Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf16ef4f-2e12-3fc5-8ca1-716cee11f614.roa
File: bf16ef4f-2e12-3fc5-8ca1-716cee11f614.roa (raw, json)
Hash identifier: YvJFsiWsy0GQFgYxkt+E39iSqVDLpwpQyPRJDWzzjQ8=
Subject key identifier: A1:03:3E:D9:5D:FE:AC:8C:49:53:C6:9E:3A:33:65:F9:AD:5E:0A:8D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858483044E177B585720B46760660
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf16ef4f-2e12-3fc5-8ca1-716cee11f614.roa
Signing time: Fri 13 Dec 2024 03:04:28 +0000
ROA not before: Fri 13 Dec 2024 03:04:28 +0000
ROA not after: Thu 13 Mar 2025 02:04:28 +0000
asID: 13335
IP address blocks: 172.71.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:44:e1:77:b5:85:72:0b:46:76:06:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:04:28 2024 GMT
Not After : Mar 13 02:04:28 2025 GMT
Subject: CN=4b20bf28-1f22-4c5c-bdc2-58ef3a1cb550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6d:f0:69:09:0e:53:44:7b:6a:0b:5b:65:fe:
46:9e:2e:2f:60:6a:1a:1b:d7:08:6a:09:1b:86:e0:
f6:77:c0:b7:08:9e:86:28:65:5a:11:c6:1b:ff:ec:
bd:7a:05:f1:ca:d7:be:54:f2:ff:3c:82:5f:84:73:
7d:5f:dc:98:be:35:9f:50:31:81:0c:0d:e4:13:5c:
6b:7d:ef:65:42:ac:99:dd:8b:4a:32:30:67:dc:30:
8a:4f:9f:43:56:56:b9:16:2c:fa:7c:c1:9c:a8:41:
e3:49:72:b3:b7:d8:57:8c:4f:4b:19:8a:80:7c:42:
5c:0c:9d:be:62:12:bc:24:b9:a9:e2:f2:c6:23:71:
71:80:db:cc:2e:15:2a:9f:46:bb:a9:ac:19:7f:85:
0d:26:9c:e0:a5:ae:31:99:58:26:cb:dc:25:a7:9e:
e9:0d:84:c9:f9:b7:9a:24:15:3f:fa:47:6a:85:65:
0c:a0:7c:ed:bf:4c:91:28:87:c6:0b:74:25:be:78:
d1:f6:74:50:2e:c8:4a:4b:37:19:83:b6:e6:03:92:
01:6c:12:a7:1c:54:64:0a:56:8a:3a:cc:46:a9:90:
ea:39:b9:ff:ff:d4:fb:0f:fe:51:ad:d0:c8:2e:36:
d6:cb:25:7c:37:28:b4:eb:16:35:ca:e3:31:9d:30:
3e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:03:3E:D9:5D:FE:AC:8C:49:53:C6:9E:3A:33:65:F9:AD:5E:0A:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf16ef4f-2e12-3fc5-8ca1-716cee11f614.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:0b:59:b0:27:de:7d:0a:98:b7:53:18:87:c1:36:06:6c:23:
16:4c:74:92:85:a2:b9:91:9c:56:14:02:c0:c0:86:c4:02:7d:
22:11:59:9a:d9:92:3e:df:28:06:49:8c:6a:46:fd:d3:6f:05:
f6:52:a9:84:3e:26:40:81:90:fb:ad:55:33:b7:a4:5d:35:00:
eb:74:39:aa:1b:ed:b6:ac:81:e5:bd:34:6a:72:7a:b6:ab:b9:
9b:5b:93:82:b8:55:8c:5b:cd:95:23:0a:18:62:f2:f7:eb:46:
ee:54:19:21:bb:72:e7:cf:2c:bc:95:d0:ce:45:85:ec:72:ec:
b8:6e:74:b1:f7:1f:07:62:ac:c8:de:56:83:7e:a6:95:b6:87:
7c:03:56:a6:4e:e0:39:54:c0:5c:9e:97:ad:ec:a9:7f:7b:e1:
80:f9:44:a2:ee:c2:90:a4:3a:76:37:a4:84:cc:e9:0c:62:50:
d2:48:2a:b6:02:08:81:e5:9c:b0:75:7c:6e:e3:74:23:43:ca:
a4:ed:4c:d2:76:cb:62:4e:a8:e2:bd:c8:e3:c5:71:e5:31:06:
73:93:0c:47:bc:40:5e:18:86:ac:5a:73:d6:af:43:2e:57:bd:
75:b2:c0:af:d4:d2:2b:81:e3:e0:c8:eb:f9:66:79:c8:1c:f4:
d2:14:75:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgwROF3tYVyC0Z2BmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMzAzMDQyOFoXDTI1MDMxMzAyMDQyOFowLzEtMCsGA1UEAxMk
NGIyMGJmMjgtMWYyMi00YzVjLWJkYzItNThlZjNhMWNiNTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW3waQkOU0R7agtbZf5Gni4vYGoaG9cIagkb
huD2d8C3CJ6GKGVaEcYb/+y9egXxyte+VPL/PIJfhHN9X9yYvjWfUDGBDA3kE1xr
fe9lQqyZ3YtKMjBn3DCKT59DVla5Fiz6fMGcqEHjSXKzt9hXjE9LGYqAfEJcDJ2+
YhK8JLmp4vLGI3FxgNvMLhUqn0a7qawZf4UNJpzgpa4xmVgmy9wlp57pDYTJ+bea
JBU/+kdqhWUMoHztv0yRKIfGC3QlvnjR9nRQLshKSzcZg7bmA5IBbBKnHFRkClaK
OsxGqZDqObn//9T7D/5RrdDILjbWyyV8Nyi06xY1yuMxnTA+7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKEDPtld/qyMSVPGnjozZfmtXgqNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmYxNmVmNGYtMmUxMi0z
ZmM1LThjYTEtNzE2Y2VlMTFmNjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALoLWbAn3n0KmLdTGIfBNgZsIxZMdJKFormRnFYUAsDAhsQCfSIRWZrZ
kj7fKAZJjGpG/dNvBfZSqYQ+JkCBkPutVTO3pF01AOt0Oaob7basgeW9NGpyerar
uZtbk4K4VYxbzZUjChhi8vfrRu5UGSG7cufPLLyV0M5Fhexy7LhudLH3HwdirMje
VoN+ppW2h3wDVqZO4DlUwFyel63sqX974YD5RKLuwpCkOnY3pITM6QxiUNJIKrYC
CIHlnLB1fG7jdCNDyqTtTNJ2y2JOqOK9yOPFceUxBnOTDEe8QF4Yhqxac9avQy5X
vXWywK/U0iuB4+DI6/lmecgc9NIUdaA=
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:18:49 2025 by rpki-client