Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34bfc0b2-9b92-3272-9c81-8a0186cf6d8f.roa
File: 34bfc0b2-9b92-3272-9c81-8a0186cf6d8f.roa (raw, json)
Hash identifier: NWY08ZKxAK9v96YbA1ZC9dBXuyBw5pbdbk1VlhARs3k=
Subject key identifier: 9A:CC:AF:97:C4:39:B9:3C:BC:8E:96:63:33:66:6B:BD:22:AF:4F:81
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A8DD98B62AF89E55FF4B5E0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34bfc0b2-9b92-3272-9c81-8a0186cf6d8f.roa
Signing time: Wed 11 Dec 2024 01:56:39 +0000
ROA not before: Wed 11 Dec 2024 01:56:39 +0000
ROA not after: Tue 11 Mar 2025 00:56:39 +0000
asID: 13335
IP address blocks: 172.68.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8d:d9:8b:62:af:89:e5:5f:f4:b5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 01:56:39 2024 GMT
Not After : Mar 11 00:56:39 2025 GMT
Subject: CN=5fd04b5a-ac53-47d1-8617-575d164a2342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:aa:e8:f7:de:e1:3c:29:60:cb:95:33:30:60:
0e:e9:ef:30:ed:ae:9a:e1:da:10:1a:5d:5b:60:2b:
bc:e8:24:b7:d3:af:e5:7a:07:9f:43:02:4f:3d:c2:
f9:67:f4:08:54:f8:5b:80:a6:d9:48:db:4c:78:f6:
53:8b:3d:6c:fc:9d:5b:d3:eb:fe:d8:c3:f2:c6:a5:
62:74:09:8f:d8:f6:61:a2:d9:5f:e9:ca:c9:7e:9c:
12:45:67:1f:83:db:5b:46:12:1d:54:6d:ff:ce:41:
25:e2:73:62:98:f2:fe:2c:81:07:00:88:15:14:41:
1f:d3:74:59:48:c7:2d:a9:06:e1:10:f6:06:aa:f6:
a4:3c:81:58:8a:7d:16:23:5e:b9:c2:91:46:93:a5:
37:42:f4:cd:9c:aa:56:b0:c8:34:ce:7a:7d:b2:03:
08:10:e4:ef:9c:38:db:1b:4b:1d:3a:4b:bf:56:29:
55:04:a6:3c:2b:0b:7e:62:ba:8e:cd:c7:0f:59:8c:
7a:82:50:1a:55:f7:24:21:ee:3d:7c:18:29:f0:bc:
57:36:b2:bf:b5:d1:dd:0d:ba:78:62:94:84:a0:69:
50:05:db:52:f4:86:78:87:35:81:a2:51:d8:9c:d1:
52:2d:fb:2e:18:7c:f0:ce:12:e8:15:a5:cb:50:37:
41:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CC:AF:97:C4:39:B9:3C:BC:8E:96:63:33:66:6B:BD:22:AF:4F:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34bfc0b2-9b92-3272-9c81-8a0186cf6d8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:de:48:cb:de:1f:f2:d9:d3:6d:cb:ff:07:c7:f3:be:ab:91:
69:30:7f:51:37:e0:fe:74:1e:aa:ff:5f:d7:1e:eb:67:b6:89:
70:1d:0f:90:35:de:7b:61:fd:62:89:66:91:2c:40:dd:9a:bf:
20:ef:b4:9d:f4:21:d8:49:02:54:cf:90:b9:23:fc:c7:b0:16:
cb:53:53:53:b0:bd:eb:dc:27:08:71:3d:5c:a1:5e:4e:a5:bd:
0c:fe:e4:af:da:58:b1:c6:98:17:d1:7c:be:b3:1f:59:54:2d:
09:4d:01:6f:dc:91:2d:88:13:83:2a:64:a5:8d:bd:15:41:5d:
6b:9d:a7:f5:7a:11:b2:09:71:34:e3:be:0b:7a:c2:d8:df:5d:
bf:93:8e:c2:3c:d9:26:4c:99:7b:32:4e:c2:be:79:80:e1:34:
87:d3:85:58:4d:98:71:c9:dd:f7:63:f9:a0:ff:e5:72:5f:72:
69:80:68:0d:83:37:e6:9f:8f:d3:5f:6f:7a:3a:11:af:ed:cf:
d3:6c:be:48:8e:94:f1:f4:c8:20:1e:20:c6:46:bc:e4:fe:bf:
e0:6f:f7:b2:8e:2f:37:d5:da:b0:6d:ad:ab:fb:3b:56:45:63:
9f:27:6f:e8:01:7d:2e:a7:a2:5f:29:75:bf:e9:08:d7:2c:5d:
17:eb:04:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgqjdmLYq+J5V/0teAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMTAxNTYzOVoXDTI1MDMxMTAwNTYzOVowLzEtMCsGA1UEAxMk
NWZkMDRiNWEtYWM1My00N2QxLTg2MTctNTc1ZDE2NGEyMzQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqro997hPClgy5UzMGAO6e8w7a6a4doQGl1b
YCu86CS306/legefQwJPPcL5Z/QIVPhbgKbZSNtMePZTiz1s/J1b0+v+2MPyxqVi
dAmP2PZhotlf6crJfpwSRWcfg9tbRhIdVG3/zkEl4nNimPL+LIEHAIgVFEEf03RZ
SMctqQbhEPYGqvakPIFYin0WI165wpFGk6U3QvTNnKpWsMg0znp9sgMIEOTvnDjb
G0sdOku/VilVBKY8Kwt+YrqOzccPWYx6glAaVfckIe49fBgp8LxXNrK/tdHdDbp4
YpSEoGlQBdtS9IZ4hzWBolHYnNFSLfsuGHzwzhLoFaXLUDdB2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJrMr5fEObk8vI6WYzNma70ir0+BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzRiZmMwYjItOWI5Mi0z
MjcyLTljODEtOGEwMTg2Y2Y2ZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIjeSMveH/LZ023L/wfH876rkWkwf1E34P50Hqr/X9ce62e2iXAdD5A1
3nth/WKJZpEsQN2avyDvtJ30IdhJAlTPkLkj/MewFstTU1OwvevcJwhxPVyhXk6l
vQz+5K/aWLHGmBfRfL6zH1lULQlNAW/ckS2IE4MqZKWNvRVBXWudp/V6EbIJcTTj
vgt6wtjfXb+TjsI82SZMmXsyTsK+eYDhNIfThVhNmHHJ3fdj+aD/5XJfcmmAaA2D
N+afj9Nfb3o6Ea/tz9NsvkiOlPH0yCAeIMZGvOT+v+Bv97KOLzfV2rBtrav7O1ZF
Y58nb+gBfS6nol8pdb/pCNcsXRfrBLM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:56:35 2025 by rpki-client