Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24ee1655-b2e5-3e5e-bb95-5552f047a98c.roa
File: 24ee1655-b2e5-3e5e-bb95-5552f047a98c.roa (raw, json)
Hash identifier: N94Q5s3RFAr6KNhnyU+p6hJ2sEpGEFZhd7GsCaiFVpI=
Subject key identifier: 38:78:05:1C:26:AD:FB:74:14:65:2D:B6:4F:F5:06:CD:AE:A5:FC:48
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858483058C2C2E3BD356C591BC100
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24ee1655-b2e5-3e5e-bb95-5552f047a98c.roa
Signing time: Fri 13 Dec 2024 03:44:32 +0000
ROA not before: Fri 13 Dec 2024 03:44:32 +0000
ROA not after: Thu 13 Mar 2025 02:44:32 +0000
asID: 13335
IP address blocks: 172.71.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:58:c2:c2:e3:bd:35:6c:59:1b:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:44:32 2024 GMT
Not After : Mar 13 02:44:32 2025 GMT
Subject: CN=ae050c09-51ad-4f5b-ae6b-a88509717539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0f:d2:1a:81:e6:bd:d5:a3:ad:57:db:24:bc:
c3:82:ca:ec:71:ea:cd:23:af:f4:4b:59:64:fd:38:
1c:93:a9:7a:06:6a:67:09:a8:6e:18:70:05:72:f9:
aa:ba:44:2a:8e:4a:ab:ab:6e:02:c8:60:e1:bf:d9:
99:be:08:07:a2:48:45:67:ed:c1:1f:95:20:ee:81:
ef:e2:13:11:20:83:af:04:17:e8:1b:4b:76:bf:11:
ba:36:60:4e:74:de:f2:a1:ba:92:b3:22:27:da:54:
05:b0:0e:8b:72:15:d7:e7:c2:22:21:82:17:82:cd:
16:2c:8f:19:81:45:19:bc:52:ea:a9:4e:f2:e3:ad:
cc:43:82:e8:08:87:ba:0e:c1:e6:15:90:0e:40:88:
46:6b:73:4e:04:f4:86:81:69:a0:4c:0b:d4:65:88:
79:27:2f:ed:53:27:fa:e3:69:7e:d5:fd:e5:b4:e8:
c7:9c:53:7e:3e:5f:2e:a0:7c:d9:e5:29:63:df:23:
a4:ad:d9:4c:ce:13:81:a2:24:a3:6b:4a:1c:27:0a:
51:a6:13:88:b6:04:52:4b:a8:11:1f:ad:bd:fc:8b:
34:d6:4e:13:61:72:f5:4b:6f:46:46:fd:b5:a1:64:
7a:19:74:36:06:a9:0c:3a:1c:5b:d6:7a:23:f2:d6:
80:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:78:05:1C:26:AD:FB:74:14:65:2D:B6:4F:F5:06:CD:AE:A5:FC:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24ee1655-b2e5-3e5e-bb95-5552f047a98c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:2d:a8:0a:c2:62:da:a6:42:ed:4b:41:ab:3b:28:cf:b9:8b:
ee:e4:b7:12:59:70:3a:5f:68:80:34:ad:10:d2:8e:31:3a:46:
07:c6:af:00:03:6e:3e:4f:8b:63:b1:e7:6c:4b:1a:0d:8e:2c:
27:df:73:1a:3d:99:9e:f0:da:58:fa:fd:f9:19:04:8a:6b:51:
c4:c7:c8:c2:41:8a:13:a3:d5:cc:44:b8:b1:fe:46:10:4c:d3:
fe:a2:0d:45:3a:31:f8:f7:15:da:0b:2c:2d:76:f2:1d:18:1a:
c7:52:ae:0f:17:22:79:0a:39:37:f3:ea:15:22:da:04:04:c0:
5f:90:a0:1b:94:4c:6d:3b:58:73:0a:a2:c1:10:15:bb:36:57:
b5:80:05:45:e9:6a:d9:7a:1d:57:84:8a:e5:ba:65:d6:fe:95:
2c:8e:65:6a:80:80:72:c5:6e:5e:a7:8d:90:d6:3f:90:0a:b2:
b7:13:ba:70:01:c5:0c:b0:fe:7d:c0:a9:0f:a4:20:5c:20:0d:
bf:c9:b1:2b:3f:21:be:40:cc:10:d2:25:94:6a:91:ac:7f:bd:
f1:96:75:c2:c1:2e:b3:dd:bb:24:34:a7:0a:c2:71:10:ce:45:
d0:75:8d:bf:a1:e3:93:c6:1f:8c:45:f2:2a:d1:db:48:4d:66:
0e:4a:e8:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgwWMLC4701bFkbwQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMzAzNDQzMloXDTI1MDMxMzAyNDQzMlowLzEtMCsGA1UEAxMk
YWUwNTBjMDktNTFhZC00ZjViLWFlNmItYTg4NTA5NzE3NTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg/SGoHmvdWjrVfbJLzDgsrscerNI6/0S1lk
/Tgck6l6BmpnCahuGHAFcvmqukQqjkqrq24CyGDhv9mZvggHokhFZ+3BH5Ug7oHv
4hMRIIOvBBfoG0t2vxG6NmBOdN7yobqSsyIn2lQFsA6LchXX58IiIYIXgs0WLI8Z
gUUZvFLqqU7y463MQ4LoCIe6DsHmFZAOQIhGa3NOBPSGgWmgTAvUZYh5Jy/tUyf6
42l+1f3ltOjHnFN+Pl8uoHzZ5Slj3yOkrdlMzhOBoiSja0ocJwpRphOItgRSS6gR
H629/Is01k4TYXL1S29GRv21oWR6GXQ2BqkMOhxb1noj8taAuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDh4BRwmrft0FGUttk/1Bs2upfxIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjRlZTE2NTUtYjJlNS0z
ZTVlLWJiOTUtNTU1MmYwNDdhOThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ0tqArCYtqmQu1LQas7KM+5i+7ktxJZcDpfaIA0rRDSjjE6RgfGrwAD
bj5Pi2Ox52xLGg2OLCffcxo9mZ7w2lj6/fkZBIprUcTHyMJBihOj1cxEuLH+RhBM
0/6iDUU6Mfj3FdoLLC128h0YGsdSrg8XInkKOTfz6hUi2gQEwF+QoBuUTG07WHMK
osEQFbs2V7WABUXpatl6HVeEiuW6Zdb+lSyOZWqAgHLFbl6njZDWP5AKsrcTunAB
xQyw/n3AqQ+kIFwgDb/JsSs/Ib5AzBDSJZRqkax/vfGWdcLBLrPduyQ0pwrCcRDO
RdB1jb+h45PGH4xF8irR20hNZg5K6Pc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:12:20 2025 by rpki-client