Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f52c6422-00d1-3c24-bedf-b54ad1588881.roa
File: f52c6422-00d1-3c24-bedf-b54ad1588881.roa (raw, json)
Hash identifier: dhwllHrG7/J8imnXa3+kbtF+DzgUnSYSR8wJP/B5xmk=
Subject key identifier: FB:C1:CC:41:03:20:39:7A:E1:D0:45:CC:6D:CA:5E:9C:B3:EC:09:71
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490B4C0C170F28D99756DF6600
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f52c6422-00d1-3c24-bedf-b54ad1588881.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.69.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:0c:17:0f:28:d9:97:56:df:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=97bf9c01-012c-4aed-99c1-917fe81467fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ab:41:a6:ce:ef:72:cd:c7:b4:aa:a0:cb:7d:
96:f8:1b:2b:33:fb:45:65:e6:8e:88:b5:40:ce:05:
0d:02:41:c5:ff:0c:a5:a1:5e:72:6d:b7:18:de:b9:
2f:69:4b:03:3f:3c:2b:a7:f5:51:47:75:dc:a4:78:
5c:78:5d:52:7c:18:96:b1:55:36:4d:1f:4d:e0:ee:
cf:34:63:12:5b:e8:2a:bc:19:85:a6:11:fd:61:14:
1b:59:4f:8f:9a:05:c9:ff:8a:21:9f:e4:9d:0b:bb:
f3:f8:41:5c:90:f6:f9:3d:0b:78:60:2a:7f:3c:ac:
63:16:ec:fa:7b:5a:84:7b:ae:c5:e8:3d:53:46:14:
9d:7c:a7:12:bf:60:fc:0c:8f:86:bb:ca:2b:94:a7:
d4:15:e4:9a:68:cd:89:b9:a6:63:e4:83:48:d1:5c:
ef:c5:74:0e:b3:f4:9a:87:27:3b:af:35:ef:b9:74:
e2:e2:e2:31:b6:89:65:76:84:c1:6e:c8:13:fd:b8:
e1:51:75:25:08:b6:61:58:33:8b:1c:40:90:7b:6c:
14:b7:62:c5:74:1c:4f:8b:fc:13:60:eb:fb:fd:2a:
4f:11:52:ce:50:a5:a2:07:b7:ce:a7:ab:df:5c:56:
fc:4e:6c:a7:0a:03:46:f5:d5:f6:23:74:a0:51:a7:
56:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C1:CC:41:03:20:39:7A:E1:D0:45:CC:6D:CA:5E:9C:B3:EC:09:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f52c6422-00d1-3c24-bedf-b54ad1588881.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:1f:1f:4a:c9:28:16:ed:d5:5e:4f:d5:08:f3:b6:ce:59:e0:
30:ee:55:b4:81:54:b3:5f:7d:58:78:83:e0:2b:b9:59:a8:f5:
8f:45:d9:36:91:03:c9:5b:7e:e8:8a:33:52:8c:ce:8f:71:3e:
25:b9:62:70:2f:01:ed:f5:a1:fc:51:9e:5b:88:f7:2e:4c:6c:
e1:89:36:60:f3:a1:1f:9e:c1:ea:b9:3f:0e:76:86:dc:9e:7b:
93:02:0a:4d:5c:b1:b2:36:df:93:1f:24:ac:8d:93:bb:c4:f2:
e9:fa:15:f2:01:35:ed:8f:a2:d9:9d:0a:16:bd:33:2e:af:21:
b9:92:7a:b7:5f:57:80:85:f2:a6:37:ed:18:29:07:2f:9b:2e:
93:4c:59:2b:65:57:2f:5a:3d:c3:a0:8a:83:be:ff:e6:2c:d2:
8c:92:1b:f9:27:9f:76:3b:7a:ca:f7:d2:fa:23:43:1a:d8:df:
e1:ee:1f:f0:f0:e5:1e:b4:fc:7c:e8:61:e1:01:b8:e8:0d:e0:
1a:16:18:bb:31:5a:de:9f:8a:60:d5:1c:2f:11:52:57:65:cc:
e2:31:83:aa:ee:3a:d0:93:8c:30:4f:8d:ab:34:83:9b:1c:64:
65:86:c8:33:1f:79:26:c3:ba:18:e4:40:f6:51:af:6e:47:c7:
3a:e0:2d:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTAwXDyjZl1bfZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk
OTdiZjljMDEtMDEyYy00YWVkLTk5YzEtOTE3ZmU4MTQ2N2ZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6tBps7vcs3HtKqgy32W+BsrM/tFZeaOiLVA
zgUNAkHF/wyloV5ybbcY3rkvaUsDPzwrp/VRR3XcpHhceF1SfBiWsVU2TR9N4O7P
NGMSW+gqvBmFphH9YRQbWU+PmgXJ/4ohn+SdC7vz+EFckPb5PQt4YCp/PKxjFuz6
e1qEe67F6D1TRhSdfKcSv2D8DI+Gu8orlKfUFeSaaM2JuaZj5INI0VzvxXQOs/Sa
hyc7rzXvuXTi4uIxtolldoTBbsgT/bjhUXUlCLZhWDOLHECQe2wUt2LFdBxPi/wT
YOv7/SpPEVLOUKWiB7fOp6vfXFb8TmynCgNG9dX2I3SgUadWGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPvBzEEDIDl64dBFzG3KXpyz7AlxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjUyYzY0MjItMDBkMS0z
YzI0LWJlZGYtYjU0YWQxNTg4ODgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD8fH0rJKBbt1V5P1Qjzts5Z4DDuVbSBVLNffVh4g+AruVmo9Y9F2TaR
A8lbfuiKM1KMzo9xPiW5YnAvAe31ofxRnluI9y5MbOGJNmDzoR+eweq5Pw52htye
e5MCCk1csbI235MfJKyNk7vE8un6FfIBNe2PotmdCha9My6vIbmSerdfV4CF8qY3
7RgpBy+bLpNMWStlVy9aPcOgioO+/+Ys0oySG/knn3Y7esr30vojQxrY3+HuH/Dw
5R60/HzoYeEBuOgN4BoWGLsxWt6fimDVHC8RUldlzOIxg6ruOtCTjDBPjas0g5sc
ZGWGyDMfeSbDuhjkQPZRr25HxzrgLcg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:59:48 2025 by rpki-client