Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f9e68cbd-1e77-3abe-a86a-ada579c2a056.roa
File: f9e68cbd-1e77-3abe-a86a-ada579c2a056.roa (raw, json)
Hash identifier: 8YGJKS/hQe69xxLfW4vGTI2xc+hgfIKMeuyeQtUDs6g=
Subject key identifier: 7B:6A:65:E1:03:A4:F4:1D:91:8A:0B:89:B1:97:25:62:3A:43:3D:18
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584908817ECEE7ACA93F66EA0800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f9e68cbd-1e77-3abe-a86a-ada579c2a056.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.70.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:7e:ce:e7:ac:a9:3f:66:ea:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=342756b6-9bda-4a2d-b1f7-0dcb6650776c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f9:30:49:ba:30:a4:30:31:fa:1d:a2:0b:8a:
64:c6:eb:1d:9a:ba:0f:f8:65:52:66:b5:c2:1e:01:
35:7f:f1:1b:cb:d5:8a:ea:f6:e6:58:36:74:a0:95:
37:3f:43:22:49:99:45:de:90:37:0b:a5:43:a7:90:
f2:33:fd:c9:1e:ed:46:81:20:5a:e1:2a:2a:98:2f:
a2:a5:3d:19:5c:cd:c7:d7:77:19:d9:46:dc:05:80:
14:d7:9a:41:cf:01:54:f7:fc:59:ba:6d:c3:32:73:
34:e1:2f:8e:c2:18:3c:63:de:cf:34:4f:79:68:5d:
9c:b8:e4:50:18:66:a4:1f:eb:f0:bd:26:bb:d0:9b:
ed:1f:f6:5e:fe:3e:48:a3:c0:f5:60:ad:93:44:43:
e3:ff:b8:81:33:3b:2a:7e:83:5b:18:e6:cd:cc:bf:
d1:62:24:ca:00:de:ec:94:e5:37:09:dc:ab:c1:a8:
f2:aa:79:91:bd:8e:63:3a:a2:01:cb:51:a8:20:35:
7c:68:b3:43:d6:af:b6:65:a0:a1:80:27:6e:ac:44:
e5:25:ae:c0:10:d5:9c:f0:8f:73:d9:87:df:13:4f:
99:92:ee:d9:8f:28:cb:0f:01:48:d2:59:e5:b4:db:
a0:c7:49:61:75:5e:95:50:86:ba:9a:0e:5b:18:ec:
58:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6A:65:E1:03:A4:F4:1D:91:8A:0B:89:B1:97:25:62:3A:43:3D:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f9e68cbd-1e77-3abe-a86a-ada579c2a056.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:1f:ed:eb:8a:9e:f6:5f:17:ad:8d:51:20:d3:fa:73:21:c1:
ac:54:d2:94:15:8e:44:0e:72:f5:24:15:b3:ef:8e:e4:95:b8:
9e:94:ea:b8:ab:e0:c8:48:18:2c:f3:82:1d:66:28:79:35:fe:
ca:00:f4:ff:f3:6e:10:26:ed:0c:95:d4:7c:2c:be:e2:eb:f3:
a5:2b:3a:0b:3c:e1:d2:c4:24:d5:41:b2:35:3e:89:8c:9a:ee:
83:a3:9e:d7:cf:c5:d1:ca:8b:86:37:06:7a:25:31:c1:ca:a0:
d8:cd:1f:e6:ea:2a:50:4f:ac:ed:56:60:5c:70:e7:22:cd:21:
79:dd:2b:f7:4e:e8:a5:1d:7f:ce:70:e5:16:f1:77:dc:1f:d7:
79:fa:34:ff:ec:01:eb:a8:02:12:b4:0c:d2:3e:91:91:20:85:
ac:b5:a4:04:79:22:fb:4a:88:91:15:4a:14:95:bf:9c:52:88:
01:c3:52:19:f7:af:44:d1:3a:bc:fa:de:27:c3:4e:12:98:55:
69:5a:68:77:9e:7b:8a:68:b7:45:bc:ad:5d:ae:8d:be:8e:85:
3f:90:c6:2a:b1:8d:e5:39:62:96:c2:55:62:d1:a1:9d:97:92:
db:ac:74:b7:34:c7:4d:3c:3d:d3:13:b1:38:b2:6d:4d:31:ae:
3d:31:29:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgX7O56ypP2bqCAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk
MzQyNzU2YjYtOWJkYS00YTJkLWIxZjctMGRjYjY2NTA3NzZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/kwSbowpDAx+h2iC4pkxusdmroP+GVSZrXC
HgE1f/Eby9WK6vbmWDZ0oJU3P0MiSZlF3pA3C6VDp5DyM/3JHu1GgSBa4SoqmC+i
pT0ZXM3H13cZ2UbcBYAU15pBzwFU9/xZum3DMnM04S+Owhg8Y97PNE95aF2cuORQ
GGakH+vwvSa70JvtH/Ze/j5Io8D1YK2TREPj/7iBMzsqfoNbGObNzL/RYiTKAN7s
lOU3CdyrwajyqnmRvY5jOqIBy1GoIDV8aLND1q+2ZaChgCdurETlJa7AENWc8I9z
2YffE0+Zku7ZjyjLDwFI0lnltNugx0lhdV6VUIa6mg5bGOxYzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHtqZeEDpPQdkYoLibGXJWI6Qz0YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjllNjhjYmQtMWU3Ny0z
YWJlLWE4NmEtYWRhNTc5YzJhMDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZ2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE0f7euKnvZfF62NUSDT+nMhwaxU0pQVjkQOcvUkFbPvjuSVuJ6U6rir
4MhIGCzzgh1mKHk1/soA9P/zbhAm7QyV1HwsvuLr86UrOgs84dLEJNVBsjU+iYya
7oOjntfPxdHKi4Y3BnolMcHKoNjNH+bqKlBPrO1WYFxw5yLNIXndK/dO6KUdf85w
5Rbxd9wf13n6NP/sAeuoAhK0DNI+kZEghay1pAR5IvtKiJEVShSVv5xSiAHDUhn3
r0TROrz63ifDThKYVWlaaHeee4pot0W8rV2ujb6OhT+QxiqxjeU5YpbCVWLRoZ2X
ktusdLc0x008PdMTsTiybU0xrj0xKcQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:50 2025 by rpki-client