Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2dc766a6-25e4-3de3-8f9a-75199c0691e4.roa
File: 2dc766a6-25e4-3de3-8f9a-75199c0691e4.roa (raw, json)
Hash identifier: KEhq2JFxH3efSVP25CxBNSFY23NEIJKhKcv0REQCoKU=
Subject key identifier: FA:B6:24:D9:AC:51:EC:A0:D4:8C:EF:C2:36:8B:D1:75:02:B9:51:4D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848301F186B52976C68EB7C8580
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2dc766a6-25e4-3de3-8f9a-75199c0691e4.roa
Signing time: Fri 13 Dec 2024 01:48:20 +0000
ROA not before: Fri 13 Dec 2024 01:48:20 +0000
ROA not after: Thu 13 Mar 2025 00:48:20 +0000
asID: 13335
IP address blocks: 172.69.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:1f:18:6b:52:97:6c:68:eb:7c:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 01:48:20 2024 GMT
Not After : Mar 13 00:48:20 2025 GMT
Subject: CN=be4e693e-eb49-4f0c-b8c5-b0ad1a815c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:33:84:1c:b3:a6:16:29:68:97:a0:16:5e:
d2:5e:ba:bb:4b:58:3c:ec:6a:e8:63:d8:2c:4c:7c:
d5:b9:93:9a:63:d7:c0:46:e2:ff:9b:b6:3a:4b:82:
55:62:4c:7f:b3:f5:a6:30:0c:d8:44:cb:1e:31:43:
1b:77:65:eb:5e:f3:bf:64:5b:d2:33:ae:02:73:4e:
68:5e:32:12:6d:fc:02:6e:ed:f5:b6:30:b8:8d:71:
3b:b5:b5:c1:e4:6e:e2:74:fc:80:60:c7:c7:08:46:
07:99:32:e7:23:a5:43:df:33:dd:30:2a:63:8b:85:
0f:1d:02:5f:f3:68:ff:6a:2b:11:84:d7:03:d5:19:
87:85:3d:49:e5:48:e9:f0:93:2b:b2:d2:32:2a:a4:
f9:52:1f:a2:ff:2e:80:ce:f7:ad:c4:8c:37:5e:d3:
19:f2:70:06:db:19:97:12:dd:63:7c:eb:e9:eb:87:
c9:53:64:51:1c:a0:e8:54:53:2e:38:df:31:f2:79:
55:02:27:ce:3c:f0:1e:90:10:8a:92:32:29:4e:63:
b8:b4:9e:6b:30:eb:c3:55:1a:aa:31:c0:6c:92:db:
c4:d8:72:b0:fa:45:48:03:07:f5:42:0b:df:c1:a1:
10:05:11:76:8d:d8:35:52:a8:d2:9f:d9:65:c4:cd:
1b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B6:24:D9:AC:51:EC:A0:D4:8C:EF:C2:36:8B:D1:75:02:B9:51:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2dc766a6-25e4-3de3-8f9a-75199c0691e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c6:7f:f0:f9:27:0f:83:22:8d:b0:d5:00:64:74:c2:2f:4b:02:
1d:f2:a5:7f:9a:fe:26:8f:cd:b5:a8:3e:26:c7:7d:86:de:96:
89:e8:81:da:4a:1a:10:cb:6d:cd:db:71:6c:21:53:a1:0f:ca:
2a:49:79:e0:7a:0f:2a:33:9a:64:c2:40:11:c8:43:f4:f9:cc:
69:ee:e9:2c:9c:bd:67:e4:4b:c0:28:c1:71:44:98:b0:a0:2f:
e6:37:4e:2f:37:97:19:6b:fe:2b:24:30:88:44:0e:a3:76:78:
1b:5d:b6:33:00:3e:e0:f4:10:63:5a:2b:94:31:a7:67:f8:67:
52:24:88:fa:ee:97:57:04:8b:bb:9f:de:54:9f:76:db:61:cb:
c8:fb:a2:fb:ae:dd:2e:e5:ac:df:14:eb:e7:90:75:67:a0:04:
d4:7a:69:0b:19:08:43:ea:61:60:a3:9a:8a:ef:19:9e:bb:fa:
e0:a9:56:33:5f:99:95:16:30:5e:3b:87:1d:94:52:bb:80:de:
00:ad:ab:19:64:a9:33:4e:b4:d9:50:16:af:40:54:09:bc:39:
b9:f6:3d:8c:66:28:85:6d:72:db:c3:13:62:d4:1b:5e:ec:1d:
15:6a:22:59:85:02:e1:94:1b:94:cf:6c:52:69:0d:8b:ec:e4:
a8:48:18:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgwHxhrUpdsaOt8hYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMzAxNDgyMFoXDTI1MDMxMzAwNDgyMFowLzEtMCsGA1UEAxMk
YmU0ZTY5M2UtZWI0OS00ZjBjLWI4YzUtYjBhZDFhODE1YzFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqozhByzphYpaJegFl7SXrq7S1g87GroY9gs
THzVuZOaY9fARuL/m7Y6S4JVYkx/s/WmMAzYRMseMUMbd2XrXvO/ZFvSM64Cc05o
XjISbfwCbu31tjC4jXE7tbXB5G7idPyAYMfHCEYHmTLnI6VD3zPdMCpji4UPHQJf
82j/aisRhNcD1RmHhT1J5Ujp8JMrstIyKqT5Uh+i/y6AzvetxIw3XtMZ8nAG2xmX
Et1jfOvp64fJU2RRHKDoVFMuON8x8nlVAifOPPAekBCKkjIpTmO4tJ5rMOvDVRqq
McBsktvE2HKw+kVIAwf1QgvfwaEQBRF2jdg1UqjSn9llxM0bIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPq2JNmsUeyg1IzvwjaL0XUCuVFNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmRjNzY2YTYtMjVlNC0z
ZGUzLThmOWEtNzUxOTljMDY5MWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMZ/8PknD4MijbDVAGR0wi9LAh3ypX+a/iaPzbWoPibHfYbelonogdpK
GhDLbc3bcWwhU6EPyipJeeB6DyozmmTCQBHIQ/T5zGnu6SycvWfkS8AowXFEmLCg
L+Y3Ti83lxlr/iskMIhEDqN2eBtdtjMAPuD0EGNaK5Qxp2f4Z1IkiPrul1cEi7uf
3lSfdtthy8j7ovuu3S7lrN8U6+eQdWegBNR6aQsZCEPqYWCjmorvGZ67+uCpVjNf
mZUWMF47hx2UUruA3gCtqxlkqTNOtNlQFq9AVAm8Obn2PYxmKIVtctvDE2LUG17s
HRVqIlmFAuGUG5TPbFJpDYvs5KhIGEE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:49:19 2025 by rpki-client