Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3c20a39-6575-362e-a112-d4aa121461f5.roa
File: b3c20a39-6575-362e-a112-d4aa121461f5.roa (raw, json)
Hash identifier: uO36ldv+1EKVuUU+4rLh7IbaTrDSw7j97BuoOS0v814=
Subject key identifier: 9D:7A:4D:06:09:7A:7E:54:7B:F2:6E:D3:0B:47:26:DD:4B:7C:2F:6C
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827B6FCAE86A3B6BE9F394E00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3c20a39-6575-362e-a112-d4aa121461f5.roa
Signing time: Tue 10 Dec 2024 01:32:07 +0000
ROA not before: Tue 10 Dec 2024 01:32:07 +0000
ROA not after: Mon 10 Mar 2025 00:32:07 +0000
asID: 13335
IP address blocks: 172.70.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:b6:fc:ae:86:a3:b6:be:9f:39:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:32:07 2024 GMT
Not After : Mar 10 00:32:07 2025 GMT
Subject: CN=68898c08-9b1f-45e7-bf3f-01439710c0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:74:15:b4:5e:f9:65:f8:3e:dd:2e:29:bd:f8:
ff:8c:c6:5e:56:f1:65:4a:58:39:3e:ad:3c:56:61:
f1:87:b0:e1:da:ba:4e:63:dd:3f:e3:12:6c:27:c5:
55:83:e0:a6:dd:e1:7c:9c:64:b7:6e:27:34:9c:3d:
5b:fb:93:e1:78:a4:c2:a0:da:9e:6e:01:a9:f2:d9:
a1:e0:42:c4:9b:1e:28:cc:56:ef:d4:67:c9:e6:a1:
af:cd:78:3e:3a:24:19:d7:2e:dc:15:31:40:8a:48:
8b:22:61:da:49:f8:68:53:a5:a3:16:cf:fe:55:ed:
15:7a:4f:2b:3b:30:f9:44:b3:60:d8:58:03:56:68:
c0:8e:d3:ad:28:88:0a:50:38:79:6c:2c:78:78:c3:
96:e7:5c:65:74:69:0d:d4:fe:35:9d:cf:58:ae:f1:
3f:03:69:8d:ed:99:60:d7:f6:f0:17:37:f6:9e:78:
e4:b7:ee:5c:cb:f0:43:36:94:f9:ee:a8:93:d0:b4:
93:06:75:b1:c8:54:a8:46:07:c6:f3:16:e3:e6:50:
21:3c:09:1d:73:1c:95:bc:38:fd:e6:cd:ff:bc:f8:
3b:c9:71:30:34:af:8a:54:ba:00:74:35:a5:8c:0a:
02:ae:24:e6:25:d0:46:4e:4d:e2:1f:a7:29:33:ae:
9f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7A:4D:06:09:7A:7E:54:7B:F2:6E:D3:0B:47:26:DD:4B:7C:2F:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3c20a39-6575-362e-a112-d4aa121461f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:ef:75:1d:bb:d6:ef:b6:5c:d9:d1:59:13:15:6d:d9:fb:a7:
62:06:a3:a7:93:23:f9:1a:97:20:fa:d3:a1:3c:f1:6e:24:8f:
cf:d7:6c:3a:8c:09:33:24:10:11:51:91:d4:dc:87:d4:67:3b:
6e:cc:b2:74:2f:4d:20:09:30:2b:87:d6:a1:ab:64:67:80:e9:
bd:78:c1:e3:8a:6b:35:ca:1e:99:2c:96:7b:ea:da:ce:18:b1:
6b:1d:b0:fe:8c:55:f5:79:4d:e5:ab:b2:67:4b:b3:6a:6c:72:
4c:6d:ca:2a:26:f7:8a:39:b0:ad:03:7d:7a:bb:5d:0a:ec:94:
e8:e3:bc:be:94:4f:04:a3:70:d4:8d:39:e8:61:72:dc:21:15:
81:1a:0d:84:2e:6f:fe:39:53:f3:a5:a1:e5:ed:76:95:00:6e:
2e:84:b4:42:38:99:63:f8:d0:3e:ca:a3:a3:80:b5:16:d8:93:
17:50:15:5f:9a:bc:f0:5b:3d:08:1f:f4:8d:42:09:c1:6f:fd:
6b:09:ff:71:13:6a:cc:51:e2:42:ef:be:77:cd:72:03:25:fd:
87:b5:67:2d:1e:57:26:75:0a:d3:55:b5:a1:af:87:af:cb:f2:
0d:14:a8:fd:f0:d9:22:74:3d:9d:09:b5:bc:eb:a3:1e:1a:af:
19:c2:15:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgntvyuhqO2vp85TgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDAxMzIwN1oXDTI1MDMxMDAwMzIwN1owLzEtMCsGA1UEAxMk
Njg4OThjMDgtOWIxZi00NWU3LWJmM2YtMDE0Mzk3MTBjMGIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXQVtF75Zfg+3S4pvfj/jMZeVvFlSlg5Pq08
VmHxh7Dh2rpOY90/4xJsJ8VVg+Cm3eF8nGS3bic0nD1b+5PheKTCoNqebgGp8tmh
4ELEmx4ozFbv1GfJ5qGvzXg+OiQZ1y7cFTFAikiLImHaSfhoU6WjFs/+Ve0Vek8r
OzD5RLNg2FgDVmjAjtOtKIgKUDh5bCx4eMOW51xldGkN1P41nc9YrvE/A2mN7Zlg
1/bwFzf2nnjkt+5cy/BDNpT57qiT0LSTBnWxyFSoRgfG8xbj5lAhPAkdcxyVvDj9
5s3/vPg7yXEwNK+KVLoAdDWljAoCriTmJdBGTk3iH6cpM66fOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ16TQYJen5Ue/Ju0wtHJt1LfC9sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjNjMjBhMzktNjU3NS0z
NjJlLWExMTItZDRhYTEyMTQ2MWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEY6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJHvdR271u+2XNnRWRMVbdn7p2IGo6eTI/kalyD606E88W4kj8/XbDqM
CTMkEBFRkdTch9RnO27MsnQvTSAJMCuH1qGrZGeA6b14weOKazXKHpkslnvq2s4Y
sWsdsP6MVfV5TeWrsmdLs2psckxtyiom94o5sK0DfXq7XQrslOjjvL6UTwSjcNSN
OehhctwhFYEaDYQub/45U/OloeXtdpUAbi6EtEI4mWP40D7Ko6OAtRbYkxdQFV+a
vPBbPQgf9I1CCcFv/WsJ/3ETasxR4kLvvnfNcgMl/Ye1Zy0eVyZ1CtNVtaGvh6/L
8g0UqP3w2SJ0PZ0Jtbzrox4arxnCFU0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:42:44 2025 by rpki-client