Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34d5c6be-0066-3764-af05-db0e88c7a96c.roa
File: 34d5c6be-0066-3764-af05-db0e88c7a96c.roa (raw, json)
Hash identifier: DleFqFvmta18D2E8hssbaw0ltNbtd8tUFvNm9v37A34=
Subject key identifier: 36:92:56:93:88:63:F0:09:8C:72:73:0F:F9:19:B4:92:A8:3B:4E:C8
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482820111FE7CA146B1BF949E0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34d5c6be-0066-3764-af05-db0e88c7a96c.roa
Signing time: Tue 10 Dec 2024 05:03:50 +0000
ROA not before: Tue 10 Dec 2024 05:03:50 +0000
ROA not after: Mon 10 Mar 2025 04:03:50 +0000
asID: 13335
IP address blocks: 172.67.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:20:11:1f:e7:ca:14:6b:1b:f9:49:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 05:03:50 2024 GMT
Not After : Mar 10 04:03:50 2025 GMT
Subject: CN=448d1760-3d49-4445-a62f-9fd43b4620ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:63:a9:79:60:d0:ad:aa:01:5a:a0:65:77:ca:
ff:61:84:fd:d0:6b:d3:6b:43:24:85:e3:91:3a:3f:
24:35:95:04:d3:36:39:db:ab:89:5b:68:cd:df:1d:
49:2b:ed:2e:30:ac:e4:3a:1c:ef:0d:90:d9:42:91:
35:54:ad:ff:61:99:33:40:99:7f:ca:35:e6:ec:99:
4b:31:b9:d3:a8:b6:45:65:a2:f2:b4:9b:3d:2a:f8:
12:54:ac:c0:84:97:53:1d:42:f6:7c:8d:f7:ea:c6:
4c:45:f0:c1:ea:29:8b:01:85:e5:3c:eb:a4:c6:81:
6d:9c:87:e0:24:19:92:0c:e2:5e:f2:4a:7c:b1:02:
e5:3d:55:6c:0f:32:1c:fe:aa:63:e6:84:5e:25:08:
81:d8:88:9e:7c:fa:69:3c:d2:54:3c:da:97:3d:2d:
0b:ee:52:18:70:08:83:a9:4b:3e:23:75:34:25:2a:
a6:c1:d6:e6:3c:c1:19:b5:dc:15:26:ac:66:78:68:
7a:0d:3d:b8:fb:e0:1d:c4:c0:cb:6e:5f:56:b1:14:
67:ef:6f:70:cb:c9:7b:15:cd:74:64:9b:5c:95:de:
4b:2c:ee:db:b8:a7:01:62:65:73:11:4f:82:7e:2b:
31:b5:1f:74:9c:1d:77:8a:75:e1:b6:64:fc:42:71:
9a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:92:56:93:88:63:F0:09:8C:72:73:0F:F9:19:B4:92:A8:3B:4E:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34d5c6be-0066-3764-af05-db0e88c7a96c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.67.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:b7:a8:93:c4:7e:f8:a2:5b:05:bc:6d:a2:50:ee:e3:ca:52:
99:69:f2:84:57:76:f6:1f:c8:3d:0c:bb:a0:88:40:7b:e6:8d:
9d:63:8b:eb:01:f3:4a:ce:27:c5:bb:48:26:f4:c5:19:22:a0:
09:35:01:c6:ec:b3:47:8e:3d:15:0f:ec:a5:91:91:90:df:a8:
13:d9:a7:b9:ad:6d:29:e2:e0:af:e0:fb:dd:c3:10:9c:bd:e3:
be:4d:7d:60:e2:32:94:cc:22:8f:cb:08:29:0a:83:ce:74:5d:
a4:5f:c8:45:64:76:54:fe:ed:2f:d0:50:bc:a8:db:96:ee:4f:
bb:c6:15:e5:26:45:95:7d:fd:b9:91:42:44:78:5a:1f:18:21:
0c:a4:eb:66:5a:25:6e:51:0b:26:55:48:eb:6e:fd:47:d5:bb:
f0:b8:9f:97:6f:51:20:d5:e6:62:72:7c:5a:5b:ca:f1:44:18:
67:d5:2e:12:f1:da:42:33:5b:b4:87:52:c4:70:83:95:68:2e:
e9:a7:f0:0e:a3:66:01:cc:4b:a9:05:67:7d:b9:df:38:46:ce:
69:9c:08:a6:14:e5:c1:52:67:bd:c0:e3:eb:b2:b7:a8:51:90:
00:f3:27:ca:77:2b:d2:d4:75:37:43:5a:58:de:d8:a0:41:a2:
95:ea:b1:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgoIBEf58oUaxv5SeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDA1MDM1MFoXDTI1MDMxMDA0MDM1MFowLzEtMCsGA1UEAxMk
NDQ4ZDE3NjAtM2Q0OS00NDQ1LWE2MmYtOWZkNDNiNDYyMGZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GOpeWDQraoBWqBld8r/YYT90GvTa0MkheOR
Oj8kNZUE0zY526uJW2jN3x1JK+0uMKzkOhzvDZDZQpE1VK3/YZkzQJl/yjXm7JlL
MbnTqLZFZaLytJs9KvgSVKzAhJdTHUL2fI336sZMRfDB6imLAYXlPOukxoFtnIfg
JBmSDOJe8kp8sQLlPVVsDzIc/qpj5oReJQiB2IiefPppPNJUPNqXPS0L7lIYcAiD
qUs+I3U0JSqmwdbmPMEZtdwVJqxmeGh6DT24++AdxMDLbl9WsRRn729wy8l7Fc10
ZJtcld5LLO7buKcBYmVzEU+CfisxtR90nB13inXhtmT8QnGaQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDaSVpOIY/AJjHJzD/kZtJKoO07IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzRkNWM2YmUtMDA2Ni0z
NzY0LWFmMDUtZGIwZTg4YzdhOTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErENgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALK3qJPEfviiWwW8baJQ7uPKUplp8oRXdvYfyD0Mu6CIQHvmjZ1ji+sB
80rOJ8W7SCb0xRkioAk1Acbss0eOPRUP7KWRkZDfqBPZp7mtbSni4K/g+93DEJy9
475NfWDiMpTMIo/LCCkKg850XaRfyEVkdlT+7S/QULyo25buT7vGFeUmRZV9/bmR
QkR4Wh8YIQyk62ZaJW5RCyZVSOtu/UfVu/C4n5dvUSDV5mJyfFpbyvFEGGfVLhLx
2kIzW7SHUsRwg5VoLumn8A6jZgHMS6kFZ3253zhGzmmcCKYU5cFSZ73A4+uyt6hR
kADzJ8p3K9LUdTdDWlje2KBBopXqsWk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:40:34 2025 by rpki-client