Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/be4e7b72-62f9-3e80-b64b-f7ec73938b6b.roa
File: be4e7b72-62f9-3e80-b64b-f7ec73938b6b.roa (raw, json)
Hash identifier: Ef7Fx+0DlS9XCJY+ADWVj4xtsN1jUq1+7Jy6Hi85wDc=
Subject key identifier: 5E:95:C7:8B:2F:AA:30:03:3F:CC:83:AD:21:8A:34:C8:8F:FF:4F:23
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482821392C604A76A9CFA89500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/be4e7b72-62f9-3e80-b64b-f7ec73938b6b.roa
Signing time: Tue 10 Dec 2024 05:06:10 +0000
ROA not before: Tue 10 Dec 2024 05:06:10 +0000
ROA not after: Mon 10 Mar 2025 04:06:10 +0000
asID: 13335
IP address blocks: 172.68.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:21:39:2c:60:4a:76:a9:cf:a8:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 05:06:10 2024 GMT
Not After : Mar 10 04:06:10 2025 GMT
Subject: CN=604b81e9-415a-4997-bc8a-34b94b6e3849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:34:5d:09:80:f0:8b:f6:97:d0:4b:13:22:
f3:1a:d9:69:48:5a:f1:df:a1:79:a4:52:c1:d8:ea:
a5:09:96:c8:31:7d:6b:54:ce:e5:14:60:15:16:c9:
7e:8e:41:7e:bb:e0:c6:62:80:b6:c8:eb:20:93:29:
9b:25:7f:3e:c8:26:44:9a:00:ed:cc:a7:c1:cc:5b:
c8:2f:c3:4e:8a:e0:a4:ef:90:ce:29:3d:de:56:e1:
06:f9:e6:56:86:84:8f:76:64:16:fb:25:3e:9f:3a:
8b:e4:a5:f1:c6:7e:46:dc:aa:2a:7b:6b:db:e8:47:
cb:6b:e6:b5:55:46:c5:f8:60:bf:62:24:fe:3a:61:
d4:de:c6:4f:c0:5e:50:9a:80:47:d8:fa:e2:30:56:
43:4c:ea:e6:d6:10:c5:f1:06:ef:76:cc:3e:da:db:
e0:d5:97:9b:12:72:c0:0d:e6:fd:f2:38:c0:ef:96:
71:27:78:81:3e:78:0e:f7:bb:f4:40:c7:da:ef:6f:
80:d1:59:20:c8:84:2c:3b:fd:b0:b7:02:f5:07:d2:
3b:97:4c:9f:ec:dd:21:36:06:99:e7:a0:1c:f0:98:
44:d1:12:cc:6d:0d:15:fc:14:a8:17:50:51:28:aa:
72:51:52:c0:d9:f5:af:e3:b4:18:70:41:d3:d0:96:
26:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:95:C7:8B:2F:AA:30:03:3F:CC:83:AD:21:8A:34:C8:8F:FF:4F:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/be4e7b72-62f9-3e80-b64b-f7ec73938b6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:aa:80:ab:0c:d4:c1:07:4d:2c:76:f4:87:e6:91:ed:49:2a:
79:05:84:26:fb:45:54:86:b2:2a:bf:6d:a2:1d:ab:8d:28:4c:
7d:51:09:c1:31:b7:ef:ef:47:3a:04:f9:e8:26:5c:4f:0c:7f:
5d:f6:c8:c8:07:ca:08:f3:63:6d:cb:24:40:59:92:6e:0f:98:
7e:1a:de:ef:ee:21:ce:cc:ca:cf:b6:07:b6:a4:91:08:c1:54:
c1:5a:64:16:58:77:43:07:32:ed:c3:31:08:65:36:09:4c:db:
52:8f:2d:db:69:95:7f:a9:0a:24:43:6c:c1:23:ec:66:bb:ee:
a6:9b:dd:f4:7d:39:4d:40:e4:df:75:7f:16:2e:75:26:f3:8e:
66:a6:b8:3f:5a:bc:c9:e8:93:4b:ab:03:ce:23:d7:24:7d:13:
83:25:16:95:96:b9:6a:e0:71:46:b3:2f:8d:83:e7:9b:ff:35:
5f:51:c0:b2:ad:45:8f:4f:bc:ed:3f:50:e2:c0:e3:93:dd:21:
b6:b6:3c:8a:01:83:ab:21:1c:09:2b:34:2a:9c:2d:c1:1d:59:
62:60:3d:57:1a:6f:74:f2:fb:4e:bd:42:dc:d3:a2:ad:eb:84:
55:6a:4b:96:1f:e4:8d:22:d8:05:2b:28:10:17:3a:09:2e:e1:
72:b9:0b:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgoITksYEp2qc+olQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDA1MDYxMFoXDTI1MDMxMDA0MDYxMFowLzEtMCsGA1UEAxMk
NjA0YjgxZTktNDE1YS00OTk3LWJjOGEtMzRiOTRiNmUzODQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4k0XQmA8Iv2l9BLEyLzGtlpSFrx36F5pFLB
2OqlCZbIMX1rVM7lFGAVFsl+jkF+u+DGYoC2yOsgkymbJX8+yCZEmgDtzKfBzFvI
L8NOiuCk75DOKT3eVuEG+eZWhoSPdmQW+yU+nzqL5KXxxn5G3Koqe2vb6EfLa+a1
VUbF+GC/YiT+OmHU3sZPwF5QmoBH2PriMFZDTOrm1hDF8Qbvdsw+2tvg1ZebEnLA
Deb98jjA75ZxJ3iBPngO97v0QMfa72+A0VkgyIQsO/2wtwL1B9I7l0yf7N0hNgaZ
56Ac8JhE0RLMbQ0V/BSoF1BRKKpyUVLA2fWv47QYcEHT0JYmDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF6Vx4svqjADP8yDrSGKNMiP/08jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmU0ZTdiNzItNjJmOS0z
ZTgwLWI2NGItZjdlYzczOTM4YjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADyqgKsM1MEHTSx29Ifmke1JKnkFhCb7RVSGsiq/baIdq40oTH1RCcEx
t+/vRzoE+egmXE8Mf132yMgHygjzY23LJEBZkm4PmH4a3u/uIc7Mys+2B7akkQjB
VMFaZBZYd0MHMu3DMQhlNglM21KPLdtplX+pCiRDbMEj7Ga77qab3fR9OU1A5N91
fxYudSbzjmamuD9avMnok0urA84j1yR9E4MlFpWWuWrgcUazL42D55v/NV9RwLKt
RY9PvO0/UOLA45PdIba2PIoBg6shHAkrNCqcLcEdWWJgPVcab3Ty+069QtzToq3r
hFVqS5Yf5I0i2AUrKBAXOgku4XK5C/0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:50:33 2025 by rpki-client