8a:e1:29:04:87:00:51:3a:81:31:6c:7a:8a:
37:da:bb:c8:88:ac:ae:c3:8c:e9:eb:8b:01:5f:7e:
9b:db:9a:75:6c:d0:66:26:b4:b4:53:81:5f:2b:33:
c7:72:70:19:b0:9d:a8:c1:5c:e6:e9:1f:4f:7f:53:
f9:60:f9:e9:84:4a:19:7e:d0:a7:90:b5:25:81:fa:
b2:39:cc:c2:c6:a5:20:67:28:72:da:68:32:59:12:
dc:ff:38:e4:87:ab:93:84:78:68:2d:74:d2:0e:c2:
79:9c:34:de:7b:a2:11:6b:37:16:19:8b:28:ac:f9:
d3:74:03:36:a6:29:85:46:c9:eb:74:a9:48:03:cb:
0e:07:ea:26:f3:5e:d7:4a:f5:61:e8:38:05:1f:55:
fd:c5:6e:1a:8a:cb:cf:50:99:e1:b0:75:5f:6c:aa:
7b:e7:31:15:55:5a:a2:6c:50:93:08:47:eb:e5:a0:
6f:79:30:fd:47:98:9d:c7:dc:a8:c0:68:9c:30:d1:
f8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:56:2A:16:01:37:96:78:60:02:4D:5F:3E:3A:A6:17:37:C4:F6:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb9d9ce3-2664-30da-8611-f3adf046b24c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:b8:72:23:01:00:1c:8a:37:ed:35:08:c4:1a:9a:61:a4:af:
91:0d:03:e5:e5:5c:44:3c:c6:9b:b7:2d:87:e7:13:84:60:c7:
70:ed:40:65:5f:0e:6e:cd:a9:cd:a4:50:56:a4:f3:13:fd:6d:
57:1d:8e:a0:d1:28:80:6a:22:af:c3:35:a0:d6:7b:5d:dc:b5:
b2:91:7d:a2:27:74:6e:4f:ee:50:ef:53:f9:df:44:0f:2d:f4:
78:dc:8e:5d:d9:dc:e2:ee:c9:f1:a3:fe:00:c5:ac:35:d6:09:
48:b0:d7:6f:18:cf:40:8b:aa:9a:85:83:f3:1d:49:b4:ba:e0:
64:f4:cb:24:34:cf:5f:99:9c:c0:32:4d:f8:c7:82:34:5a:5d:
f2:2e:a4:05:ce:2b:6b:37:43:23:fc:a0:4e:41:7d:1d:e2:8a:
92:31:eb:b3:f3:7d:e6:5a:4f:ae:54:f9:42:c3:78:51:14:a0:
8c:2f:09:24:ee:13:01:45:2b:bd:db:f5:73:c9:e6:08:6e:c5:
c8:81:64:ac:80:b5:b2:67:24:08:65:02:4c:f2:75:97:3e:16:
2e:65:10:66:4d:e7:d2:da:5f:60:e8:2e:0d:88:02:16:77:b5:
ad:89:c1:fb:b0:33:cb:cf:6b:00:88:26:6e:ad:32:8c:c9:58:
0e:f9:83:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4XMV8YUhBqbhNAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk
YThlYjQwZWQtZDY0NS00Yzc5LWE0NTAtMzVkNDcyZDhkZTg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9JnaKwDZNhHxeyQMSPS/s8tH/ZVTP0BREiM
CUsgAXJ5jS8/Fs2FzBAMPKrHyz2fGejxcCwU8DyWINDUh4rhKQSHAFE6gTFseoo3
2rvIiKyuw4zp64sBX36b25p1bNBmJrS0U4FfKzPHcnAZsJ2owVzm6R9Pf1P5YPnp
hEoZftCnkLUlgfqyOczCxqUgZyhy2mgyWRLc/zjkh6uThHhoLXTSDsJ5nDTee6IR
azcWGYsorPnTdAM2pimFRsnrdKlIA8sOB+om817XSvVh6DgFH1X9xW4aisvPUJnh
sHVfbKp75zEVVVqibFCTCEfr5aBveTD9R5idx9yowGicMNH4cQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI1WKhYBN5Z4YAJNXz46phc3xPYHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2I5ZDljZTMtMjY2NC0z
MGRhLTg2MTEtZjNhZGYwNDZiMjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEW4ciMBAByKN+01CMQammGkr5ENA+XlXEQ8xpu3LYfnE4Rgx3DtQGVf
Dm7Nqc2kUFak8xP9bVcdjqDRKIBqIq/DNaDWe13ctbKRfaIndG5P7lDvU/nfRA8t
9Hjcjl3Z3OLuyfGj/gDFrDXWCUiw128Yz0CLqpqFg/MdSbS64GT0yyQ0z1+ZnMAy
TfjHgjRaXfIupAXOK2s3QyP8oE5BfR3iipIx67PzfeZaT65U+ULDeFEUoIwvCSTu
EwFFK73b9XPJ5ghuxciBZKyAtbJnJAhlAkzydZc+Fi5lEGZN59LaX2DoLg2IAhZ3
ta2JwfuwM8vPawCIJm6tMozJWA75gy4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:53:09 2025 by rpki-client