Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bc929892-dc70-35d5-ad0d-2bb9fc887f18.roa
File: bc929892-dc70-35d5-ad0d-2bb9fc887f18.roa (raw, json)
Hash identifier: jkJ2Q6ZtNRL+tYsQZl/HJphhG1oD6oUh7JgqQY4GbpQ=
Subject key identifier: F2:7B:93:7B:92:CF:40:00:4B:F1:CA:66:2C:C8:59:85:B1:E7:06:A5
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858483044CFE33619E6E484D20D80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bc929892-dc70-35d5-ad0d-2bb9fc887f18.roa
Signing time: Fri 13 Dec 2024 03:04:20 +0000
ROA not before: Fri 13 Dec 2024 03:04:20 +0000
ROA not after: Thu 13 Mar 2025 02:04:20 +0000
asID: 13335
IP address blocks: 172.71.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:44:cf:e3:36:19:e6:e4:84:d2:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:04:20 2024 GMT
Not After : Mar 13 02:04:20 2025 GMT
Subject: CN=5b9cae90-a48f-4582-95da-290e3693b9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0c:e8:09:7d:b1:a4:81:71:c4:3c:6c:fa:5d:
20:4c:36:9e:f0:b9:c6:1c:08:c7:11:0a:8a:0d:75:
4b:00:84:81:be:52:3a:b0:38:e2:16:18:a6:7e:12:
bb:22:c9:61:ef:82:bf:b3:43:6e:d3:cd:35:1b:c1:
fa:ee:ff:c8:51:d9:05:e7:e5:98:ed:64:a0:8c:e3:
d7:36:e2:99:0a:78:42:3a:9f:af:14:8b:aa:86:4b:
f8:27:d0:42:78:e4:8c:0d:fa:81:4c:55:ef:52:b3:
b1:4c:87:f3:31:06:13:9f:45:bc:e4:72:b8:2c:c0:
31:da:b8:05:8d:41:26:26:cf:7f:65:54:6e:55:47:
80:fc:2e:c5:b3:82:92:35:43:62:65:32:fd:c0:13:
87:3e:64:a6:aa:25:8d:73:f1:43:ff:f1:2d:61:eb:
a4:cb:33:f8:34:3b:4e:42:cc:32:0f:f8:05:ea:b6:
74:fc:62:52:dd:e1:6c:e1:89:d2:3a:b0:b0:23:33:
4f:e7:9d:88:cc:1a:bd:05:97:59:d8:fd:e2:ce:47:
29:b9:ad:8a:e1:a6:e0:ef:56:7b:b8:a8:ef:9e:91:
73:e1:ab:57:db:5b:3a:17:01:5b:4e:28:7c:c7:78:
83:09:0a:ff:1a:91:ff:76:94:4c:c2:fd:f7:c0:8c:
73:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7B:93:7B:92:CF:40:00:4B:F1:CA:66:2C:C8:59:85:B1:E7:06:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bc929892-dc70-35d5-ad0d-2bb9fc887f18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:8f:98:45:b9:0a:cb:cf:90:34:e5:3e:31:0d:90:3b:58:28:
c6:2c:83:6c:34:b3:1c:aa:40:95:af:b8:de:84:6e:b2:6c:37:
c2:cf:c5:5e:e0:11:25:cc:7e:d1:b1:b6:c6:e7:d4:a8:82:52:
65:2d:a4:6d:ab:9c:34:a2:50:a4:3b:54:0c:26:aa:18:01:53:
21:2a:68:8e:6f:7d:12:a0:93:09:ee:6f:be:de:27:08:ae:25:
99:89:e7:ad:30:de:35:0d:19:38:85:b3:85:8c:05:fd:67:8d:
b9:b3:19:b7:6e:58:d2:6a:71:1a:57:b2:7c:e4:b6:c2:52:3b:
33:c5:0c:5b:8f:7d:81:0b:72:b4:0c:4d:e1:23:9a:08:9d:94:
93:6a:8e:73:58:b4:51:25:b7:a9:96:73:0b:cd:3d:33:3c:38:
cd:c3:80:50:e5:a7:05:3f:19:fe:55:70:ed:a0:3f:79:12:5d:
c0:d3:88:d2:24:f9:43:81:49:3a:09:67:1f:9b:f5:6a:9e:42:
d7:00:ef:28:ff:77:dc:6c:d3:d3:e7:c3:35:07:88:c3:32:d5:
6e:fd:f3:46:ad:77:ce:f1:26:01:2b:e7:df:94:8f:b2:26:5a:
28:b5:01:0e:17:51:f9:69:bd:d0:9b:23:c4:f6:47:73:1f:e0:
1e:16:ea:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgwRM/jNhnm5ITSDYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMzAzMDQyMFoXDTI1MDMxMzAyMDQyMFowLzEtMCsGA1UEAxMk
NWI5Y2FlOTAtYTQ4Zi00NTgyLTk1ZGEtMjkwZTM2OTNiOWNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgzoCX2xpIFxxDxs+l0gTDae8LnGHAjHEQqK
DXVLAISBvlI6sDjiFhimfhK7Islh74K/s0Nu0801G8H67v/IUdkF5+WY7WSgjOPX
NuKZCnhCOp+vFIuqhkv4J9BCeOSMDfqBTFXvUrOxTIfzMQYTn0W85HK4LMAx2rgF
jUEmJs9/ZVRuVUeA/C7Fs4KSNUNiZTL9wBOHPmSmqiWNc/FD//EtYeukyzP4NDtO
QswyD/gF6rZ0/GJS3eFs4YnSOrCwIzNP552IzBq9BZdZ2P3izkcpua2K4abg71Z7
uKjvnpFz4atX21s6FwFbTih8x3iDCQr/GpH/dpRMwv33wIxzuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPJ7k3uSz0AAS/HKZizIWYWx5walMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmM5Mjk4OTItZGM3MC0z
NWQ1LWFkMGQtMmJiOWZjODg3ZjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADSPmEW5CsvPkDTlPjENkDtYKMYsg2w0sxyqQJWvuN6EbrJsN8LPxV7g
ESXMftGxtsbn1KiCUmUtpG2rnDSiUKQ7VAwmqhgBUyEqaI5vfRKgkwnub77eJwiu
JZmJ560w3jUNGTiFs4WMBf1njbmzGbduWNJqcRpXsnzktsJSOzPFDFuPfYELcrQM
TeEjmgidlJNqjnNYtFElt6mWcwvNPTM8OM3DgFDlpwU/Gf5VcO2gP3kSXcDTiNIk
+UOBSToJZx+b9WqeQtcA7yj/d9xs09PnwzUHiMMy1W7980atd87xJgEr59+Uj7Im
Wii1AQ4XUflpvdCbI8T2R3Mf4B4W6uo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:01:19 2025 by rpki-client