Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1549e631-d613-3a6f-a3e4-dce9d8698ddb.roa
File: 1549e631-d613-3a6f-a3e4-dce9d8698ddb.roa (raw, json)
Hash identifier: DYCCmWyjC3lcAZnWo4/L12qH/35ae2+TWVXyvK63g6g=
Subject key identifier: F1:32:ED:AC:1C:0E:9B:8D:51:01:70:D6:49:C6:83:67:6E:95:BB:AD
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848304504CD317751D0F22A417C
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1549e631-d613-3a6f-a3e4-dce9d8698ddb.roa
Signing time: Fri 13 Dec 2024 03:04:45 +0000
ROA not before: Fri 13 Dec 2024 03:04:45 +0000
ROA not after: Thu 13 Mar 2025 02:04:45 +0000
asID: 13335
IP address blocks: 172.71.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:45:04:cd:31:77:51:d0:f2:2a:41:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:04:45 2024 GMT
Not After : Mar 13 02:04:45 2025 GMT
Subject: CN=fc7ff7ee-2b0e-4d1b-a1f9-ed87c32c8f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:99:bc:f7:f8:06:a2:cf:e1:a5:fc:a4:c6:97:
3d:87:3b:55:e7:f5:83:d0:c3:08:ea:47:3c:6d:e1:
ca:c3:04:6e:d4:c0:b7:ff:e7:84:dc:36:ff:2e:e1:
61:1b:8b:95:62:3d:43:e4:0c:4f:04:f9:bc:6a:85:
e7:76:cc:1b:18:8d:e8:1c:ac:c9:16:13:eb:ee:d3:
da:77:f6:30:9c:07:06:a4:99:3e:ff:aa:22:6b:01:
61:39:9e:79:b0:bd:ad:a9:c1:d3:7b:f6:fc:ef:19:
9e:6e:03:87:fd:2e:f3:ad:ac:3f:68:6b:24:f9:f2:
5c:d8:9c:26:93:f8:27:05:35:c1:86:55:09:fa:ee:
ef:db:b6:e1:2e:bc:03:a2:3a:99:2f:17:2e:54:e1:
9c:c0:e2:fe:af:a4:f8:30:6e:54:6e:09:bf:9d:89:
5c:3e:be:c9:da:bb:c2:76:46:19:4f:16:ce:9f:31:
0d:b2:0b:0c:00:87:79:62:a1:65:e6:b7:61:ae:84:
2d:a4:2f:20:e0:c7:93:02:fa:56:56:d0:4b:18:da:
a3:3f:7d:6f:86:67:97:86:c9:d0:f5:80:73:37:7c:
8d:16:b8:2c:af:08:22:7d:1a:7e:46:61:65:4b:04:
a3:8b:59:a1:1d:21:e5:63:b5:92:32:3c:1d:0f:f3:
9d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:32:ED:AC:1C:0E:9B:8D:51:01:70:D6:49:C6:83:67:6E:95:BB:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1549e631-d613-3a6f-a3e4-dce9d8698ddb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:4d:57:f1:55:7f:c8:d9:d9:35:19:f5:91:7d:22:80:a4:fe:
98:92:2d:97:e4:1f:4a:d0:6f:09:5c:4e:3e:69:23:b5:d8:85:
9f:c2:e1:b3:42:ed:98:8d:b3:3a:4a:3d:83:ee:77:db:77:88:
4c:bc:37:c3:c0:e8:84:87:b0:7d:53:f1:25:6b:fe:9a:8e:d1:
23:02:9c:47:68:7f:84:b1:50:d3:dc:59:00:24:e0:81:0e:26:
bf:e2:93:da:f5:2d:c1:a4:13:a2:2f:0b:ff:38:e6:b1:fa:20:
a8:13:88:6b:1b:48:6d:81:90:ea:5a:1c:d8:74:b2:1f:71:40:
8b:f2:bf:99:f0:12:8f:99:a8:64:ed:de:87:63:96:e8:09:4e:
57:e9:31:53:f0:4b:d3:87:9d:dd:b3:ba:d9:40:2e:34:d3:d4:
34:8a:c7:8d:4c:13:e8:cf:48:ce:41:d5:65:a3:14:94:5e:bc:
ad:06:4d:ae:dc:49:51:12:08:e0:9d:b1:fa:88:ae:b8:98:bf:
bf:5d:5e:2f:2c:63:3a:6f:e0:60:85:b2:85:c2:94:f6:7e:9d:
44:ac:c8:46:09:3a:fd:0c:fa:d8:64:04:be:71:f2:24:c9:03:
af:3b:b1:00:20:af:35:81:28:24:eb:a7:9d:4b:dd:f3:8a:fe:
51:0d:ef:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgwRQTNMXdR0PIqQXwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMzAzMDQ0NVoXDTI1MDMxMzAyMDQ0NVowLzEtMCsGA1UEAxMk
ZmM3ZmY3ZWUtMmIwZS00ZDFiLWExZjktZWQ4N2MzMmM4ZjZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pm89/gGos/hpfykxpc9hztV5/WD0MMI6kc8
beHKwwRu1MC3/+eE3Db/LuFhG4uVYj1D5AxPBPm8aoXndswbGI3oHKzJFhPr7tPa
d/YwnAcGpJk+/6oiawFhOZ55sL2tqcHTe/b87xmebgOH/S7zraw/aGsk+fJc2Jwm
k/gnBTXBhlUJ+u7v27bhLrwDojqZLxcuVOGcwOL+r6T4MG5Ubgm/nYlcPr7J2rvC
dkYZTxbOnzENsgsMAId5YqFl5rdhroQtpC8g4MeTAvpWVtBLGNqjP31vhmeXhsnQ
9YBzN3yNFrgsrwgifRp+RmFlSwSji1mhHSHlY7WSMjwdD/OdSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPEy7awcDpuNUQFw1knGg2dulbutMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTU0OWU2MzEtZDYxMy0z
YTZmLWEzZTQtZGNlOWQ4Njk4ZGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA9NV/FVf8jZ2TUZ9ZF9IoCk/piSLZfkH0rQbwlcTj5pI7XYhZ/C4bNC
7ZiNszpKPYPud9t3iEy8N8PA6ISHsH1T8SVr/pqO0SMCnEdof4SxUNPcWQAk4IEO
Jr/ik9r1LcGkE6IvC/845rH6IKgTiGsbSG2BkOpaHNh0sh9xQIvyv5nwEo+ZqGTt
3odjlugJTlfpMVPwS9OHnd2zutlALjTT1DSKx41ME+jPSM5B1WWjFJRevK0GTa7c
SVESCOCdsfqIrriYv79dXi8sYzpv4GCFsoXClPZ+nUSsyEYJOv0M+thkBL5x8iTJ
A687sQAgrzWBKCTrp51L3fOK/lEN794=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:45:57 2025 by rpki-client