Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/33cdcae0-bd47-3d40-8771-2028bd3d2ac1.roa
File: 33cdcae0-bd47-3d40-8771-2028bd3d2ac1.roa (raw, json)
Hash identifier: 2f+8BzSoduuPO0Nu5NH3n0g7zjCim6/jCstlK+cjEC8=
Subject key identifier: 40:04:A4:CD:9B:EB:64:6F:31:2F:91:9A:C2:5E:78:DF:88:71:11:60
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584830215C6281B61DBF846A0B80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/33cdcae0-bd47-3d40-8771-2028bd3d2ac1.roa
Signing time: Fri 13 Dec 2024 01:52:54 +0000
ROA not before: Fri 13 Dec 2024 01:52:54 +0000
ROA not after: Thu 13 Mar 2025 00:52:54 +0000
asID: 13335
IP address blocks: 172.70.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:21:5c:62:81:b6:1d:bf:84:6a:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 01:52:54 2024 GMT
Not After : Mar 13 00:52:54 2025 GMT
Subject: CN=94304acf-ea80-410c-8b30-1fb89c8f58ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b5:51:77:14:e2:65:3a:52:50:c3:f0:d0:0c:
cc:41:c7:ab:f0:f9:fa:72:c8:e4:47:31:f4:9c:a1:
14:9e:fe:1d:43:89:44:83:7e:e2:50:da:2e:29:cd:
9d:b9:9c:1a:1a:3f:54:99:c0:28:72:3b:f4:88:bb:
8f:a9:73:ac:8c:b3:43:08:df:b3:89:ce:eb:c4:0b:
72:d1:c5:e4:93:bd:74:c1:7e:79:a8:b4:15:85:2e:
7c:a5:ad:26:81:f2:97:31:73:d1:27:93:85:da:cf:
91:d5:70:fa:b5:b6:30:9a:2d:98:d7:36:93:18:02:
7d:7c:60:d5:97:34:d7:76:f2:f6:2c:4d:17:2e:59:
cf:34:e4:d6:6f:f0:e1:01:c8:38:bb:73:bd:1b:f6:
a9:29:72:c8:93:85:4b:3b:99:88:05:45:5b:9e:b0:
36:73:65:97:d1:80:4e:67:54:59:06:dd:25:df:2a:
6e:6d:c0:93:e1:37:8a:f9:c7:d0:66:9d:e2:35:0f:
0c:c8:5d:3c:c6:16:3b:79:72:00:49:82:1c:38:77:
e0:15:79:a7:08:10:91:03:c7:21:d3:a4:45:56:56:
02:20:c3:0c:be:99:ab:f6:6e:fa:69:5c:f9:8c:0d:
f8:0a:77:6a:2f:ab:aa:c1:25:0b:47:33:e1:35:e3:
20:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:04:A4:CD:9B:EB:64:6F:31:2F:91:9A:C2:5E:78:DF:88:71:11:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/33cdcae0-bd47-3d40-8771-2028bd3d2ac1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:68:c1:93:30:6d:b7:02:9d:55:6a:70:46:ca:b9:90:21:a6:
82:f0:55:91:e7:1d:2b:d5:75:76:c4:00:ed:cf:74:10:71:79:
c9:7b:1d:86:79:e9:66:7d:c9:f4:20:e8:c6:81:3d:3d:b0:39:
3b:8f:0f:8b:5c:74:14:82:1a:a9:84:b2:06:fc:21:2e:85:6d:
4c:cb:22:8e:b9:b4:b2:de:7e:61:b2:ff:b1:fb:38:45:f3:ef:
c0:b9:fa:97:5f:00:83:70:17:1d:be:1b:bc:38:fe:a1:e5:be:
9b:e7:92:94:90:34:29:57:c2:1d:96:05:cd:9a:0e:99:2d:9b:
86:c7:5c:94:77:07:f2:c8:1c:c6:35:b8:b1:fb:81:89:d9:6b:
14:1b:88:8c:59:c9:cd:3f:0e:44:6a:fb:a6:cd:b5:9a:54:57:
1d:8c:03:8b:fd:b6:75:15:83:0c:6c:57:41:c4:c9:0c:9b:85:
3d:b7:bd:ea:0f:ea:e0:54:df:9b:56:5b:c7:f6:05:46:d3:8c:
fd:1c:da:17:23:ff:f5:1a:5c:19:c3:86:c8:c1:59:a8:20:79:
fd:e5:24:36:5e:e5:91:ad:d3:79:08:ba:33:d8:f0:5a:a0:44:
7d:f5:f8:20:a1:91:9f:9e:69:a3:33:4b:f2:d4:8b:6d:91:ec:
11:39:2b:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgwIVxigbYdv4RqC4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMzAxNTI1NFoXDTI1MDMxMzAwNTI1NFowLzEtMCsGA1UEAxMk
OTQzMDRhY2YtZWE4MC00MTBjLThiMzAtMWZiODljOGY1OGVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7VRdxTiZTpSUMPw0AzMQcer8Pn6csjkRzH0
nKEUnv4dQ4lEg37iUNouKc2duZwaGj9UmcAocjv0iLuPqXOsjLNDCN+zic7rxAty
0cXkk710wX55qLQVhS58pa0mgfKXMXPRJ5OF2s+R1XD6tbYwmi2Y1zaTGAJ9fGDV
lzTXdvL2LE0XLlnPNOTWb/DhAcg4u3O9G/apKXLIk4VLO5mIBUVbnrA2c2WX0YBO
Z1RZBt0l3ypubcCT4TeK+cfQZp3iNQ8MyF08xhY7eXIASYIcOHfgFXmnCBCRA8ch
06RFVlYCIMMMvpmr9m76aVz5jA34CndqL6uqwSULRzPhNeMglQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEAEpM2b62RvMS+RmsJeeN+IcRFgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzNjZGNhZTAtYmQ0Ny0z
ZDQwLTg3NzEtMjAyOGJkM2QyYWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEY7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADhowZMwbbcCnVVqcEbKuZAhpoLwVZHnHSvVdXbEAO3PdBBxecl7HYZ5
6WZ9yfQg6MaBPT2wOTuPD4tcdBSCGqmEsgb8IS6FbUzLIo65tLLefmGy/7H7OEXz
78C5+pdfAINwFx2+G7w4/qHlvpvnkpSQNClXwh2WBc2aDpktm4bHXJR3B/LIHMY1
uLH7gYnZaxQbiIxZyc0/DkRq+6bNtZpUVx2MA4v9tnUVgwxsV0HEyQybhT23veoP
6uBU35tWW8f2BUbTjP0c2hcj//UaXBnDhsjBWaggef3lJDZe5ZGt03kIujPY8Fqg
RH31+CChkZ+eaaMzS/LUi22R7BE5K7U=
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:52:04 2025 by rpki-client