Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24829d14-985d-3bf3-bc5c-2f773de283d5.roa
File: 24829d14-985d-3bf3-bc5c-2f773de283d5.roa (raw, json)
Hash identifier: 5LF2TDqgrTyDq2X1cHO/yk0CU52d3M7Lih71/N2A3TI=
Subject key identifier: 3B:4A:51:18:34:B3:DD:8F:C8:D1:7C:50:49:AA:F4:8D:01:98:9E:29
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848282033EDE9FF95E690D28F80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24829d14-985d-3bf3-bc5c-2f773de283d5.roa
Signing time: Tue 10 Dec 2024 05:04:06 +0000
ROA not before: Tue 10 Dec 2024 05:04:06 +0000
ROA not after: Mon 10 Mar 2025 04:04:06 +0000
asID: 13335
IP address blocks: 172.67.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:20:33:ed:e9:ff:95:e6:90:d2:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 05:04:06 2024 GMT
Not After : Mar 10 04:04:06 2025 GMT
Subject: CN=3d09a024-3d70-4b54-b932-37d8e8ada18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:41:e3:00:75:36:5d:e3:e1:49:ec:d1:61:57:
8f:0f:0a:97:53:67:f1:04:55:ca:c1:c5:fa:50:a8:
e0:c4:e1:bf:2a:ff:63:ec:d8:61:77:55:e7:46:8b:
82:60:65:dd:72:0c:c1:c6:d5:97:19:c0:5a:2b:8f:
f7:9b:aa:9b:93:31:88:6e:70:34:9e:47:12:0c:fc:
53:03:79:22:ef:7d:91:7b:f3:03:2f:fc:f0:96:08:
8e:d3:31:e6:3b:4c:7d:dc:44:1e:8f:d7:d2:73:fd:
c1:f4:ce:43:d8:6a:93:af:16:a8:e0:44:d2:a2:ad:
f8:00:29:42:10:73:f7:05:13:15:a6:93:56:c2:28:
9c:71:e9:3c:d9:a2:58:48:93:94:7f:85:06:45:60:
68:10:38:39:1e:5f:48:43:8f:de:b9:e5:1f:9e:cd:
c3:88:ee:6c:6a:ae:39:99:d1:bf:fe:b2:43:b0:19:
3d:56:79:60:34:65:a4:c6:c0:2d:6e:91:f6:79:64:
57:6d:d6:a2:f3:1f:13:73:5d:6c:7e:57:5d:95:a3:
d5:1f:70:f4:3a:ba:39:b2:76:a2:f8:6a:e5:d4:05:
bf:77:dd:20:9a:d4:7b:80:3c:4d:3b:7c:7b:64:14:
bc:7c:eb:7e:f6:3c:af:7a:56:21:d0:f6:5a:3d:a9:
78:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4A:51:18:34:B3:DD:8F:C8:D1:7C:50:49:AA:F4:8D:01:98:9E:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24829d14-985d-3bf3-bc5c-2f773de283d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.67.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:90:68:ef:64:01:16:c8:9d:0a:5e:a1:78:ce:ab:9d:a2:6f:
10:66:94:33:a7:3c:70:69:d3:3c:9f:ab:cc:f8:94:b5:0b:10:
ac:db:cc:1f:17:a1:2e:fe:2a:5e:37:3d:6c:da:e9:d4:c6:70:
fc:1d:2e:09:01:66:67:f6:32:fc:d1:5e:48:fd:81:9b:0e:77:
82:b1:7d:6a:85:7b:d3:28:6b:d3:f9:0d:ff:ae:db:50:c5:31:
4e:b5:7b:25:9d:49:5f:4a:1c:6d:e1:42:84:ab:07:c6:20:68:
15:eb:70:ef:7a:ee:3e:89:e7:2a:1c:1c:ea:8a:bd:4a:2b:a3:
ee:75:6e:62:a6:6d:d7:d1:1f:fa:4a:38:16:a2:d8:a6:6b:65:
e1:87:c1:4e:09:93:5f:c2:43:64:a6:47:75:2c:47:73:f0:e7:
b9:f6:f2:73:d5:80:9d:bd:73:8c:82:61:cf:9e:04:99:ba:ac:
75:66:30:5f:53:b6:ba:8d:df:f1:1f:db:12:e0:d9:76:5e:cc:
2c:fb:01:34:46:70:3e:d2:17:0d:be:f4:08:f0:5e:1d:93:aa:
36:02:f4:ca:17:4a:b3:2c:3f:65:68:57:2e:9a:6a:79:df:58:
2b:4c:06:0c:9e:94:ea:8e:10:fe:fd:43:46:99:8b:a4:de:72:
99:66:34:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgoIDPt6f+V5pDSj4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDA1MDQwNloXDTI1MDMxMDA0MDQwNlowLzEtMCsGA1UEAxMk
M2QwOWEwMjQtM2Q3MC00YjU0LWI5MzItMzdkOGU4YWRhMThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkHjAHU2XePhSezRYVePDwqXU2fxBFXKwcX6
UKjgxOG/Kv9j7Nhhd1XnRouCYGXdcgzBxtWXGcBaK4/3m6qbkzGIbnA0nkcSDPxT
A3ki732Re/MDL/zwlgiO0zHmO0x93EQej9fSc/3B9M5D2GqTrxao4ETSoq34AClC
EHP3BRMVppNWwiiccek82aJYSJOUf4UGRWBoEDg5Hl9IQ4/eueUfns3DiO5saq45
mdG//rJDsBk9VnlgNGWkxsAtbpH2eWRXbdai8x8Tc11sflddlaPVH3D0Oro5snai
+Grl1AW/d90gmtR7gDxNO3x7ZBS8fOt+9jyvelYh0PZaPal4JwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDtKURg0s92PyNF8UEmq9I0BmJ4pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjQ4MjlkMTQtOTg1ZC0z
YmYzLWJjNWMtMmY3NzNkZTI4M2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEOAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAByQaO9kARbInQpeoXjOq52ibxBmlDOnPHBp0zyfq8z4lLULEKzbzB8X
oS7+Kl43PWza6dTGcPwdLgkBZmf2MvzRXkj9gZsOd4KxfWqFe9Moa9P5Df+u21DF
MU61eyWdSV9KHG3hQoSrB8YgaBXrcO967j6J5yocHOqKvUoro+51bmKmbdfRH/pK
OBai2KZrZeGHwU4Jk1/CQ2SmR3UsR3Pw57n28nPVgJ29c4yCYc+eBJm6rHVmMF9T
trqN3/Ef2xLg2XZezCz7ATRGcD7SFw2+9AjwXh2TqjYC9MoXSrMsP2VoVy6aannf
WCtMBgyelOqOEP79Q0aZi6TecplmNJU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:49:23 2025 by rpki-client