Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e711f3e3-8481-3896-a556-1f872947c1ef.roa
File: e711f3e3-8481-3896-a556-1f872947c1ef.roa (raw, json)
Hash identifier: l8YHsITEsqrdxdLbY/Q1xmHqIpTm7rtvJw44ybPLoz8=
Subject key identifier: D2:A5:64:79:8D:4E:D5:54:90:A1:18:0B:C5:2E:D9:8E:06:2A:09:CA
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858473AEB38F2FB750F81B41035A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e711f3e3-8481-3896-a556-1f872947c1ef.roa
Signing time: Sun 15 Sep 2024 12:00:00 +0000
ROA not before: Sun 15 Sep 2024 12:00:00 +0000
ROA not after: Fri 19 Dec 2025 05:00:00 +0000
asID: 13335
IP address blocks: 172.68.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:3a:eb:38:f2:fb:75:0f:81:b4:10:35:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Sep 15 12:00:00 2024 GMT
Not After : Dec 19 05:00:00 2025 GMT
Subject: CN=ce296a53-f271-48f4-9d34-11ac8f59be83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7e:3b:6b:00:7a:51:c2:ee:fd:9a:09:1b:05:
ed:6b:13:f6:89:ad:a1:0a:89:95:a7:1f:b2:36:dd:
4e:96:a3:61:a1:ea:79:46:b0:0e:d6:42:e1:b0:c3:
6a:c7:1a:3e:a2:04:2f:5f:3e:d0:aa:42:6b:a3:8e:
30:fa:d0:dc:fe:25:64:6f:c6:e4:cf:b3:0e:50:45:
a6:f0:3c:b0:e8:1f:18:64:4e:75:51:55:51:af:72:
63:be:f5:66:07:2a:36:39:b5:bc:7e:f8:d0:16:dd:
b3:d9:0f:b5:5a:5a:4e:be:20:4f:56:3a:c2:95:0e:
30:01:4c:c3:82:7f:b6:9f:f6:bb:8e:4e:84:76:8e:
1a:de:ff:1f:d1:e7:bc:79:10:d2:46:06:ad:04:f8:
fd:30:f5:ab:99:ab:1c:2f:90:ed:f3:07:e4:69:6c:
3c:4c:34:bb:b1:90:a9:bb:92:28:63:f1:c6:05:44:
6f:54:61:d9:82:f9:db:4f:10:4c:a8:76:b1:56:e1:
2b:ff:72:e4:28:29:ab:5b:12:0c:ea:28:54:fa:9f:
f0:58:4a:d7:90:d8:62:98:e2:c8:1f:4a:4b:75:5a:
46:5c:b4:70:4e:ec:21:c1:fe:88:e6:e2:11:5b:55:
9e:1e:88:bd:11:44:15:60:3e:8b:5e:45:fa:d5:82:
7b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A5:64:79:8D:4E:D5:54:90:A1:18:0B:C5:2E:D9:8E:06:2A:09:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e711f3e3-8481-3896-a556-1f872947c1ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:e1:82:b4:a6:e3:9f:9c:ec:c9:72:44:60:31:e0:2c:4d:6f:
89:f0:8f:6d:b5:57:fd:2f:ed:de:89:75:45:bd:e9:cb:56:e3:
84:15:b6:0f:0c:23:4c:9a:ea:0d:a3:1b:1a:d1:e7:07:ff:e9:
0f:8e:e9:44:7e:c5:e8:a0:d7:24:68:d7:47:f1:4b:65:85:9f:
3f:45:d5:de:e1:d2:8d:e2:20:54:79:cb:a4:76:e4:46:5e:43:
6f:6c:cd:95:af:0f:f2:92:8f:1a:a4:c0:cb:0f:b9:3c:90:89:
7a:4f:a7:2f:40:c5:de:ac:13:0c:89:90:0f:b5:37:9d:d3:ce:
7e:b4:05:fb:d5:6e:db:bd:e8:32:38:8f:e0:c8:9d:1a:64:b0:
95:8a:af:a8:b2:7c:dd:f0:90:82:b4:be:89:99:aa:f5:dd:47:
86:5d:b1:0a:30:3c:cb:82:9a:90:45:cd:98:ea:c9:b8:4d:63:
de:4e:e1:d6:91:de:e5:78:88:89:cf:8c:7f:e7:32:81:94:ba:
e8:95:4d:36:b5:ce:d7:ae:5a:8d:f0:48:b1:1a:94:0d:03:8a:
c1:2b:fa:7c:64:b2:f7:27:b9:d7:47:34:ab:67:aa:f9:9c:45:
06:0a:11:ff:0f:2d:ae:0f:0e:2c:4a:9c:1f:06:df:30:c0:57:
83:76:fd:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc66zjy+3UPgbQQNaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MDkxNTEyMDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk
Y2UyOTZhNTMtZjI3MS00OGY0LTlkMzQtMTFhYzhmNTliZTgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjH47awB6UcLu/ZoJGwXtaxP2ia2hComVpx+y
Nt1OlqNhoep5RrAO1kLhsMNqxxo+ogQvXz7QqkJro44w+tDc/iVkb8bkz7MOUEWm
8Dyw6B8YZE51UVVRr3JjvvVmByo2ObW8fvjQFt2z2Q+1WlpOviBPVjrClQ4wAUzD
gn+2n/a7jk6Edo4a3v8f0ee8eRDSRgatBPj9MPWrmascL5Dt8wfkaWw8TDS7sZCp
u5IoY/HGBURvVGHZgvnbTxBMqHaxVuEr/3LkKCmrWxIM6ihU+p/wWErXkNhimOLI
H0pLdVpGXLRwTuwhwf6I5uIRW1WeHoi9EUQVYD6LXkX61YJ7tQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNKlZHmNTtVUkKEYC8Uu2Y4GKgnKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTcxMWYzZTMtODQ4MS0z
ODk2LWE1NTYtMWY4NzI5NDdjMWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFbhgrSm45+c7MlyRGAx4CxNb4nwj221V/0v7d6JdUW96ctW44QVtg8M
I0ya6g2jGxrR5wf/6Q+O6UR+xeig1yRo10fxS2WFnz9F1d7h0o3iIFR5y6R25EZe
Q29szZWvD/KSjxqkwMsPuTyQiXpPpy9Axd6sEwyJkA+1N53Tzn60BfvVbtu96DI4
j+DInRpksJWKr6iyfN3wkIK0vomZqvXdR4ZdsQowPMuCmpBFzZjqybhNY95O4daR
3uV4iInPjH/nMoGUuuiVTTa1zteuWo3wSLEalA0DisEr+nxksvcnuddHNKtnqvmc
RQYKEf8PLa4PDixKnB8G3zDAV4N2/RU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:59:48 2025 by rpki-client