Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da62c422-da26-3214-ac5c-94122420dfd7.roa
File: da62c422-da26-3214-ac5c-94122420dfd7.roa (raw, json)
Hash identifier: 1z1nE0gqOS8dsOjzXUCbhi5YwkfbqeC5XeYDAiJdKyw=
Subject key identifier: E4:48:BC:B1:0E:A2:DB:88:8B:C4:43:26:ED:2C:7B:D5:05:6D:F7:ED
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490B4C0CB32C0E5B6FA698E000
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da62c422-da26-3214-ac5c-94122420dfd7.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.69.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:0c:b3:2c:0e:5b:6f:a6:98:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=e01145b5-dee9-4356-b799-d324c5603253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e0:00:01:24:07:2d:9c:c7:a9:83:eb:2c:18:
92:61:6c:fb:a4:58:85:89:62:3e:4a:72:0d:a7:df:
a8:0a:89:f5:85:ef:6f:96:4c:05:50:7a:8b:b9:dd:
37:c7:30:1a:3d:ea:e9:f2:88:41:95:81:01:84:dd:
5c:8e:2e:dd:66:13:70:51:7a:17:fa:94:15:8d:b9:
53:22:26:19:b0:7e:82:b2:42:27:26:16:73:1d:82:
1c:28:42:d1:51:e3:dd:8d:21:01:7a:5d:3d:72:6f:
65:ee:88:63:8e:51:ef:1f:6b:6f:3f:99:fd:9b:14:
41:8f:4a:a7:16:d9:fa:73:26:f1:ba:1d:9f:5a:a7:
28:96:59:b4:e1:ae:c4:6b:e8:45:46:4b:34:3c:74:
aa:f7:35:34:2a:75:59:09:72:8f:ca:44:1b:7b:09:
83:b8:7a:ff:0d:b6:10:91:b9:74:a1:1f:79:57:21:
89:22:28:b9:62:f5:b3:b4:3d:99:58:37:9b:94:0d:
b6:52:d9:73:b5:d4:bb:b8:f1:ab:0a:85:3c:0e:e1:
0b:53:d7:8f:99:30:b2:d1:e7:0e:3e:a7:a0:f5:cb:
22:30:80:e5:d0:5b:01:39:81:ea:79:3c:44:63:92:
42:82:f9:64:67:4a:c0:a9:70:25:11:48:ed:96:3a:
b5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:48:BC:B1:0E:A2:DB:88:8B:C4:43:26:ED:2C:7B:D5:05:6D:F7:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da62c422-da26-3214-ac5c-94122420dfd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:ed:51:4b:04:75:4c:79:57:98:15:5b:03:77:fa:93:af:45:
e5:7c:d7:f3:2e:0c:89:b0:31:c1:67:b4:1b:0b:ff:22:ca:f8:
49:e6:60:f2:f8:83:98:8e:fb:49:05:49:00:06:af:7b:de:67:
7b:5c:5b:d6:8a:fd:84:eb:72:df:f6:13:a9:12:78:53:52:00:
8b:fc:d6:92:81:2e:0c:ba:45:97:14:fe:8b:0c:af:50:6c:95:
77:58:d7:be:3f:d5:8d:92:46:f1:65:4a:77:90:eb:7b:79:9d:
48:a4:bd:e4:62:06:04:4d:84:1e:85:aa:30:36:6d:48:2c:4d:
75:2f:bb:9e:cf:fd:fc:c6:69:05:4b:f6:b4:25:6d:49:3c:e6:
6d:de:72:4e:e6:9f:00:13:b6:b7:f6:1b:27:e7:83:e1:2e:58:
a4:d5:90:b6:0b:28:f8:cb:dd:bf:9e:9c:ec:b3:1b:cb:27:91:
e7:8c:80:82:37:dd:2f:de:c1:6c:bb:eb:cd:42:25:14:1f:04:
bf:fa:49:22:9d:12:84:51:7f:8f:1e:e4:ee:fe:44:4a:cf:d9:
84:59:51:3c:92:52:2b:ec:20:f5:5a:33:9b:65:4f:e7:b5:73:
d0:60:ca:f9:68:44:04:d9:37:f6:c0:17:14:f5:37:cc:7a:19:
b3:2b:d9:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTAyzLA5bb6aY4AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk
ZTAxMTQ1YjUtZGVlOS00MzU2LWI3OTktZDMyNGM1NjAzMjUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OAAASQHLZzHqYPrLBiSYWz7pFiFiWI+SnIN
p9+oCon1he9vlkwFUHqLud03xzAaPerp8ohBlYEBhN1cji7dZhNwUXoX+pQVjblT
IiYZsH6CskInJhZzHYIcKELRUePdjSEBel09cm9l7ohjjlHvH2tvP5n9mxRBj0qn
Ftn6cybxuh2fWqcollm04a7Ea+hFRks0PHSq9zU0KnVZCXKPykQbewmDuHr/DbYQ
kbl0oR95VyGJIii5YvWztD2ZWDeblA22UtlztdS7uPGrCoU8DuELU9ePmTCy0ecO
Pqeg9csiMIDl0FsBOYHqeTxEY5JCgvlkZ0rAqXAlEUjtljq1ZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFORIvLEOotuIi8RDJu0se9UFbfftMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGE2MmM0MjItZGEyNi0z
MjE0LWFjNWMtOTQxMjI0MjBkZmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACvtUUsEdUx5V5gVWwN3+pOvReV81/MuDImwMcFntBsL/yLK+EnmYPL4
g5iO+0kFSQAGr3veZ3tcW9aK/YTrct/2E6kSeFNSAIv81pKBLgy6RZcU/osMr1Bs
lXdY174/1Y2SRvFlSneQ63t5nUikveRiBgRNhB6FqjA2bUgsTXUvu57P/fzGaQVL
9rQlbUk85m3eck7mnwATtrf2Gyfng+EuWKTVkLYLKPjL3b+enOyzG8snkeeMgII3
3S/ewWy7681CJRQfBL/6SSKdEoRRf48e5O7+RErP2YRZUTySUivsIPVaM5tlT+e1
c9BgyvloRATZN/bAFxT1N8x6GbMr2fI=
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:08:04 2025 by rpki-client