Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/21338047-3012-3225-91d9-db12e2acd02c.roa
File: 21338047-3012-3225-91d9-db12e2acd02c.roa (raw, json)
Hash identifier: xO5EjBexd1g+AaA+7it2v3BrWqAvBCaokvzhaXCGoeI=
Subject key identifier: 50:0A:67:B9:A3:A8:9F:4D:4A:C2:6D:50:A1:23:C6:17:81:57:45:82
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827B9E20DC1FE2E3097161780
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/21338047-3012-3225-91d9-db12e2acd02c.roa
Signing time: Tue 10 Dec 2024 01:37:57 +0000
ROA not before: Tue 10 Dec 2024 01:37:57 +0000
ROA not after: Mon 10 Mar 2025 00:37:57 +0000
asID: 13335
IP address blocks: 172.70.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:b9:e2:0d:c1:fe:2e:30:97:16:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:37:57 2024 GMT
Not After : Mar 10 00:37:57 2025 GMT
Subject: CN=283edc57-6856-40fa-80db-4c92dbf705d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:ee:9e:9e:e2:60:da:8b:d4:45:db:26:b9:
2f:4a:94:9d:87:4c:17:fa:fb:63:6d:e3:07:9c:7b:
ce:a1:58:da:f8:ec:7b:a7:86:52:c1:27:16:83:a0:
e2:8c:76:37:7c:56:cd:4a:7b:60:b1:4f:58:c9:74:
4d:0a:15:41:90:99:59:93:a3:64:4c:48:6e:83:28:
4d:bb:09:2c:fa:2b:15:47:ef:40:9a:3a:96:a5:9f:
b9:46:7c:56:87:16:9a:59:df:96:11:0d:be:3e:9f:
b1:d6:2a:26:08:1a:39:75:33:21:6f:67:44:f1:34:
a2:fe:33:4b:04:99:92:c7:cc:de:89:57:28:db:3f:
b2:b8:6c:c9:1d:21:20:19:1c:1d:61:5c:74:5d:9f:
ee:9f:18:cb:0c:6c:52:75:b0:aa:fd:5a:54:b6:42:
a4:2f:fc:5e:f0:1c:bb:d0:40:40:ee:2b:0a:1d:0b:
71:11:32:2e:71:8d:a1:2f:34:36:98:a6:e4:c7:a0:
b4:0e:80:70:c1:6a:9b:84:6d:a2:42:a7:03:b4:af:
e7:f1:fa:b6:db:9d:40:92:d6:a2:bf:a8:7b:94:23:
05:26:95:6c:39:ce:8d:e8:4a:6a:c0:2e:a8:a9:07:
b4:18:a4:e7:c8:86:cf:21:46:74:b9:f8:94:53:fe:
76:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0A:67:B9:A3:A8:9F:4D:4A:C2:6D:50:A1:23:C6:17:81:57:45:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/21338047-3012-3225-91d9-db12e2acd02c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:e9:e9:f1:df:57:0a:cf:54:f7:5b:57:a7:9f:a0:9f:b4:a4:
e7:8d:3b:8f:1f:42:9b:ab:a8:4d:15:fc:9b:ae:71:ba:da:02:
05:e8:09:83:f1:94:b1:b7:a1:fd:34:2f:89:00:2d:65:e7:c3:
32:ba:6b:41:18:74:f8:91:58:67:8c:9d:32:b4:90:2c:a2:22:
0c:5f:4b:fd:0e:5a:3b:db:c0:73:7b:42:60:f5:c5:48:28:c8:
bb:43:fd:23:0e:1b:46:57:e3:30:fc:ff:0c:8f:8a:d0:8e:99:
43:ee:93:df:7e:a4:c9:bc:ae:4a:53:1e:7f:2b:1c:34:6b:0b:
95:d7:43:22:40:f4:9f:1f:77:0d:db:8f:8f:37:5a:07:da:a4:
79:5e:0d:5f:cf:17:4b:ee:30:ce:38:a4:03:5e:92:6d:cc:9d:
46:7b:c4:88:20:c2:a8:44:21:2a:ad:e2:af:f1:c0:fc:0b:88:
5a:ec:d4:83:42:bf:4d:25:76:de:a0:43:d9:12:d6:c6:be:30:
d6:79:ce:50:57:41:7e:a4:98:8e:c0:32:58:9f:c1:01:47:6f:
ea:50:fd:78:bf:90:6b:11:af:a1:17:b3:70:4b:d9:94:96:72:
f8:28:c6:bf:54:87:89:78:93:a8:cb:9b:fc:cb:fa:a6:ad:21:
fd:05:be:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgnueINwf4uMJcWF4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDAxMzc1N1oXDTI1MDMxMDAwMzc1N1owLzEtMCsGA1UEAxMk
MjgzZWRjNTctNjg1Ni00MGZhLTgwZGItNGM5MmRiZjcwNWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR7unp7iYNqL1EXbJrkvSpSdh0wX+vtjbeMH
nHvOoVja+Ox7p4ZSwScWg6DijHY3fFbNSntgsU9YyXRNChVBkJlZk6NkTEhugyhN
uwks+isVR+9AmjqWpZ+5RnxWhxaaWd+WEQ2+Pp+x1iomCBo5dTMhb2dE8TSi/jNL
BJmSx8zeiVco2z+yuGzJHSEgGRwdYVx0XZ/unxjLDGxSdbCq/VpUtkKkL/xe8By7
0EBA7isKHQtxETIucY2hLzQ2mKbkx6C0DoBwwWqbhG2iQqcDtK/n8fq2251Aktai
v6h7lCMFJpVsOc6N6EpqwC6oqQe0GKTnyIbPIUZ0ufiUU/52GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFAKZ7mjqJ9NSsJtUKEjxheBV0WCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjEzMzgwNDctMzAxMi0z
MjI1LTkxZDktZGIxMmUyYWNkMDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEYgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK7p6fHfVwrPVPdbV6efoJ+0pOeNO48fQpurqE0V/JuucbraAgXoCYPx
lLG3of00L4kALWXnwzK6a0EYdPiRWGeMnTK0kCyiIgxfS/0OWjvbwHN7QmD1xUgo
yLtD/SMOG0ZX4zD8/wyPitCOmUPuk99+pMm8rkpTHn8rHDRrC5XXQyJA9J8fdw3b
j483WgfapHleDV/PF0vuMM44pANekm3MnUZ7xIggwqhEISqt4q/xwPwLiFrs1INC
v00ldt6gQ9kS1sa+MNZ5zlBXQX6kmI7AMlifwQFHb+pQ/Xi/kGsRr6EXs3BL2ZSW
cvgoxr9Uh4l4k6jLm/zL+qatIf0Fvsw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:00 2025 by rpki-client