Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5ddf7faa-8799-353b-8130-5ef3e25525ca.roa
File: 5ddf7faa-8799-353b-8130-5ef3e25525ca.roa (raw, json)
Hash identifier: p2YimOB9/T7cDmQXiK8kkVVluS/Ql/PEf0x7CUWsGqw=
Subject key identifier: FC:12:C5:76:D8:49:12:DC:00:08:0F:5D:54:F6:1D:9D:57:E5:04:3B
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A8DEAD40C5F56F31F862900
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5ddf7faa-8799-353b-8130-5ef3e25525ca.roa
Signing time: Wed 11 Dec 2024 01:56:47 +0000
ROA not before: Wed 11 Dec 2024 01:56:47 +0000
ROA not after: Tue 11 Mar 2025 00:56:47 +0000
asID: 13335
IP address blocks: 172.68.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8d:ea:d4:0c:5f:56:f3:1f:86:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 01:56:47 2024 GMT
Not After : Mar 11 00:56:47 2025 GMT
Subject: CN=08d47608-6c96-4de6-a57b-efedceb02442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:40:3c:7f:9e:15:50:b6:4b:4e:bc:6f:a1:8d:
26:15:24:b3:7a:d7:3b:b7:87:41:0d:a5:98:6f:4b:
1c:0c:45:d3:43:47:29:b3:9b:14:e8:10:e4:6d:5b:
0c:f2:2b:b3:bd:6e:2a:27:00:fb:f3:3b:22:1f:43:
25:ac:e2:5a:2a:88:7f:6f:8c:2a:1b:48:cb:ad:fe:
36:29:6a:09:52:fd:68:01:06:02:b2:c0:fa:42:27:
d4:de:a4:a0:00:cf:99:fe:d2:bf:07:15:fc:3b:e9:
7e:da:ea:56:3d:f0:fc:4f:af:44:5f:0f:15:be:88:
78:b1:b1:75:d5:80:ce:8a:0b:fc:ca:70:4c:1e:c7:
c1:7a:3f:77:28:4a:46:40:ea:43:38:7a:05:fb:02:
68:e8:53:58:f6:38:c7:ed:92:f2:17:52:0a:b0:dc:
57:2c:77:2a:19:bc:ea:0b:1f:0e:bb:20:7e:47:09:
a1:7b:46:26:d2:70:a5:ce:d7:38:49:2d:3f:e9:c3:
f6:8f:3a:39:5c:7a:19:8a:0d:e1:31:d1:62:e2:11:
84:65:31:1b:07:b1:ac:21:71:25:d2:bd:61:2d:42:
58:a7:b5:df:cd:6a:59:9e:d0:94:96:ce:4b:a1:32:
38:ad:03:fa:59:31:17:30:d2:a5:d1:e4:0d:b6:dc:
06:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:12:C5:76:D8:49:12:DC:00:08:0F:5D:54:F6:1D:9D:57:E5:04:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5ddf7faa-8799-353b-8130-5ef3e25525ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.155.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:3f:7f:ce:83:40:6c:90:88:a8:e8:7c:8d:0b:9d:d8:54:6c:
19:25:e8:cd:a8:6c:97:05:72:d2:cb:af:e9:3f:84:38:1e:b7:
6f:f4:a5:bb:df:10:33:9c:29:b8:5f:16:d4:bf:4b:ce:67:d2:
92:7f:30:7d:b8:36:0c:64:bc:34:bb:68:ab:8a:91:2e:00:71:
3a:96:1b:91:76:c7:37:d6:06:34:46:b7:9f:39:20:00:ca:6b:
c9:b8:29:b7:d4:57:36:76:7c:fa:d3:5b:4b:96:a1:33:61:b9:
7d:2a:83:7c:03:3a:98:64:da:b8:59:e8:cd:c4:3a:98:48:e1:
ee:cb:62:03:81:da:57:57:b9:16:e0:a5:f7:4a:d6:d2:f9:1c:
6a:2f:cc:6f:03:25:ca:5a:13:91:f3:05:2d:48:2f:2e:72:50:
bb:6c:97:ad:de:23:c0:ba:4c:20:67:5e:16:06:65:fe:02:9c:
3d:83:ff:0d:c7:bf:9f:7c:6e:02:86:98:a0:7e:04:62:5c:19:
dd:3e:c1:0f:5d:df:b0:61:7b:c7:a9:43:6b:c9:1d:19:96:74:
6f:c4:4a:ec:92:37:51:b3:7a:65:86:0f:57:3d:ef:d1:7c:ce:
53:3e:3b:de:cd:cd:b3:eb:14:c2:ce:f8:9e:23:02:59:62:dd:
8b:45:82:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgqjerUDF9W8x+GKQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMTAxNTY0N1oXDTI1MDMxMTAwNTY0N1owLzEtMCsGA1UEAxMk
MDhkNDc2MDgtNmM5Ni00ZGU2LWE1N2ItZWZlZGNlYjAyNDQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUA8f54VULZLTrxvoY0mFSSzetc7t4dBDaWY
b0scDEXTQ0cps5sU6BDkbVsM8iuzvW4qJwD78zsiH0MlrOJaKoh/b4wqG0jLrf42
KWoJUv1oAQYCssD6QifU3qSgAM+Z/tK/BxX8O+l+2upWPfD8T69EXw8Vvoh4sbF1
1YDOigv8ynBMHsfBej93KEpGQOpDOHoF+wJo6FNY9jjH7ZLyF1IKsNxXLHcqGbzq
Cx8OuyB+Rwmhe0Ym0nClztc4SS0/6cP2jzo5XHoZig3hMdFi4hGEZTEbB7GsIXEl
0r1hLUJYp7XfzWpZntCUls5LoTI4rQP6WTEXMNKl0eQNttwGvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPwSxXbYSRLcAAgPXVT2HZ1X5QQ7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWRkZjdmYWEtODc5OS0z
NTNiLTgxMzAtNWVmM2UyNTUyNWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADY/f86DQGyQiKjofI0LndhUbBkl6M2obJcFctLLr+k/hDget2/0pbvf
EDOcKbhfFtS/S85n0pJ/MH24NgxkvDS7aKuKkS4AcTqWG5F2xzfWBjRGt585IADK
a8m4KbfUVzZ2fPrTW0uWoTNhuX0qg3wDOphk2rhZ6M3EOphI4e7LYgOB2ldXuRbg
pfdK1tL5HGovzG8DJcpaE5HzBS1ILy5yULtsl63eI8C6TCBnXhYGZf4CnD2D/w3H
v598bgKGmKB+BGJcGd0+wQ9d37Bhe8epQ2vJHRmWdG/ESuySN1GzemWGD1c979F8
zlM+O97NzbPrFMLO+J4jAlli3YtFgiA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:41:00 2025 by rpki-client