Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a88128f7-729a-3527-a66e-0f8deb6e69f8.roa
File: a88128f7-729a-3527-a66e-0f8deb6e69f8.roa (raw, json)
Hash identifier: SkUyeslYQrhZ39bpu6Tc9WtS9albqzQr/wQtUTBCkzo=
Subject key identifier: D5:BE:E8:38:B5:4F:C3:CF:79:48:0C:17:1C:09:FB:D0:2E:DF:77:D9
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858483031B838239254FA4A00E558
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a88128f7-729a-3527-a66e-0f8deb6e69f8.roa
Signing time: Fri 13 Dec 2024 02:25:52 +0000
ROA not before: Fri 13 Dec 2024 02:25:52 +0000
ROA not after: Thu 13 Mar 2025 01:25:52 +0000
asID: 13335
IP address blocks: 172.70.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:31:b8:38:23:92:54:fa:4a:00:e5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 02:25:52 2024 GMT
Not After : Mar 13 01:25:52 2025 GMT
Subject: CN=a888f908-8d5f-47c0-884a-428f5dff57be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b2:6d:66:70:1c:bf:ad:46:61:e3:6a:9c:83:
c8:a0:09:93:95:bf:5c:1b:4f:50:1d:85:f9:86:68:
1d:2f:83:3d:45:78:ab:d9:1c:ee:6f:17:5f:3a:74:
2e:dc:53:23:f4:eb:3f:d1:87:70:e4:27:91:6c:94:
78:bb:11:61:e5:df:71:78:4d:eb:db:43:30:19:4a:
90:90:bf:5a:de:75:04:8d:6a:a0:8f:06:43:88:bc:
93:a8:19:f9:b2:d3:83:26:1f:9d:17:73:41:62:de:
26:24:78:98:44:de:95:84:5b:fa:71:e0:2c:25:67:
e0:5e:04:78:e5:75:f3:08:7e:e4:c7:6a:59:0b:08:
2c:18:26:8e:07:f5:dc:3c:4c:3c:d7:7f:f0:e2:48:
03:d7:f6:a6:08:24:c8:75:18:ad:fa:ea:0d:5b:bc:
f9:01:4a:a8:64:40:1e:a0:3e:2b:23:3f:64:c3:c3:
b9:f5:35:ba:4d:52:30:fc:83:56:12:10:64:36:f0:
ce:d9:cc:ef:36:35:74:de:8e:62:20:54:dc:bc:b5:
a3:d1:76:77:1e:a6:96:6e:6b:5d:5f:2b:d1:fe:66:
c1:e6:c4:23:a9:79:68:26:c0:06:a3:d4:b8:87:f0:
f8:7f:1e:4f:fb:35:b6:32:5b:60:04:c6:c0:2c:72:
65:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BE:E8:38:B5:4F:C3:CF:79:48:0C:17:1C:09:FB:D0:2E:DF:77:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a88128f7-729a-3527-a66e-0f8deb6e69f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:29:01:bc:e6:85:b2:77:14:4f:f0:2b:b3:cd:49:00:13:c5:
a2:e0:56:36:0e:6f:7b:46:67:b5:0b:e1:3c:a4:4d:31:f6:e6:
45:14:1e:e1:e8:20:12:be:8b:87:7e:04:e7:ea:d9:f8:5c:b5:
af:db:1a:83:95:29:de:ee:52:3f:fe:36:ed:f5:2e:e3:27:e6:
95:9f:b0:f0:12:59:21:2d:d5:13:99:48:7c:e0:7c:f5:1e:35:
b2:99:d6:ac:e2:de:09:b2:ba:05:9b:3c:bd:b5:29:f4:02:96:
65:09:07:69:83:8a:66:bc:46:7b:c0:e6:4b:2a:fa:01:fe:e9:
28:be:1b:89:fa:2b:6d:a9:bf:d2:de:0e:21:20:07:0b:58:09:
84:46:3c:e0:3a:de:a9:c4:43:7d:bf:6f:bc:a6:10:0c:b9:6e:
7c:65:b3:bb:8f:5d:9b:7c:7b:83:cc:93:f2:ad:7e:b8:db:cd:
16:ed:19:fb:39:99:e3:a9:c4:50:22:fa:a7:6c:5a:c5:67:7e:
4f:99:99:31:24:21:63:b2:19:3f:64:d8:61:6b:0f:4d:0a:dd:
49:c5:86:70:a0:68:27:be:3f:75:0c:bf:11:85:93:7d:0d:2d:
d2:7a:0b:57:83:f9:9e:9d:94:9c:3b:b0:bc:5d:d5:bf:eb:8b:
23:07:79:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgwMbg4I5JU+koA5VgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMzAyMjU1MloXDTI1MDMxMzAxMjU1MlowLzEtMCsGA1UEAxMk
YTg4OGY5MDgtOGQ1Zi00N2MwLTg4NGEtNDI4ZjVkZmY1N2JlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprJtZnAcv61GYeNqnIPIoAmTlb9cG09QHYX5
hmgdL4M9RXir2RzubxdfOnQu3FMj9Os/0Ydw5CeRbJR4uxFh5d9xeE3r20MwGUqQ
kL9a3nUEjWqgjwZDiLyTqBn5stODJh+dF3NBYt4mJHiYRN6VhFv6ceAsJWfgXgR4
5XXzCH7kx2pZCwgsGCaOB/XcPEw813/w4kgD1/amCCTIdRit+uoNW7z5AUqoZEAe
oD4rIz9kw8O59TW6TVIw/INWEhBkNvDO2czvNjV03o5iIFTcvLWj0XZ3HqaWbmtd
XyvR/mbB5sQjqXloJsAGo9S4h/D4fx5P+zW2MltgBMbALHJlYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNW+6Di1T8PPeUgMFxwJ+9Au33fZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTg4MTI4ZjctNzI5YS0z
NTI3LWE2NmUtMGY4ZGViNmU2OWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFIpAbzmhbJ3FE/wK7PNSQATxaLgVjYOb3tGZ7UL4TykTTH25kUUHuHo
IBK+i4d+BOfq2fhcta/bGoOVKd7uUj/+Nu31LuMn5pWfsPASWSEt1ROZSHzgfPUe
NbKZ1qzi3gmyugWbPL21KfQClmUJB2mDima8RnvA5ksq+gH+6Si+G4n6K22pv9Le
DiEgBwtYCYRGPOA63qnEQ32/b7ymEAy5bnxls7uPXZt8e4PMk/KtfrjbzRbtGfs5
meOpxFAi+qdsWsVnfk+ZmTEkIWOyGT9k2GFrD00K3UnFhnCgaCe+P3UMvxGFk30N
LdJ6C1eD+Z6dlJw7sLxd1b/riyMHeSE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:07 2025 by rpki-client