Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea62466d-3606-3c5d-b894-9c9e37b2440e.roa
File: ea62466d-3606-3c5d-b894-9c9e37b2440e.roa (raw, json)
Hash identifier: uqR+h4iYZPkiKalXa3TfZANvO/XzuC3cV4qhDjma1HE=
Subject key identifier: 68:A6:C0:4B:63:B8:5E:5F:B2:7F:D1:AA:6C:CD:FD:50:7E:DD:8F:5A
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071BF94BCCF985A0654B33F0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea62466d-3606-3c5d-b894-9c9e37b2440e.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 172.71.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:f9:4b:cc:f9:85:a0:65:4b:33:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=703901e0-ea10-485f-b170-a1bfde649bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:72:2f:99:34:c3:16:08:c2:f3:d4:d5:43:df:
bd:6a:8a:c7:b1:6d:51:39:1e:f5:78:f1:58:c1:49:
46:42:cb:67:bb:7d:c7:7d:18:ce:03:27:46:dd:eb:
b7:bc:a9:0c:9b:14:da:3f:1e:b5:b9:f8:27:f2:02:
19:12:4b:32:a8:7b:f1:c8:60:61:35:62:95:58:e0:
a6:16:9b:cc:63:d5:d7:53:e8:b0:53:c1:14:8f:b0:
e4:d2:af:9a:21:77:f3:e1:1f:f1:e8:b8:0a:2a:7e:
83:72:4e:ca:73:76:a6:7c:62:61:11:4f:4c:4f:ea:
b2:d8:50:ab:7d:f9:7b:bb:68:a0:a8:d7:54:0b:ba:
35:30:dc:cd:b9:50:bf:d5:13:56:5f:6e:5e:f4:9c:
e7:68:6d:ae:d2:e6:53:f5:a8:e5:e7:6c:68:b9:3d:
55:76:4d:2f:14:0c:5b:7c:8b:a5:51:e9:34:6a:85:
8b:e5:6a:a5:5f:ee:a3:59:8e:ff:d7:4a:53:ed:4a:
41:55:27:f7:26:ff:a0:07:b1:d8:f4:23:99:d4:8c:
9f:ac:b0:2b:ae:25:73:29:20:fe:c7:66:5d:82:5a:
69:44:43:81:c1:cf:ed:c9:ba:1c:7e:7c:a7:8d:52:
bc:c6:eb:53:dc:b7:d8:5d:9c:f5:de:d2:89:f9:df:
84:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A6:C0:4B:63:B8:5E:5F:B2:7F:D1:AA:6C:CD:FD:50:7E:DD:8F:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea62466d-3606-3c5d-b894-9c9e37b2440e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:29:b1:74:93:6d:3b:ee:ca:b4:6e:e5:fd:bd:a4:90:bc:58:
4f:0f:c5:01:c5:5d:c9:25:ae:e5:31:ea:b4:53:5f:fe:53:44:
2b:fc:ee:c6:0f:e7:6a:6e:4a:fe:4e:42:fc:1b:41:af:d5:16:
d8:06:e0:bb:8a:e8:c4:36:5d:fb:9d:6a:7c:7b:34:d3:fe:76:
44:ba:fd:5e:32:20:3a:5d:23:9c:f2:f3:53:59:cc:f1:fe:78:
f5:1c:23:6c:e6:d4:16:60:f1:66:bb:c3:df:be:c6:39:26:46:
c2:6c:a5:15:d3:66:0e:23:94:ae:30:12:93:56:f6:50:cf:48:
0e:58:d5:f1:d3:4e:63:9a:3e:69:cf:1b:8e:06:6c:6b:29:ce:
3b:aa:34:2b:3b:db:2e:83:df:bb:58:62:f3:81:3a:75:f7:b1:
8c:99:54:76:18:31:b0:a4:e4:4a:f2:c4:c8:79:bc:92:a4:d0:
60:bc:f2:fd:09:d6:f1:88:38:50:41:ad:0a:28:fc:d6:eb:89:
16:e8:f4:8a:56:c0:29:60:3d:46:0e:66:27:db:56:1f:05:a9:
c5:6c:87:fd:68:c8:6d:a8:cb:ca:a3:b9:7c:dc:b1:87:b2:43:
d9:a2:e8:c3:94:f7:46:7a:0b:fc:39:f6:a1:23:17:31:e9:9f:
5c:43:c8:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG/lLzPmFoGVLM/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk
NzAzOTAxZTAtZWExMC00ODVmLWIxNzAtYTFiZmRlNjQ5YmNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnIvmTTDFgjC89TVQ9+9aorHsW1ROR71ePFY
wUlGQstnu33HfRjOAydG3eu3vKkMmxTaPx61ufgn8gIZEksyqHvxyGBhNWKVWOCm
FpvMY9XXU+iwU8EUj7Dk0q+aIXfz4R/x6LgKKn6Dck7Kc3amfGJhEU9MT+qy2FCr
ffl7u2igqNdUC7o1MNzNuVC/1RNWX25e9JznaG2u0uZT9ajl52xouT1Vdk0vFAxb
fIulUek0aoWL5WqlX+6jWY7/10pT7UpBVSf3Jv+gB7HY9COZ1IyfrLArriVzKSD+
x2ZdglppREOBwc/tybocfnynjVK8xutT3LfYXZz13tKJ+d+EEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGimwEtjuF5fsn/RqmzN/VB+3Y9aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWE2MjQ2NmQtMzYwNi0z
YzVkLWI4OTQtOWM5ZTM3YjI0NDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADMpsXSTbTvuyrRu5f29pJC8WE8PxQHFXcklruUx6rRTX/5TRCv87sYP
52puSv5OQvwbQa/VFtgG4LuK6MQ2Xfudanx7NNP+dkS6/V4yIDpdI5zy81NZzPH+
ePUcI2zm1BZg8Wa7w9++xjkmRsJspRXTZg4jlK4wEpNW9lDPSA5Y1fHTTmOaPmnP
G44GbGspzjuqNCs72y6D37tYYvOBOnX3sYyZVHYYMbCk5EryxMh5vJKk0GC88v0J
1vGIOFBBrQoo/NbriRbo9IpWwClgPUYOZifbVh8FqcVsh/1oyG2oy8qjuXzcsYey
Q9mi6MOU90Z6C/w59qEjFzHpn1xDyCw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:59:42 2025 by rpki-client