Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/83fd6f65-f94f-3ca8-974c-9742fa02f544.roa
File: 83fd6f65-f94f-3ca8-974c-9742fa02f544.roa (raw, json)
Hash identifier: gn9BrdTTSkbgOIvIwroW1sLcqvT47Tsh0A0CgLRDDXw=
Subject key identifier: 5E:8C:78:B8:BA:59:C1:AE:40:0E:4C:43:5B:77:CB:F9:B7:1F:5E:29
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848283FC0A2D76CDC6F31DF3A20
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/83fd6f65-f94f-3ca8-974c-9742fa02f544.roa
Signing time: Tue 10 Dec 2024 06:07:40 +0000
ROA not before: Tue 10 Dec 2024 06:07:40 +0000
ROA not after: Mon 10 Mar 2025 05:07:40 +0000
asID: 13335
IP address blocks: 172.68.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:3f:c0:a2:d7:6c:dc:6f:31:df:3a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 06:07:40 2024 GMT
Not After : Mar 10 05:07:40 2025 GMT
Subject: CN=30421274-9ae1-46fb-a802-6f05289ce4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:69:ba:f9:87:20:05:f9:c1:03:65:6d:f2:6e:
6e:29:30:99:61:49:1c:44:b9:c0:06:64:00:11:17:
5a:4b:22:2b:99:7b:a8:08:2d:93:02:05:bb:56:db:
60:73:84:96:43:c1:da:f5:1f:e8:5b:c6:12:c6:a2:
e2:ba:c3:82:41:77:e0:14:81:af:c7:ba:2e:64:57:
dc:6a:ed:4b:b2:88:fa:ea:7b:d6:61:d0:01:5e:d7:
ea:bb:06:3f:99:38:43:6a:82:d8:ef:52:54:22:3b:
7f:2b:1f:ed:e7:af:c3:2c:ba:fe:95:03:6f:bd:ec:
07:a3:b7:42:9e:52:32:26:29:1a:46:19:53:35:8f:
40:d1:6f:21:0a:60:35:3a:5e:50:9a:f7:a7:42:a9:
b2:b0:ca:e1:ed:cc:19:62:4c:ed:ee:1a:c7:5f:72:
bf:30:a8:e7:cd:5e:fd:69:dd:4b:36:d1:58:a1:0c:
44:ae:64:e8:c6:5c:b9:e9:11:12:a8:ba:14:f0:11:
be:34:97:e7:36:f0:05:d3:b1:23:1a:8f:33:bd:cf:
f8:17:15:46:aa:00:75:e5:43:4a:6b:a7:0c:7d:fb:
55:71:5d:84:85:b9:d0:08:1a:f4:cb:c7:e2:65:55:
b8:9c:47:fd:d5:9b:3e:5b:7f:7c:34:3a:b9:b3:f0:
2f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8C:78:B8:BA:59:C1:AE:40:0E:4C:43:5B:77:CB:F9:B7:1F:5E:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/83fd6f65-f94f-3ca8-974c-9742fa02f544.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:4a:e4:e0:10:3b:d4:8a:d1:3e:8b:e8:61:8a:6c:a9:cd:ce:
bc:b5:35:23:2e:75:95:2c:5c:7e:5b:b3:f1:ad:df:bc:b5:aa:
27:ae:72:51:53:f0:42:ee:5b:b5:6d:d7:8b:a9:01:ba:e5:6b:
4f:7b:a0:2a:75:f9:7c:e1:0b:b4:10:b0:87:77:9d:54:1c:45:
a5:bc:f8:79:1e:f1:8d:31:2f:07:f9:b2:9a:e4:e2:66:0e:de:
d6:da:8d:9a:fc:30:a1:7c:88:4e:04:4d:e2:bb:ad:b8:a9:db:
43:56:96:08:d5:80:9a:43:21:c6:7f:c5:61:4f:5c:28:5a:3a:
26:95:a0:0f:99:5b:4e:78:06:9c:73:26:c1:05:f8:dc:c7:56:
ca:78:79:15:24:d6:ba:4f:b6:9d:01:f8:b1:8d:0c:f6:ff:62:
cc:79:c6:64:95:1c:df:68:30:85:39:de:5a:f2:3e:b9:8d:ec:
97:09:ce:f0:1c:b9:eb:5f:64:f4:1b:89:a0:f3:83:8b:5a:05:
55:e4:7e:6a:71:13:aa:06:48:ed:aa:bc:c7:21:c4:bc:f3:da:
ae:d3:1c:77:5a:0b:b3:ee:c8:0a:8f:b9:27:e0:b1:88:be:63:
60:75:ba:fa:51:12:73:2b:be:da:cf:4d:7c:28:96:b4:08:91:
d7:40:b2:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgoP8Ci12zcbzHfOiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDA2MDc0MFoXDTI1MDMxMDA1MDc0MFowLzEtMCsGA1UEAxMk
MzA0MjEyNzQtOWFlMS00NmZiLWE4MDItNmYwNTI4OWNlNGI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWm6+YcgBfnBA2Vt8m5uKTCZYUkcRLnABmQA
ERdaSyIrmXuoCC2TAgW7Vttgc4SWQ8Ha9R/oW8YSxqLiusOCQXfgFIGvx7ouZFfc
au1Lsoj66nvWYdABXtfquwY/mThDaoLY71JUIjt/Kx/t56/DLLr+lQNvvewHo7dC
nlIyJikaRhlTNY9A0W8hCmA1Ol5QmvenQqmysMrh7cwZYkzt7hrHX3K/MKjnzV79
ad1LNtFYoQxErmToxly56RESqLoU8BG+NJfnNvAF07EjGo8zvc/4FxVGqgB15UNK
a6cMfftVcV2EhbnQCBr0y8fiZVW4nEf91Zs+W398NDq5s/Av2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF6MeLi6WcGuQA5MQ1t3y/m3H14pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODNmZDZmNjUtZjk0Zi0z
Y2E4LTk3NGMtOTc0MmZhMDJmNTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD5K5OAQO9SK0T6L6GGKbKnNzry1NSMudZUsXH5bs/Gt37y1qieuclFT
8ELuW7Vt14upAbrla097oCp1+XzhC7QQsId3nVQcRaW8+Hke8Y0xLwf5sprk4mYO
3tbajZr8MKF8iE4ETeK7rbip20NWlgjVgJpDIcZ/xWFPXChaOiaVoA+ZW054Bpxz
JsEF+NzHVsp4eRUk1rpPtp0B+LGNDPb/Ysx5xmSVHN9oMIU53lryPrmN7JcJzvAc
uetfZPQbiaDzg4taBVXkfmpxE6oGSO2qvMchxLzz2q7THHdaC7PuyAqPuSfgsYi+
Y2B1uvpREnMrvtrPTXwolrQIkddAssE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:45:50 2025 by rpki-client