Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a6adb72-a446-3790-a487-5e0ec123047b.roa
File: 8a6adb72-a446-3790-a487-5e0ec123047b.roa (raw, json)
Hash identifier: DwKkYmK5HtWBGaR/5MIjzIhoZ/1Nfl7ZnvT3qYoo9uo=
Subject key identifier: 7D:53:8B:98:70:D8:7A:AC:5F:ED:FB:4D:1A:7F:6B:11:E0:98:15:20
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827B6EB63B59AEA80BA271470
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a6adb72-a446-3790-a487-5e0ec123047b.roa
Signing time: Tue 10 Dec 2024 01:31:58 +0000
ROA not before: Tue 10 Dec 2024 01:31:58 +0000
ROA not after: Mon 10 Mar 2025 00:31:58 +0000
asID: 13335
IP address blocks: 172.70.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:b6:eb:63:b5:9a:ea:80:ba:27:14:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:31:58 2024 GMT
Not After : Mar 10 00:31:58 2025 GMT
Subject: CN=d22a1647-5104-4582-853a-323ae60c2900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:20:dc:6a:b5:dd:4a:3b:4a:c6:3b:27:e6:b1:
62:5a:1a:d7:09:f0:38:8a:be:ee:d7:3d:4a:83:dc:
7f:63:8d:03:5c:e3:87:31:dc:ce:61:55:e6:a4:72:
ae:4c:b0:83:b0:07:fc:7d:67:5b:5c:cf:41:6d:b1:
bf:5f:08:f8:1b:33:f2:04:ad:4c:c1:22:23:1c:21:
f1:0d:d5:8c:b4:6c:02:8e:bf:a0:f0:98:5e:cb:d1:
b3:c7:38:1e:d6:de:c6:3a:10:4b:c9:39:0d:51:7c:
3a:fc:6f:a6:55:60:89:05:0a:e9:c3:11:ff:e3:39:
60:3a:85:77:40:29:58:de:37:9a:39:db:a6:aa:68:
f5:29:92:b1:0c:54:5e:14:00:ac:b3:01:1b:6d:71:
24:69:64:82:8c:94:16:2a:b6:cb:f5:e9:28:e3:61:
ea:4e:9e:0d:93:71:b7:36:6d:0f:09:b9:3e:ed:8a:
e5:db:56:45:5a:fc:e8:35:ac:39:72:3f:42:32:8b:
a6:6d:16:de:e2:d0:d3:8c:87:1a:b8:e7:c3:79:27:
9d:29:a4:b3:f1:ea:17:a0:79:8c:fa:5a:db:89:59:
ce:c6:3c:79:5f:7a:45:8b:a7:de:0a:a7:81:51:52:
4f:a2:2b:b6:9c:a5:b5:b5:33:78:88:bf:1c:1f:5f:
39:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:53:8B:98:70:D8:7A:AC:5F:ED:FB:4D:1A:7F:6B:11:E0:98:15:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a6adb72-a446-3790-a487-5e0ec123047b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:b3:1f:5b:a9:ac:a1:12:26:39:c2:5f:da:bd:21:f0:b5:56:
fd:de:56:c9:08:a3:41:7e:07:7e:98:f6:c5:38:0d:3e:3c:82:
df:5a:fa:a1:2b:30:48:e0:fe:4f:d5:ef:eb:72:d5:fc:d4:fa:
02:1e:2a:b1:95:9c:3e:20:37:9b:b2:c9:ed:c7:0c:98:0c:55:
e8:4c:8d:5c:4d:44:d3:99:6f:b7:f7:47:c6:69:a0:c2:6d:a2:
1a:5b:62:d9:47:de:4b:b8:68:8f:28:7c:e1:bd:64:2f:fd:62:
60:eb:11:7f:4c:a0:05:f4:53:7f:6d:f9:fd:93:1c:2d:33:c5:
4b:3e:f6:89:75:c0:34:95:56:73:d8:88:c5:43:31:a5:8b:a4:
b8:0a:72:5f:c0:36:6c:20:de:6a:c3:04:23:34:8a:39:48:97:
56:80:d7:ce:77:80:07:df:b7:3a:fa:0a:2b:52:23:35:93:ab:
ff:61:91:e3:cd:d8:18:98:a0:70:09:ac:7b:92:6b:a9:4a:bf:
17:1c:be:e6:56:9d:7d:66:08:c6:20:07:e5:10:46:6f:45:c0:
37:02:80:17:37:b3:31:75:bc:15:dd:63:aa:ec:46:a1:bb:8c:
82:bb:f9:5e:6c:f3:92:bd:4c:89:a8:82:87:56:58:62:b3:57:
b0:0c:b1:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgntutjtZrqgLonFHAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDAxMzE1OFoXDTI1MDMxMDAwMzE1OFowLzEtMCsGA1UEAxMk
ZDIyYTE2NDctNTEwNC00NTgyLTg1M2EtMzIzYWU2MGMyOTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiDcarXdSjtKxjsn5rFiWhrXCfA4ir7u1z1K
g9x/Y40DXOOHMdzOYVXmpHKuTLCDsAf8fWdbXM9BbbG/Xwj4GzPyBK1MwSIjHCHx
DdWMtGwCjr+g8Jhey9Gzxzge1t7GOhBLyTkNUXw6/G+mVWCJBQrpwxH/4zlgOoV3
QClY3jeaOdumqmj1KZKxDFReFACsswEbbXEkaWSCjJQWKrbL9eko42HqTp4Nk3G3
Nm0PCbk+7Yrl21ZFWvzoNaw5cj9CMoumbRbe4tDTjIcauOfDeSedKaSz8eoXoHmM
+lrbiVnOxjx5X3pFi6feCqeBUVJPoiu2nKW1tTN4iL8cH185RQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH1Ti5hw2HqsX+37TRp/axHgmBUgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGE2YWRiNzItYTQ0Ni0z
NzkwLWE0ODctNWUwZWMxMjMwNDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEY4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHezH1uprKESJjnCX9q9IfC1Vv3eVskIo0F+B36Y9sU4DT48gt9a+qEr
MEjg/k/V7+ty1fzU+gIeKrGVnD4gN5uyye3HDJgMVehMjVxNRNOZb7f3R8ZpoMJt
ohpbYtlH3ku4aI8ofOG9ZC/9YmDrEX9MoAX0U39t+f2THC0zxUs+9ol1wDSVVnPY
iMVDMaWLpLgKcl/ANmwg3mrDBCM0ijlIl1aA1853gAfftzr6CitSIzWTq/9hkePN
2BiYoHAJrHuSa6lKvxccvuZWnX1mCMYgB+UQRm9FwDcCgBc3szF1vBXdY6rsRqG7
jIK7+V5s85K9TImogodWWGKzV7AMsdY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:01:00 2025 by rpki-client