Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ff06541-3068-32ab-8810-f331d453858b.roa
File: 9ff06541-3068-32ab-8810-f331d453858b.roa (raw, json)
Hash identifier: 7XxHUwBSmnOd3aukI5CWFwLVNJ7KoZnyB/NY7bcTags=
Subject key identifier: C9:E6:F7:F7:90:F9:FD:DF:24:52:80:63:FD:D1:86:ED:45:F5:9D:12
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858483031D2B9A9CF0EB9039A5480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ff06541-3068-32ab-8810-f331d453858b.roa
Signing time: Fri 13 Dec 2024 02:26:05 +0000
ROA not before: Fri 13 Dec 2024 02:26:05 +0000
ROA not after: Thu 13 Mar 2025 01:26:05 +0000
asID: 13335
IP address blocks: 172.70.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:31:d2:b9:a9:cf:0e:b9:03:9a:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 02:26:05 2024 GMT
Not After : Mar 13 01:26:05 2025 GMT
Subject: CN=4b1046e3-f9c6-43ce-9a53-291187868cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:45:1c:d7:9b:72:2c:56:0a:22:63:a1:7d:
f6:b1:8b:87:02:4d:3f:19:db:4a:33:2f:90:41:5d:
2b:79:99:4b:82:8d:9a:57:d5:b5:7d:d3:19:1d:c9:
58:7f:76:07:b7:ef:ca:29:e2:c8:46:1c:79:a0:33:
3f:29:9c:d0:25:3d:7c:b1:af:52:41:43:c2:a7:aa:
db:f9:36:91:3b:69:ad:6c:5a:d7:3b:13:e0:93:8f:
58:13:27:b3:02:8b:23:78:4a:f4:7c:4d:ef:e8:4b:
c2:bc:16:4b:b5:52:b4:57:a9:b8:bb:b5:59:21:48:
ab:85:1b:02:3c:d4:12:76:f3:78:96:ea:3a:a9:bb:
b0:36:f6:0c:27:4b:b7:c0:92:92:2a:17:f0:7a:7b:
7e:f5:8d:89:e9:b7:f4:c1:a7:49:9d:76:c0:2b:18:
03:c1:88:ec:74:2b:e2:51:ed:6b:f7:22:95:cf:4b:
27:db:81:33:ff:17:6c:89:ea:78:b2:8c:e1:a0:53:
64:f8:c5:6b:b8:a2:1f:0f:ca:69:bf:90:cf:fd:86:
a4:37:c2:e2:c4:44:b5:17:e1:c7:49:f4:1b:49:d6:
e3:3c:57:41:c1:86:00:6f:63:eb:ec:fb:63:50:bb:
05:55:84:25:4a:81:24:f3:7b:d9:97:55:ae:a3:9d:
7f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E6:F7:F7:90:F9:FD:DF:24:52:80:63:FD:D1:86:ED:45:F5:9D:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ff06541-3068-32ab-8810-f331d453858b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:ef:82:d1:2a:cb:80:0d:28:9e:63:67:7c:ff:a2:a3:c0:76:
6c:65:d2:f1:f5:17:3b:5f:df:1f:98:02:6c:f7:e7:84:76:8b:
8a:0b:1d:5c:b0:f4:44:c5:49:f1:4c:9a:e3:a5:a9:35:5e:37:
7a:5b:2d:00:e6:62:a8:28:cf:b3:46:9f:81:56:da:6e:fc:c1:
bb:14:d2:eb:2d:d5:78:43:48:c7:f0:41:5d:cb:08:59:b8:43:
5e:54:30:92:1b:ba:64:35:3f:de:e7:28:09:00:aa:bd:0a:cc:
d5:29:df:37:49:f0:b6:2a:d4:96:9c:4a:87:16:68:c4:7c:1c:
50:fa:b9:ac:f0:cd:39:1f:fd:2a:df:92:4e:7a:30:c7:29:7d:
64:fa:f5:3b:05:5c:0f:f1:11:48:cc:08:e5:ec:a9:c2:9c:6b:
ed:6e:b3:1e:5c:99:54:eb:3d:78:3c:1c:00:05:41:b7:20:33:
4e:e5:89:4e:4f:77:1d:59:43:52:91:53:7b:f6:8e:95:83:0b:
65:5a:10:cd:6e:b9:09:bc:85:92:3e:39:6f:f6:9c:15:e3:7a:
98:49:0b:52:34:6c:52:30:c8:0d:e3:87:f0:1d:cb:23:95:c6:
03:79:43:0d:4e:05:a9:94:1f:64:2a:15:68:98:6d:2b:5e:a0:
12:f6:06:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgwMdK5qc8OuQOaVIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMzAyMjYwNVoXDTI1MDMxMzAxMjYwNVowLzEtMCsGA1UEAxMk
NGIxMDQ2ZTMtZjljNi00M2NlLTlhNTMtMjkxMTg3ODY4Y2JiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscNFHNebcixWCiJjoX32sYuHAk0/GdtKMy+Q
QV0reZlLgo2aV9W1fdMZHclYf3YHt+/KKeLIRhx5oDM/KZzQJT18sa9SQUPCp6rb
+TaRO2mtbFrXOxPgk49YEyezAosjeEr0fE3v6EvCvBZLtVK0V6m4u7VZIUirhRsC
PNQSdvN4luo6qbuwNvYMJ0u3wJKSKhfwent+9Y2J6bf0wadJnXbAKxgDwYjsdCvi
Ue1r9yKVz0sn24Ez/xdsiep4sozhoFNk+MVruKIfD8ppv5DP/YakN8LixES1F+HH
SfQbSdbjPFdBwYYAb2Pr7PtjULsFVYQlSoEk83vZl1Wuo51/MwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMnm9/eQ+f3fJFKAY/3Rhu1F9Z0SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWZmMDY1NDEtMzA2OC0z
MmFiLTg4MTAtZjMzMWQ0NTM4NThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK3vgtEqy4ANKJ5jZ3z/oqPAdmxl0vH1Fztf3x+YAmz354R2i4oLHVyw
9ETFSfFMmuOlqTVeN3pbLQDmYqgoz7NGn4FW2m78wbsU0ust1XhDSMfwQV3LCFm4
Q15UMJIbumQ1P97nKAkAqr0KzNUp3zdJ8LYq1JacSocWaMR8HFD6uazwzTkf/Srf
kk56MMcpfWT69TsFXA/xEUjMCOXsqcKca+1usx5cmVTrPXg8HAAFQbcgM07liU5P
dx1ZQ1KRU3v2jpWDC2VaEM1uuQm8hZI+OW/2nBXjephJC1I0bFIwyA3jh/AdyyOV
xgN5Qw1OBamUH2QqFWiYbSteoBL2BmQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:13:00 2025 by rpki-client