Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ace8792c-7d07-3492-9e33-dc0893f21678.roa
File: ace8792c-7d07-3492-9e33-dc0893f21678.roa (raw, json)
Hash identifier: LJ+LiV2pIz2g8aFOGIKGxgjGnVYvas2/rkdPpj9spIQ=
Subject key identifier: 12:24:84:D6:5D:DD:E6:35:84:59:81:33:37:85:5D:15:1B:56:F3:3D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A9BCAFC669BD837D31BE500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ace8792c-7d07-3492-9e33-dc0893f21678.roa
Signing time: Wed 11 Dec 2024 02:24:44 +0000
ROA not before: Wed 11 Dec 2024 02:24:44 +0000
ROA not after: Tue 11 Mar 2025 01:24:44 +0000
asID: 13335
IP address blocks: 172.69.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:9b:ca:fc:66:9b:d8:37:d3:1b:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 02:24:44 2024 GMT
Not After : Mar 11 01:24:44 2025 GMT
Subject: CN=4a999957-b62c-458d-9d8c-0cb3fc1f72d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:99:2e:35:1f:f5:a7:99:9a:04:a5:c6:bb:
6f:ed:78:45:ad:0d:c9:56:4c:96:f9:10:c2:94:e7:
29:bc:ca:fe:30:72:3a:f3:ae:ec:91:1e:32:5d:9a:
8c:f0:c4:cb:71:55:7b:ae:41:00:d9:b4:38:41:98:
45:59:b9:3b:32:48:98:3a:f2:ed:21:e4:be:86:ff:
ed:d3:af:40:a5:a2:ac:11:34:20:f9:dd:7a:5f:c8:
d0:84:4b:0b:da:6a:e8:25:8a:87:29:52:b5:a8:20:
30:47:b6:42:43:51:61:82:ac:bc:7a:0d:b7:31:c4:
5a:41:17:a6:71:64:7c:ff:b8:0d:c3:10:9b:68:ec:
58:d9:ae:62:a7:e9:96:aa:f7:7d:4f:34:1a:74:8a:
05:38:a3:51:9a:17:04:aa:ab:75:af:da:a4:36:b4:
ab:83:7f:ae:55:c9:08:a9:15:a3:e5:db:4a:30:ae:
48:41:53:0f:d1:a0:56:45:d4:dd:65:eb:10:a0:0f:
fa:e6:f9:42:60:78:f0:eb:07:05:4f:dc:d7:5d:34:
3b:d3:dc:2a:87:32:30:34:32:fd:9b:63:20:18:ff:
47:08:71:05:4f:87:79:07:09:5b:6d:7a:57:25:03:
3d:0d:81:74:93:97:31:54:ca:d2:5f:41:36:5f:07:
2c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:24:84:D6:5D:DD:E6:35:84:59:81:33:37:85:5D:15:1B:56:F3:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ace8792c-7d07-3492-9e33-dc0893f21678.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:a5:14:6f:11:a9:45:83:74:c6:4a:c3:fa:d3:d9:83:90:67:
57:02:63:26:79:b5:94:20:03:7d:08:9c:3c:9d:71:bd:a2:5f:
2a:7e:7a:0a:f8:de:77:de:56:91:d4:c0:a4:31:df:b6:a8:58:
41:41:44:a6:9f:2f:3d:a9:ca:79:5d:42:e6:50:fd:81:b9:e4:
6e:24:ac:00:3c:c6:09:9c:6d:23:70:7b:c2:91:9c:7c:d7:74:
6d:af:07:56:33:a3:24:b6:6e:17:1c:ed:31:92:a0:4c:16:bc:
50:ec:28:a5:60:31:f5:07:94:a1:df:be:9b:80:cb:6f:7b:29:
d5:06:b7:eb:6f:7a:3b:b9:11:ab:d0:04:84:09:e0:a5:98:d2:
d7:69:13:5b:b0:37:01:6f:e4:06:26:11:9e:ca:dc:15:17:39:
48:ff:a7:18:a8:83:4f:cc:14:ef:ec:96:33:bb:b1:fb:ed:d3:
8f:cd:83:f3:4c:69:a9:f9:55:8c:91:08:1d:18:65:ce:3b:39:
57:20:72:35:d1:29:e0:c6:4e:da:0d:0a:d8:7b:2a:4e:d4:88:
d8:1e:a7:60:2d:5a:2e:7e:29:4d:9c:46:9e:5f:33:9a:d3:ce:
47:a3:21:c3:de:71:4a:74:e7:c5:7a:b9:49:1c:4d:f8:8c:fc:
7b:c5:40:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgqm8r8ZpvYN9Mb5QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMTAyMjQ0NFoXDTI1MDMxMTAxMjQ0NFowLzEtMCsGA1UEAxMk
NGE5OTk5NTctYjYyYy00NThkLTlkOGMtMGNiM2ZjMWY3MmQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZyZLjUf9aeZmgSlxrtv7XhFrQ3JVkyW+RDC
lOcpvMr+MHI6867skR4yXZqM8MTLcVV7rkEA2bQ4QZhFWbk7MkiYOvLtIeS+hv/t
069ApaKsETQg+d16X8jQhEsL2mroJYqHKVK1qCAwR7ZCQ1Fhgqy8eg23McRaQRem
cWR8/7gNwxCbaOxY2a5ip+mWqvd9TzQadIoFOKNRmhcEqqt1r9qkNrSrg3+uVckI
qRWj5dtKMK5IQVMP0aBWRdTdZesQoA/65vlCYHjw6wcFT9zXXTQ709wqhzIwNDL9
m2MgGP9HCHEFT4d5BwlbbXpXJQM9DYF0k5cxVMrSX0E2XwcspQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBIkhNZd3eY1hFmBMzeFXRUbVvM9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWNlODc5MmMtN2QwNy0z
NDkyLTllMzMtZGMwODkzZjIxNjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGqlFG8RqUWDdMZKw/rT2YOQZ1cCYyZ5tZQgA30InDydcb2iXyp+egr4
3nfeVpHUwKQx37aoWEFBRKafLz2pynldQuZQ/YG55G4krAA8xgmcbSNwe8KRnHzX
dG2vB1YzoyS2bhcc7TGSoEwWvFDsKKVgMfUHlKHfvpuAy297KdUGt+tveju5EavQ
BIQJ4KWY0tdpE1uwNwFv5AYmEZ7K3BUXOUj/pxiog0/MFO/sljO7sfvt04/Ng/NM
aan5VYyRCB0YZc47OVcgcjXRKeDGTtoNCth7Kk7UiNgep2AtWi5+KU2cRp5fM5rT
zkejIcPecUp058V6uUkcTfiM/HvFQBE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:10:56 2025 by rpki-client