Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de441c87-afcb-3e53-98c5-4a828c903001.roa
File: de441c87-afcb-3e53-98c5-4a828c903001.roa (raw, json)
Hash identifier: DMh/hbx5mDlmXofMH1S+i9tHzZrP3wHA+uCk9ng96Rk=
Subject key identifier: E5:31:01:29:C7:BB:29:93:24:EA:07:70:7A:43:EF:BE:A8:6C:E5:BB
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848304368BD3AC1B7C06FC79940
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de441c87-afcb-3e53-98c5-4a828c903001.roa
Signing time: Fri 13 Dec 2024 03:01:31 +0000
ROA not before: Fri 13 Dec 2024 03:01:31 +0000
ROA not after: Thu 13 Mar 2025 02:01:31 +0000
asID: 13335
IP address blocks: 172.71.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:43:68:bd:3a:c1:b7:c0:6f:c7:99:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:01:31 2024 GMT
Not After : Mar 13 02:01:31 2025 GMT
Subject: CN=7b2553ba-685c-43bd-8ad6-0cb6059875b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:eb:dc:73:65:64:b5:09:46:63:4d:03:11:da:
7b:ed:89:ce:d2:5e:7c:b3:89:3e:f5:22:75:4d:4c:
a3:89:c3:18:9e:da:2c:8f:0b:24:2b:f3:ce:b1:9c:
e9:40:04:7b:5d:68:93:67:72:a2:7d:6c:85:8d:03:
d5:0a:f7:f5:b1:46:7d:73:a8:13:9e:66:9a:b3:be:
6d:69:ec:c2:55:bc:c1:f2:6d:03:1b:f8:66:c2:3a:
19:72:2e:85:57:d6:93:1e:f9:b1:1b:87:8a:21:15:
f9:92:82:4e:9b:a6:98:d3:dd:4c:04:9e:74:a7:3c:
e9:2e:a2:7e:80:93:ce:a8:a5:45:81:ac:98:97:a4:
0d:de:92:d0:bb:90:6e:28:82:9f:e8:6b:84:c3:4b:
f5:0c:fc:10:ec:8b:6c:a3:92:b7:10:26:62:bc:46:
3d:f0:10:df:17:5d:e2:27:9e:53:09:47:e1:bd:b9:
aa:cd:77:4f:26:28:e9:79:ca:32:e1:bd:b5:9f:3b:
bf:eb:ca:2f:c2:3a:49:d0:91:66:54:ca:57:88:89:
5c:97:4f:ce:ce:32:df:91:0a:f0:1c:46:ab:65:17:
60:c3:5f:39:0e:b5:1f:b6:26:66:c5:c4:78:6c:73:
89:66:f4:d4:56:8f:25:48:40:95:b9:3a:05:da:f4:
74:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:31:01:29:C7:BB:29:93:24:EA:07:70:7A:43:EF:BE:A8:6C:E5:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de441c87-afcb-3e53-98c5-4a828c903001.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:a1:80:b1:27:e0:cc:9a:2c:c5:c5:77:5b:97:a7:ce:f8:1c:
0d:d4:4a:07:d6:18:77:0e:de:60:18:4e:de:33:3b:a5:ff:ac:
1b:4e:00:8a:23:bb:37:f3:97:ee:bd:dd:c8:a7:83:03:9e:34:
56:7c:14:19:d1:24:99:a1:54:d0:ed:3b:2f:2b:2f:df:87:3e:
8f:2b:d2:96:62:10:cc:1a:bf:9f:35:e8:67:29:d8:a3:79:62:
82:a0:c9:30:a6:59:33:bb:76:ea:b3:13:b3:f5:c3:48:b6:9d:
6a:3d:bc:a8:e8:47:28:77:10:25:eb:32:d6:a3:f6:c7:0b:1b:
eb:33:ff:a7:5e:ea:30:b6:72:a6:25:ba:b8:7b:26:c7:38:c1:
cd:fa:88:93:20:43:83:35:17:13:16:94:06:2b:65:3b:4a:7f:
01:3a:81:be:34:a1:c2:03:69:19:18:cb:32:b9:32:cb:54:a2:
c5:db:e9:84:76:e7:f9:bb:09:f4:c4:79:77:17:5c:bf:c5:30:
e3:59:09:b5:2e:89:5d:66:cc:7e:a9:6a:70:70:b6:2d:b1:8e:
20:f4:9b:e5:a1:a8:02:db:07:c9:c8:9d:d5:2d:ae:2e:28:22:
22:1a:83:89:d0:f1:7b:4e:77:cf:47:94:e5:1d:1d:34:33:25:
57:98:cd:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgwQ2i9OsG3wG/HmUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMzAzMDEzMVoXDTI1MDMxMzAyMDEzMVowLzEtMCsGA1UEAxMk
N2IyNTUzYmEtNjg1Yy00M2JkLThhZDYtMGNiNjA1OTg3NWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOvcc2VktQlGY00DEdp77YnO0l58s4k+9SJ1
TUyjicMYntosjwskK/POsZzpQAR7XWiTZ3KifWyFjQPVCvf1sUZ9c6gTnmaas75t
aezCVbzB8m0DG/hmwjoZci6FV9aTHvmxG4eKIRX5koJOm6aY091MBJ50pzzpLqJ+
gJPOqKVFgayYl6QN3pLQu5BuKIKf6GuEw0v1DPwQ7Itso5K3ECZivEY98BDfF13i
J55TCUfhvbmqzXdPJijpecoy4b21nzu/68ovwjpJ0JFmVMpXiIlcl0/OzjLfkQrw
HEarZRdgw185DrUftiZmxcR4bHOJZvTUVo8lSECVuToF2vR0bwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOUxASnHuymTJOoHcHpD776obOW7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGU0NDFjODctYWZjYi0z
ZTUzLTk4YzUtNGE4MjhjOTAzMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEdgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHmhgLEn4MyaLMXFd1uXp874HA3USgfWGHcO3mAYTt4zO6X/rBtOAIoj
uzfzl+693cingwOeNFZ8FBnRJJmhVNDtOy8rL9+HPo8r0pZiEMwav5816Gcp2KN5
YoKgyTCmWTO7duqzE7P1w0i2nWo9vKjoRyh3ECXrMtaj9scLG+sz/6de6jC2cqYl
urh7Jsc4wc36iJMgQ4M1FxMWlAYrZTtKfwE6gb40ocIDaRkYyzK5MstUosXb6YR2
5/m7CfTEeXcXXL/FMONZCbUuiV1mzH6panBwti2xjiD0m+WhqALbB8nIndUtri4o
IiIag4nQ8XtOd89HlOUdHTQzJVeYzRI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:10:32 2025 by rpki-client