Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/78a31b0d-31cf-3e0d-a904-45f0a490530a.roa
File: 78a31b0d-31cf-3e0d-a904-45f0a490530a.roa (raw, json)
Hash identifier: PE7CJiMCjCkz26j+PERw4yI8pk/i4kEv28GZNZFcFEM=
Subject key identifier: 64:CB:F7:2C:05:C9:CD:94:32:BD:55:FA:60:A6:24:EF:93:20:8B:B7
Certificate issuer: /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial: 010D0C9F43285849350E8C621FDDE4B6ECC2CDC0
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/78a31b0d-31cf-3e0d-a904-45f0a490530a.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 14618
IP address blocks: 172.82.212.0/24 maxlen: 24
172.82.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:8c:62:1f:dd:e4:b6:ec:c2:cd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=e7f8b2d3-f698-4b19-af9d-0cad1fe16ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d5:6a:2f:36:da:d7:ee:47:30:82:68:d5:3f:
00:9a:8d:de:3f:9f:cf:86:3e:85:94:ff:70:e7:fa:
9e:4e:35:73:c5:c4:8b:76:22:49:d1:ce:47:8d:64:
42:16:46:c4:16:6b:19:c2:2b:13:32:d6:5f:48:94:
c2:d3:3d:4a:7a:49:29:06:d8:ca:77:1a:fa:3a:f1:
df:a7:6d:82:9b:de:2c:c9:65:5f:4d:08:c3:2f:32:
e2:fb:8e:38:47:c0:8f:b4:f7:5e:b7:0b:8e:7a:db:
56:27:f6:ea:29:04:8d:19:c7:2e:44:e5:0a:aa:63:
b0:19:01:73:7b:c4:c3:e1:64:43:ef:de:70:d7:5f:
4e:cd:2f:31:45:c3:7e:d0:3c:f0:d1:36:4f:7f:a6:
34:b2:f1:36:fd:c2:9d:b2:66:b5:18:6a:11:e8:49:
4a:32:57:f7:8e:f5:2f:96:9d:c7:7c:b2:da:a9:a5:
c7:c7:b6:b8:05:0e:0c:74:50:20:c6:81:d5:e6:7e:
00:30:ba:fa:a7:9e:19:57:a4:04:87:3d:ba:b5:dc:
b3:46:10:74:a3:b2:55:54:e9:cb:3d:bb:ae:2b:f8:
7e:80:4b:25:39:cd:f1:a2:1b:d3:ba:3d:55:c8:82:
0e:07:76:d2:43:68:0e:61:91:ba:75:c1:b3:f5:19:
48:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CB:F7:2C:05:C9:CD:94:32:BD:55:FA:60:A6:24:EF:93:20:8B:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/78a31b0d-31cf-3e0d-a904-45f0a490530a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
X509v3 Authority Key Identifier:
keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.82.212.0/24
172.82.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:07:f9:a4:f5:b5:0e:84:a9:55:f1:21:53:77:7b:db:e9:7a:
30:f9:3d:ea:0e:39:22:10:a8:20:cc:97:22:4c:4b:f9:5c:47:
2e:83:7e:3b:5b:b9:bc:87:ea:34:fc:2e:f3:a7:f5:80:e1:7c:
be:d9:ff:fd:67:5d:e1:54:52:c5:43:94:fd:f1:4d:e6:4c:95:
71:7e:6b:d8:0b:59:89:91:ea:12:52:57:3b:e8:31:74:5c:5b:
df:c6:b3:c2:c4:46:9e:d6:50:ea:d2:ca:3e:c7:3e:9f:ff:73:
d7:7a:87:97:0a:79:b9:bd:7d:69:e9:96:5d:03:80:32:dc:fb:
84:92:4b:65:70:6e:e0:86:41:3e:dd:1e:11:60:eb:79:ae:32:
ff:c2:51:25:b0:93:99:c1:51:5c:86:59:7d:c4:ea:b2:3f:09:
c0:4c:8f:8c:40:79:43:d7:ad:66:66:41:be:0a:c0:79:8c:11:
ba:ca:5f:0e:44:9b:11:cb:e8:2c:47:11:e7:9f:58:19:9e:b8:
99:95:2a:17:c4:46:16:07:6f:53:30:94:64:27:7f:3a:30:12:
25:45:e3:a2:11:df:1d:c4:96:a8:04:72:29:e8:9e:3d:e7:56:
f3:64:ec:c4:2d:6b:17:19:8b:c1:55:18:70:e8:43:c4:ff:c6:
ca:5f:6b:2e
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEk1DoxiH93ktuzCzcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmViYWQyOWMtYzJlNC00NDdkLWEyOWUtMjBmMzI5MjE5
ZWE5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk
ZTdmOGIyZDMtZjY5OC00YjE5LWFmOWQtMGNhZDFmZTE2ZGRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdVqLzba1+5HMIJo1T8Amo3eP5/Phj6FlP9w
5/qeTjVzxcSLdiJJ0c5HjWRCFkbEFmsZwisTMtZfSJTC0z1KekkpBtjKdxr6OvHf
p22Cm94syWVfTQjDLzLi+444R8CPtPdetwuOettWJ/bqKQSNGccuROUKqmOwGQFz
e8TD4WRD795w119OzS8xRcN+0Dzw0TZPf6Y0svE2/cKdsma1GGoR6ElKMlf3jvUv
lp3HfLLaqaXHx7a4BQ4MdFAgxoHV5n4AMLr6p54ZV6QEhz26tdyzRhB0o7JVVOnL
PbuuK/h+gEslOc3xohvTuj1VyIIOB3bSQ2gOYZG6dcGz9RlISQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFGTL9ywFyc2UMr1V+mCmJO+TIIu3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJh
ZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYzMjkyMTllYTkvNzhhMzFiMGQtMzFjZi0z
ZTBkLWE5MDQtNDVmMGE0OTA1MzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmViYWQyOWMtYzJlNC00NDdkLWEy
OWUtMjBmMzI5MjE5ZWE5L2JlYmFkMjljLWMyZTQtNDQ3ZC1hMjllLTIwZjMyOTIx
OWVhOS5jcmwwHwYDVR0jBBgwFoAUBzxRbeqFGDJmyoVohEc4Dza5UhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJhZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYz
MjkyMTllYTkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArFLUAwQA
rFLXMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAEkH+aT1tQ6EqVXxIVN3e9vpejD5PeoOOSIQqCDMlyJMS/lc
Ry6DfjtbubyH6jT8LvOn9YDhfL7Z//1nXeFUUsVDlP3xTeZMlXF+a9gLWYmR6hJS
VzvoMXRcW9/Gs8LERp7WUOrSyj7HPp//c9d6h5cKebm9fWnpll0DgDLc+4SSS2Vw
buCGQT7dHhFg63muMv/CUSWwk5nBUVyGWX3E6rI/CcBMj4xAeUPXrWZmQb4KwHmM
EbrKXw5EmxHL6CxHEeefWBmeuJmVKhfERhYHb1MwlGQnfzowEiVF46IR3x3ElqgE
cinonj3nVvNk7MQtaxcZi8FVGHDoQ8T/xspfay4=
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:19:09 2025 by rpki-client