Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fabfa6cd-3f39-3394-acc4-42ab7bfe6394.roa
File: fabfa6cd-3f39-3394-acc4-42ab7bfe6394.roa (raw, json)
Hash identifier: QnwhXmPmiUu4g9FD/nNU0j8r2PfI/hm80BXCptIAzGA=
Subject key identifier: 8B:47:2C:7E:6A:C8:FC:69:69:9E:B7:83:1F:C9:69:60:D0:B4:A3:39
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490881935EAF8C3182B6F52380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fabfa6cd-3f39-3394-acc4-42ab7bfe6394.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.68.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:93:5e:af:8c:31:82:b6:f5:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=87a6259c-d27d-4cc0-906a-59650efdcb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:32:cf:d5:28:fb:99:d0:5c:50:17:23:28:5a:
57:59:98:0e:ab:f3:28:db:8d:97:61:8a:5e:7b:ac:
ea:dc:24:4c:4b:e9:68:9c:fa:03:15:2c:78:b3:62:
de:8f:0c:47:74:e5:82:85:b8:c2:44:cc:c1:97:02:
9e:ca:7b:b2:86:f0:8d:b6:d3:7a:fa:ad:59:d6:ad:
82:2c:44:03:48:fe:43:7f:44:5d:6f:65:69:2f:d2:
1f:a5:02:b8:1d:96:21:74:69:bd:fb:75:fb:72:de:
83:c4:44:d1:16:0c:7d:aa:1a:a3:ff:72:f3:34:6a:
61:ff:19:9c:04:61:96:66:b7:49:e0:4f:d4:8f:b6:
40:91:01:3f:b5:6e:e8:e6:c6:c0:37:0b:e4:dd:3a:
e8:02:e9:c6:b8:3c:44:d5:56:e7:fa:2d:f1:c8:f8:
21:d0:2c:19:05:8e:c0:6d:5c:f1:5e:e1:fa:13:c5:
7b:5f:85:1b:94:f6:f7:3a:e8:31:e0:11:99:f2:49:
59:a6:96:a5:45:16:35:fc:1c:20:75:1f:c6:97:a3:
2c:1d:98:bc:83:3d:55:27:c5:7b:f0:3c:1d:80:1e:
80:7e:1b:2b:72:0a:e9:f4:7e:6b:7a:32:5f:6c:6e:
02:17:8c:b3:bb:f6:70:75:4a:0d:17:8e:49:0a:f9:
37:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:47:2C:7E:6A:C8:FC:69:69:9E:B7:83:1F:C9:69:60:D0:B4:A3:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fabfa6cd-3f39-3394-acc4-42ab7bfe6394.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:14:1c:8f:e3:e4:6c:fc:85:4d:57:05:9b:fe:e1:d8:61:ea:
f4:ae:b2:26:e2:01:89:65:ce:c6:e2:86:48:88:b1:91:60:8a:
65:e5:a2:88:8a:3b:a2:91:b6:cc:5c:13:64:7d:e5:24:bf:29:
f4:ea:ce:b9:60:5c:de:98:22:42:22:d0:d7:19:ee:9c:28:df:
be:da:3d:f2:33:ae:03:d1:84:b7:4a:39:69:3f:e9:67:d8:27:
48:e3:de:4b:9a:37:5f:85:ae:23:84:68:68:44:f9:ab:36:11:
d9:b4:31:db:07:72:f2:a1:e7:67:55:dd:7e:6c:7d:8d:83:6d:
f3:5f:f1:13:f5:70:bc:4c:e9:c8:d5:c4:9f:88:78:b8:03:38:
c5:ad:c5:1a:15:fd:9d:70:c7:99:cd:8c:93:f0:d2:18:ab:ed:
bb:96:6e:13:e3:4a:d0:64:5a:64:c4:3a:d6:a1:5b:31:7b:d5:
71:28:e9:78:54:46:f6:1f:81:bd:b9:1b:98:25:35:ff:4b:7e:
8b:b7:10:2b:17:02:56:03:49:91:6f:8b:fe:1f:88:83:b1:0f:
ea:3c:74:db:0e:8f:84:9f:87:8a:2d:e0:80:8e:31:46:b0:36:
d2:fd:1d:ad:69:46:86:f3:3a:95:9a:da:f8:52:3d:f4:b3:62:
6a:4b:7d:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgZNer4wxgrb1I4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk
ODdhNjI1OWMtZDI3ZC00Y2MwLTkwNmEtNTk2NTBlZmRjYjZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojLP1Sj7mdBcUBcjKFpXWZgOq/Mo242XYYpe
e6zq3CRMS+lonPoDFSx4s2LejwxHdOWChbjCRMzBlwKeynuyhvCNttN6+q1Z1q2C
LEQDSP5Df0Rdb2VpL9IfpQK4HZYhdGm9+3X7ct6DxETRFgx9qhqj/3LzNGph/xmc
BGGWZrdJ4E/Uj7ZAkQE/tW7o5sbANwvk3TroAunGuDxE1Vbn+i3xyPgh0CwZBY7A
bVzxXuH6E8V7X4UblPb3Ougx4BGZ8klZppalRRY1/BwgdR/Gl6MsHZi8gz1VJ8V7
8DwdgB6Afhsrcgrp9H5rejJfbG4CF4yzu/ZwdUoNF45JCvk3zwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFItHLH5qyPxpaZ63gx/JaWDQtKM5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmFiZmE2Y2QtM2YzOS0z
Mzk0LWFjYzQtNDJhYjdiZmU2Mzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABUUHI/j5Gz8hU1XBZv+4dhh6vSusibiAYllzsbihkiIsZFgimXlooiK
O6KRtsxcE2R95SS/KfTqzrlgXN6YIkIi0NcZ7pwo377aPfIzrgPRhLdKOWk/6WfY
J0jj3kuaN1+FriOEaGhE+as2Edm0MdsHcvKh52dV3X5sfY2DbfNf8RP1cLxM6cjV
xJ+IeLgDOMWtxRoV/Z1wx5nNjJPw0hir7buWbhPjStBkWmTEOtahWzF71XEo6XhU
RvYfgb25G5glNf9Lfou3ECsXAlYDSZFvi/4fiIOxD+o8dNsOj4Sfh4ot4ICOMUaw
NtL9Ha1pRobzOpWa2vhSPfSzYmpLfQo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:02:34 2025 by rpki-client