Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afd5e380-364d-30d5-94fe-2b209d5e05e1.roa
File: afd5e380-364d-30d5-94fe-2b209d5e05e1.roa (raw, json)
Hash identifier: oJVTWlJm02M87uLAZzyDyMg3p6O4AK3V5CbMnH9REkM=
Subject key identifier: F7:0E:A4:55:AD:C8:3C:15:CA:98:6B:54:7E:46:2C:FA:F9:DE:21:FB
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482820AE9467904375F7AE7680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afd5e380-364d-30d5-94fe-2b209d5e05e1.roa
Signing time: Tue 10 Dec 2024 05:05:04 +0000
ROA not before: Tue 10 Dec 2024 05:05:04 +0000
ROA not after: Mon 10 Mar 2025 04:05:04 +0000
asID: 13335
IP address blocks: 172.67.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:20:ae:94:67:90:43:75:f7:ae:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 05:05:04 2024 GMT
Not After : Mar 10 04:05:04 2025 GMT
Subject: CN=32a0f826-d471-4fc0-8e68-029ff46e7070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:36:8b:29:39:34:ab:ba:2e:66:19:b9:5d:
0a:3f:b2:57:18:33:32:62:00:96:03:06:af:87:1a:
34:1a:c2:60:58:f1:16:de:32:e9:6e:e7:41:24:c0:
04:fa:ce:f3:11:19:d0:dd:f6:72:e0:ee:5c:95:80:
75:bb:44:5d:0d:76:99:79:04:5f:59:46:03:a9:88:
c0:ca:8f:02:6e:5e:6e:01:82:0a:a9:0a:09:0a:da:
54:51:ff:3c:e2:b7:12:50:f3:f5:74:3e:64:15:61:
b6:13:36:22:9c:42:1b:86:29:0a:0f:66:12:68:2f:
16:0d:6f:ef:83:2a:0d:f4:2a:82:a9:c0:8b:95:0a:
1f:21:fd:82:22:4b:d9:9c:2b:fc:f2:ad:da:c7:4f:
1d:47:ef:67:8d:94:d4:cd:a0:86:40:d2:b4:d2:41:
77:a3:24:56:d5:74:28:d7:73:75:62:be:a4:ef:4f:
ee:7d:87:aa:71:c4:ee:aa:8e:4b:74:e6:87:3b:a3:
bc:33:0b:e2:9f:e2:14:c3:f2:ef:bb:06:35:32:9a:
1d:e7:dd:81:cc:c9:0a:12:36:3b:f4:81:59:b1:ec:
b3:4e:38:25:54:fa:e1:e8:07:8c:bb:c5:cc:df:cc:
31:0f:75:0f:a9:2c:b5:a1:70:07:2e:41:b4:53:0a:
64:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0E:A4:55:AD:C8:3C:15:CA:98:6B:54:7E:46:2C:FA:F9:DE:21:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afd5e380-364d-30d5-94fe-2b209d5e05e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.67.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:9b:d9:9c:18:1f:f8:29:65:d9:ea:86:68:b2:e6:01:d9:c2:
84:38:1c:8f:4f:8e:3a:c0:b6:51:cb:0a:52:f2:bb:99:12:06:
9b:6b:42:b9:e5:63:77:90:d4:c9:f9:c3:5d:23:8d:ea:53:69:
ff:8c:6c:b5:27:14:a0:78:7f:c9:d0:f9:c2:0d:ee:1b:97:65:
23:5d:8d:c7:9f:85:50:53:87:14:07:4c:ee:f0:41:98:f0:9d:
82:18:fc:bb:3f:9b:40:e5:27:53:b8:53:40:d5:06:21:84:bd:
86:3a:7d:a4:84:a9:3d:28:fc:78:65:78:4e:5c:fb:96:ec:c8:
2e:d7:e8:d2:a1:65:1b:1a:5c:cb:22:ee:92:bf:82:02:7a:29:
39:a7:9c:17:06:3e:00:f0:af:d3:6c:ef:ce:f0:d3:62:0f:5b:
58:9d:04:b9:d8:2b:08:32:a4:bb:f7:a8:eb:40:24:95:d0:d3:
36:dc:1e:ae:3c:cf:22:0b:26:26:6d:bd:bb:39:e1:b0:fa:0f:
48:eb:75:77:48:4f:3f:eb:13:19:fc:c7:ef:0b:4b:7c:b4:8d:
f8:7c:6b:d2:f9:bb:d8:47:ab:57:9e:b6:ae:d4:ca:b4:05:7a:
a0:d1:d6:6b:03:77:00:89:be:71:b1:c4:45:21:a6:86:88:ae:
02:1a:6d:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgoIK6UZ5BDdfeudoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDA1MDUwNFoXDTI1MDMxMDA0MDUwNFowLzEtMCsGA1UEAxMk
MzJhMGY4MjYtZDQ3MS00ZmMwLThlNjgtMDI5ZmY0NmU3MDcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbc2iyk5NKu6LmYZuV0KP7JXGDMyYgCWAwav
hxo0GsJgWPEW3jLpbudBJMAE+s7zERnQ3fZy4O5clYB1u0RdDXaZeQRfWUYDqYjA
yo8Cbl5uAYIKqQoJCtpUUf884rcSUPP1dD5kFWG2EzYinEIbhikKD2YSaC8WDW/v
gyoN9CqCqcCLlQofIf2CIkvZnCv88q3ax08dR+9njZTUzaCGQNK00kF3oyRW1XQo
13N1Yr6k70/ufYeqccTuqo5LdOaHO6O8Mwvin+IUw/LvuwY1Mpod592BzMkKEjY7
9IFZseyzTjglVPrh6AeMu8XM38wxD3UPqSy1oXAHLkG0UwpkCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPcOpFWtyDwVyphrVH5GLPr53iH7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWZkNWUzODAtMzY0ZC0z
MGQ1LTk0ZmUtMmIyMDlkNWUwNWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEPwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKeb2ZwYH/gpZdnqhmiy5gHZwoQ4HI9PjjrAtlHLClLyu5kSBptrQrnl
Y3eQ1Mn5w10jjepTaf+MbLUnFKB4f8nQ+cIN7huXZSNdjcefhVBThxQHTO7wQZjw
nYIY/Ls/m0DlJ1O4U0DVBiGEvYY6faSEqT0o/HhleE5c+5bsyC7X6NKhZRsaXMsi
7pK/ggJ6KTmnnBcGPgDwr9Ns787w02IPW1idBLnYKwgypLv3qOtAJJXQ0zbcHq48
zyILJiZtvbs54bD6D0jrdXdITz/rExn8x+8LS3y0jfh8a9L5u9hHq1eetq7UyrQF
eqDR1msDdwCJvnGxxEUhpoaIrgIabdM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:24 2025 by rpki-client