Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49e0559d-79b6-3fcf-8b22-16a4a1e8270a.roa
File: 49e0559d-79b6-3fcf-8b22-16a4a1e8270a.roa (raw, json)
Hash identifier: OLlsgK2BfWyjzi0pYrOykvpF7ElY52DEtWWrZPx5UsU=
Subject key identifier: AE:0E:F1:4F:D7:A9:6A:8A:20:3A:AA:9D:EB:26:CC:E6:23:DD:40:64
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328583C56BFF49A431C452556815B40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49e0559d-79b6-3fcf-8b22-16a4a1e8270a.roa
Signing time: Wed 22 Dec 2021 05:00:00 +0000
ROA not before: Wed 22 Dec 2021 05:00:00 +0000
ROA not after: Sun 23 Jan 2028 05:00:00 +0000
asID: 13335
IP address blocks: 172.70.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:56:bf:f4:9a:43:1c:45:25:56:81:5b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 22 05:00:00 2021 GMT
Not After : Jan 23 05:00:00 2028 GMT
Subject: CN=36262a30-ef42-431e-9f62-e8a35921be0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bf:77:1d:88:63:2c:cc:95:fd:d1:ea:e7:69:
72:5a:b6:98:2d:55:1f:5e:75:d8:b4:fd:14:91:aa:
9a:b8:86:ec:d8:03:ec:55:3c:41:37:ae:56:72:3e:
06:32:cd:99:d1:ab:8e:17:f8:9d:71:5f:dc:dd:57:
fd:c0:21:36:a0:d1:a4:fb:2b:28:85:19:80:a5:60:
01:af:ba:18:1d:73:1e:a0:ec:64:13:b6:c6:7c:ce:
16:69:4b:aa:2b:e1:b7:d4:70:51:0e:a6:0d:55:b2:
d7:aa:55:70:14:a7:92:aa:48:a1:5e:44:1d:4e:b4:
a5:20:72:5b:cb:cf:09:90:3e:69:dc:ea:07:6d:bd:
6e:0c:06:f5:6f:6a:6f:d3:1d:6d:e2:d8:05:2d:2e:
b9:77:1d:26:3d:cf:56:ed:6d:22:26:5c:5c:34:96:
96:99:c9:eb:c8:fd:33:44:8b:48:1d:a7:7c:bb:e1:
a6:33:4d:35:25:43:0c:7a:94:a8:4f:ca:c1:f9:4c:
7d:df:9f:07:d7:94:f3:65:36:22:8e:c5:b6:eb:83:
cf:2b:35:74:da:e0:a3:7a:15:7b:0d:18:c3:c5:90:
be:f4:e4:98:83:6c:82:c8:be:fc:35:a4:30:77:93:
d8:55:44:ed:d6:0e:62:fa:9d:02:75:18:4b:31:d9:
44:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0E:F1:4F:D7:A9:6A:8A:20:3A:AA:9D:EB:26:CC:E6:23:DD:40:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49e0559d-79b6-3fcf-8b22-16a4a1e8270a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:87:06:90:5d:3d:60:a0:6d:26:49:5d:c3:96:42:e1:6f:56:
64:3a:38:26:ba:3f:cc:0d:c9:42:93:b8:0b:1e:3c:9b:f9:c0:
46:d3:dd:74:91:73:46:e9:81:f2:71:54:71:a0:cb:d3:b2:90:
13:80:b6:9c:96:b5:61:e5:b2:e6:df:60:a3:db:80:e1:ad:5c:
63:4d:59:b7:13:97:2b:ea:28:34:63:0d:43:46:4f:09:33:6d:
4d:01:5d:56:72:06:57:bb:7c:82:a8:3d:4c:cb:ae:f1:98:86:
4a:ee:dd:66:6f:b1:70:28:79:b3:ce:2f:e3:c9:d9:9c:e2:5a:
fe:75:6c:0f:ec:6d:8f:7d:38:7c:d3:74:5d:41:f2:51:70:c4:
4a:4d:dc:e8:5a:8f:21:91:30:bd:33:64:7f:e2:46:cb:9d:6c:
56:f7:d6:89:83:c7:b3:ce:f0:82:61:59:4b:cd:82:ed:ce:37:
a1:a9:9f:19:15:df:a7:2f:45:46:6b:26:d6:83:75:cb:c9:8a:
9b:f1:54:31:40:66:de:dd:79:b1:1c:c3:1c:03:77:f9:17:67:
c4:05:c5:bb:23:dc:bf:0b:c2:15:fb:b3:05:14:68:de:4e:f9:
45:82:8c:1b:51:71:d3:3f:52:2b:28:ce:8d:8d:66:1e:99:97:
f0:dc:52:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDxWv/SaQxxFJVaBW0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTIxMTIyMjA1MDAwMFoXDTI4MDEyMzA1MDAwMFowLzEtMCsGA1UEAxMk
MzYyNjJhMzAtZWY0Mi00MzFlLTlmNjItZThhMzU5MjFiZTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor93HYhjLMyV/dHq52lyWraYLVUfXnXYtP0U
kaqauIbs2APsVTxBN65Wcj4GMs2Z0auOF/idcV/c3Vf9wCE2oNGk+ysohRmApWAB
r7oYHXMeoOxkE7bGfM4WaUuqK+G31HBRDqYNVbLXqlVwFKeSqkihXkQdTrSlIHJb
y88JkD5p3OoHbb1uDAb1b2pv0x1t4tgFLS65dx0mPc9W7W0iJlxcNJaWmcnryP0z
RItIHad8u+GmM001JUMMepSoT8rB+Ux9358H15TzZTYijsW264PPKzV02uCjehV7
DRjDxZC+9OSYg2yCyL78NaQwd5PYVUTt1g5i+p0CdRhLMdlExwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK4O8U/XqWqKIDqqnesmzOYj3UBkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDllMDU1OWQtNzliNi0z
ZmNmLThiMjItMTZhNGExZTgyNzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALeHBpBdPWCgbSZJXcOWQuFvVmQ6OCa6P8wNyUKTuAsePJv5wEbT3XSR
c0bpgfJxVHGgy9OykBOAtpyWtWHlsubfYKPbgOGtXGNNWbcTlyvqKDRjDUNGTwkz
bU0BXVZyBle7fIKoPUzLrvGYhkru3WZvsXAoebPOL+PJ2ZziWv51bA/sbY99OHzT
dF1B8lFwxEpN3OhajyGRML0zZH/iRsudbFb31omDx7PO8IJhWUvNgu3ON6GpnxkV
36cvRUZrJtaDdcvJipvxVDFAZt7debEcwxwDd/kXZ8QFxbsj3L8LwhX7swUUaN5O
+UWCjBtRcdM/Uisozo2NZh6Zl/DcUug=
-----END CERTIFICATE-----
Generated at Sun May 11 22:19:08 2025 by rpki-client