Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef5c2487-e664-314b-8cb9-7cb8f1f0f59a.roa
File: ef5c2487-e664-314b-8cb9-7cb8f1f0f59a.roa (raw, json)
Hash identifier: QbyOfv+gJ8tbE852r7j9FG6lld1WR5Gh811+oTM9qzE=
Subject key identifier: 47:8F:5D:A0:B5:3B:83:CE:CD:66:4F:07:96:F4:12:62:A6:E8:8C:68
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490B4C146865A1BE5000490480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef5c2487-e664-314b-8cb9-7cb8f1f0f59a.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.69.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:14:68:65:a1:be:50:00:49:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=04e2a50f-c7e5-4a7b-9d42-a5a774dfd896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:67:ee:55:c7:9a:5c:9e:19:f0:cf:3b:d1:87:
aa:df:47:a8:f0:5f:b3:a1:28:b1:a2:7f:21:f4:a2:
26:11:05:ea:ec:d9:25:dc:5c:04:2a:bc:e9:eb:cc:
1f:26:aa:39:f9:ac:cc:c1:57:b4:18:95:bf:f8:f4:
0b:34:c2:3c:90:34:70:6f:7b:b2:d1:19:a5:ac:24:
f5:0e:72:a4:27:49:2e:a8:2a:9c:3c:26:a8:d4:3f:
1a:3a:b2:53:13:a7:1d:70:d4:c0:35:00:18:55:20:
98:db:c4:03:2c:4c:b5:d7:3e:3a:2a:c6:37:03:b1:
e6:52:57:c9:41:dc:0f:67:e1:5d:6c:d0:a0:6a:65:
d5:ff:02:a7:dd:e0:aa:25:98:10:37:d4:ac:7a:6a:
08:5f:52:08:7a:78:2b:35:f3:c4:82:17:93:82:9f:
55:73:01:81:a8:7f:21:e6:4e:e5:a6:56:72:1c:d6:
35:dd:8a:6e:2f:27:6b:ea:48:5d:e0:22:3a:a2:47:
a9:03:8e:6d:74:3d:93:ba:d4:20:2e:71:64:11:7f:
fe:7b:42:df:0c:ab:54:a5:10:56:30:eb:31:10:be:
38:56:94:ff:3c:fe:76:1c:df:a5:1b:ea:4e:e2:bd:
bf:64:c5:3e:a3:86:25:2d:b4:e9:0e:6c:24:5e:39:
42:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8F:5D:A0:B5:3B:83:CE:CD:66:4F:07:96:F4:12:62:A6:E8:8C:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef5c2487-e664-314b-8cb9-7cb8f1f0f59a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.150.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:ff:c4:90:7b:73:84:88:99:ba:0c:be:f0:55:84:a5:48:b6:
fe:f0:be:b2:29:5c:c5:55:9d:bf:5d:ee:47:50:8f:f3:0a:a0:
44:7c:b9:1a:81:71:de:14:af:d8:a1:bd:33:8d:e6:25:0e:db:
6e:22:e6:1d:f7:cd:bb:d0:30:10:c6:7c:a1:20:ac:b1:31:88:
84:e9:e0:44:17:93:5b:ae:eb:23:f1:19:4b:53:69:c5:5e:10:
ec:e7:d5:9a:0b:68:c4:96:dc:ee:7e:28:44:ca:80:c1:98:68:
05:c7:9e:18:91:a0:b4:83:56:e4:0a:c6:fc:b0:68:60:a7:a0:
64:99:b0:8a:f3:b5:e5:0b:e8:47:df:e4:06:4f:ae:a1:59:3a:
c2:82:11:5b:ec:a0:3b:c0:ad:19:14:be:1c:93:9c:2e:b9:e5:
56:06:9d:a7:f8:41:6e:b2:5c:d8:2d:c0:1b:0b:ef:c4:96:a0:
bf:a3:48:1a:28:f5:c3:0d:31:be:e2:5b:6c:5a:ef:71:8b:5c:
3e:7d:be:5a:2f:3a:ce:d9:87:22:b0:b3:63:d7:32:b1:37:f0:
fc:ba:46:51:1c:90:a1:d6:81:8c:65:60:46:56:0a:09:96:09:
65:f9:c9:ab:f6:68:40:70:33:c9:d2:84:8d:bf:e5:28:29:b4:
d7:4a:8e:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTBRoZaG+UABJBIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk
MDRlMmE1MGYtYzdlNS00YTdiLTlkNDItYTVhNzc0ZGZkODk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2fuVceaXJ4Z8M870Yeq30eo8F+zoSixon8h
9KImEQXq7Nkl3FwEKrzp68wfJqo5+azMwVe0GJW/+PQLNMI8kDRwb3uy0RmlrCT1
DnKkJ0kuqCqcPCao1D8aOrJTE6cdcNTANQAYVSCY28QDLEy11z46KsY3A7HmUlfJ
QdwPZ+FdbNCgamXV/wKn3eCqJZgQN9SsemoIX1IIengrNfPEgheTgp9VcwGBqH8h
5k7lplZyHNY13YpuLydr6khd4CI6okepA45tdD2TutQgLnFkEX/+e0LfDKtUpRBW
MOsxEL44VpT/PP52HN+lG+pO4r2/ZMU+o4YlLbTpDmwkXjlCSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEePXaC1O4POzWZPB5b0EmKm6IxoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWY1YzI0ODctZTY2NC0z
MTRiLThjYjktN2NiOGYxZjBmNTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIf/xJB7c4SImboMvvBVhKVItv7wvrIpXMVVnb9d7kdQj/MKoER8uRqB
cd4Ur9ihvTON5iUO224i5h33zbvQMBDGfKEgrLExiITp4EQXk1uu6yPxGUtTacVe
EOzn1ZoLaMSW3O5+KETKgMGYaAXHnhiRoLSDVuQKxvywaGCnoGSZsIrzteUL6Eff
5AZPrqFZOsKCEVvsoDvArRkUvhyTnC655VYGnaf4QW6yXNgtwBsL78SWoL+jSBoo
9cMNMb7iW2xa73GLXD59vlovOs7ZhyKws2PXMrE38Py6RlEckKHWgYxlYEZWCgmW
CWX5yav2aEBwM8nShI2/5SgptNdKjqc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:57:15 2025 by rpki-client