Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c5f23253-4793-3aa6-bef3-3f8c0fc89adb.roa
File: c5f23253-4793-3aa6-bef3-3f8c0fc89adb.roa (raw, json)
Hash identifier: 7w/QBLl9p9qwSjVrN0/TuH1Yk+jcwhrpLd5RfR8ROEo=
Subject key identifier: 73:6D:DF:FB:40:57:7C:61:19:61:A4:93:BB:2F:B3:D1:B5:F8:61:57
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848280AB5B9558BC51FB0B1AE00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c5f23253-4793-3aa6-bef3-3f8c0fc89adb.roa
Signing time: Tue 10 Dec 2024 04:20:48 +0000
ROA not before: Tue 10 Dec 2024 04:20:48 +0000
ROA not after: Mon 10 Mar 2025 03:20:48 +0000
asID: 13335
IP address blocks: 172.68.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:0a:b5:b9:55:8b:c5:1f:b0:b1:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 04:20:48 2024 GMT
Not After : Mar 10 03:20:48 2025 GMT
Subject: CN=91ce8952-00c5-479f-a406-78f6548319a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8d:fb:b1:99:9b:22:f4:af:5c:88:c4:63:12:
0a:ee:7c:77:03:e2:e9:39:70:94:bb:97:bb:8d:fe:
d1:b8:ed:de:2e:c6:43:46:d4:e3:b3:13:b5:00:d6:
43:2c:e9:ec:26:36:74:4a:a4:af:07:0e:8f:8c:ef:
aa:ce:ea:1c:20:12:e7:02:5e:dc:21:e7:ae:5f:5f:
4b:82:6f:7a:0f:ac:21:83:af:37:98:6c:b1:ac:40:
ab:2e:35:dd:b9:cb:77:7b:4e:7b:b0:90:5e:33:cc:
f4:d4:db:6d:0e:05:ec:c6:2b:f6:8c:46:2d:d7:4f:
d3:f3:94:e2:00:d5:60:2e:6b:31:69:e9:cf:11:00:
ad:75:d5:76:69:40:ec:5f:96:e3:32:a3:ce:c7:cc:
e6:bb:9a:8c:ec:f5:4d:82:34:0a:b4:7c:dc:33:a5:
d6:0d:3c:b7:a6:37:e5:05:5e:3e:1a:18:9d:74:3c:
4c:d4:67:32:50:ca:db:4f:03:cd:17:ea:ca:20:ea:
15:0e:92:fc:3c:bb:0a:ee:4a:6f:bc:47:82:ee:f6:
5f:d1:e1:cf:7f:fc:f7:3b:f2:ab:80:07:16:15:f5:
f8:e8:47:00:bf:59:0b:91:77:dd:48:e7:da:84:d2:
da:21:9f:04:51:d6:59:96:e2:12:a4:4e:af:a8:58:
6a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6D:DF:FB:40:57:7C:61:19:61:A4:93:BB:2F:B3:D1:B5:F8:61:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c5f23253-4793-3aa6-bef3-3f8c0fc89adb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:3c:06:6d:80:7f:bc:4f:9b:28:22:98:82:6b:61:57:1a:9d:
5c:52:b6:48:2a:2f:b9:8c:08:c3:76:7a:e3:90:5f:1e:53:e8:
a9:ca:48:28:9d:76:3f:34:0b:77:0a:3d:29:98:58:3f:ac:60:
e3:05:52:9c:fd:67:fc:5e:ff:c4:a3:20:25:43:99:f4:25:b7:
69:e5:57:0b:c1:67:02:31:7e:bc:2b:99:cb:66:11:37:26:c6:
b3:a9:e0:f3:d0:3b:a1:c9:70:37:a4:bb:7e:c5:95:33:49:d3:
bd:7a:58:70:f0:d1:8b:cc:f4:bb:46:ef:af:61:83:40:f3:05:
8e:a8:56:43:68:2d:d7:0b:aa:98:cb:2d:1f:22:2c:c3:12:d2:
fd:4e:4a:60:d7:78:ff:f9:4b:26:79:c1:cc:ff:65:9a:0c:ce:
ae:dd:45:fb:d4:2a:f6:15:cd:b9:ec:c2:05:6c:1e:bd:d6:b0:
ea:18:bd:1b:56:9e:0d:24:1a:11:f9:65:8e:2f:6a:1e:47:83:
48:1a:bc:57:db:06:b8:24:0e:70:09:bc:8a:ac:88:cb:cd:a4:
0a:4a:83:4b:59:cc:b5:d6:9c:ec:18:1d:4b:94:45:78:b5:fa:
5c:87:8a:40:a0:eb:9f:41:3c:d5:ef:1c:c3:d7:c0:8e:89:bc:
d9:02:7d:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgoCrW5VYvFH7CxrgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDA0MjA0OFoXDTI1MDMxMDAzMjA0OFowLzEtMCsGA1UEAxMk
OTFjZTg5NTItMDBjNS00NzlmLWE0MDYtNzhmNjU0ODMxOWExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY37sZmbIvSvXIjEYxIK7nx3A+LpOXCUu5e7
jf7RuO3eLsZDRtTjsxO1ANZDLOnsJjZ0SqSvBw6PjO+qzuocIBLnAl7cIeeuX19L
gm96D6whg683mGyxrECrLjXduct3e057sJBeM8z01NttDgXsxiv2jEYt10/T85Ti
ANVgLmsxaenPEQCtddV2aUDsX5bjMqPOx8zmu5qM7PVNgjQKtHzcM6XWDTy3pjfl
BV4+GhiddDxM1GcyUMrbTwPNF+rKIOoVDpL8PLsK7kpvvEeC7vZf0eHPf/z3O/Kr
gAcWFfX46EcAv1kLkXfdSOfahNLaIZ8EUdZZluISpE6vqFhqHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHNt3/tAV3xhGWGkk7svs9G1+GFXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzVmMjMyNTMtNDc5My0z
YWE2LWJlZjMtM2Y4YzBmYzg5YWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACs8Bm2Af7xPmygimIJrYVcanVxStkgqL7mMCMN2euOQXx5T6KnKSCid
dj80C3cKPSmYWD+sYOMFUpz9Z/xe/8SjICVDmfQlt2nlVwvBZwIxfrwrmctmETcm
xrOp4PPQO6HJcDeku37FlTNJ0716WHDw0YvM9LtG769hg0DzBY6oVkNoLdcLqpjL
LR8iLMMS0v1OSmDXeP/5SyZ5wcz/ZZoMzq7dRfvUKvYVzbnswgVsHr3WsOoYvRtW
ng0kGhH5ZY4vah5Hg0gavFfbBrgkDnAJvIqsiMvNpApKg0tZzLXWnOwYHUuURXi1
+lyHikCg659BPNXvHMPXwI6JvNkCfWM=
-----END CERTIFICATE-----
Generated at Sat May 10 12:10:05 2025 by rpki-client