Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e1db1ef5-8875-37b0-a87d-5f3f1abd148d.roa
File: e1db1ef5-8875-37b0-a87d-5f3f1abd148d.roa (raw, json)
Hash identifier: zAZMeaGYZRv8aLNVCCgVLqKNOv/rz1cw7kJkGc6yZIE=
Subject key identifier: 2D:44:35:42:5C:91:33:D5:54:0B:55:A2:0B:5F:EC:89:85:C3:9B:6A
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A900A1CEFDA2C191DC74F80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e1db1ef5-8875-37b0-a87d-5f3f1abd148d.roa
Signing time: Wed 11 Dec 2024 02:01:04 +0000
ROA not before: Wed 11 Dec 2024 02:01:04 +0000
ROA not after: Tue 11 Mar 2025 01:01:04 +0000
asID: 13335
IP address blocks: 172.68.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:90:0a:1c:ef:da:2c:19:1d:c7:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 02:01:04 2024 GMT
Not After : Mar 11 01:01:04 2025 GMT
Subject: CN=784ae171-7901-45c5-b57a-d87eb00d08c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dd:23:d6:8b:1e:0c:44:81:7b:fa:ec:fd:a3:
4a:c6:09:86:dc:ce:c6:1a:33:41:be:65:b3:bf:98:
d2:3d:1d:36:a7:ff:71:ee:71:cc:c4:93:3c:b0:e9:
ab:a3:ec:0c:7c:21:5e:4d:83:dd:c4:e5:e6:79:47:
52:69:7b:33:04:30:38:4a:ce:b6:86:c5:72:8f:aa:
1e:af:82:a1:ff:55:85:6d:f3:0c:32:70:e7:f3:1a:
7f:30:e5:ba:61:fe:da:55:c9:20:e2:d5:b0:52:02:
e8:27:46:cd:96:06:4f:4b:cf:45:57:ca:ea:cd:a3:
10:9b:df:8a:ee:3a:61:21:ff:9a:10:f8:45:7a:65:
2b:42:28:bd:36:69:6c:e0:9e:fa:ac:dc:c9:cc:09:
24:8b:b3:84:ed:ad:07:fc:73:de:63:55:64:1f:d1:
a1:11:7e:40:6c:50:f9:49:8b:1f:6d:3f:54:29:f6:
a8:83:56:d1:a4:26:3c:fd:65:b6:e8:58:5f:6f:ed:
12:24:2e:64:00:a7:e4:03:2d:70:20:41:31:79:08:
0f:ff:f1:e1:e7:1b:a2:dd:13:3e:34:5b:f9:df:81:
62:9f:09:6c:bc:47:1e:9a:19:32:ea:45:4b:0f:59:
73:ca:f2:bb:78:a6:55:ed:8c:b9:bf:b2:ea:27:7e:
2f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:44:35:42:5C:91:33:D5:54:0B:55:A2:0B:5F:EC:89:85:C3:9B:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e1db1ef5-8875-37b0-a87d-5f3f1abd148d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:2e:2c:36:18:2b:9e:a2:14:f9:df:a1:1c:52:ef:f7:fb:48:
3c:fa:1a:ce:1f:26:01:1e:44:4b:76:8e:6c:8d:15:2b:b1:4a:
18:e9:cc:69:ec:d9:af:2e:e8:76:07:a1:a3:c7:d9:ac:e2:17:
46:91:0a:53:85:22:68:59:58:55:93:69:5f:69:c2:ec:1d:77:
98:4d:b7:c9:2f:a8:03:eb:41:d4:f1:d3:02:1d:82:d3:7f:e0:
d9:b9:57:67:20:f3:f6:6b:ca:32:0d:63:87:78:b9:8d:c2:ad:
17:5c:50:d3:d6:a0:18:a8:e1:12:c3:e3:3a:33:ad:ac:4f:61:
bb:5f:d7:25:7d:1e:c3:62:51:77:de:bc:8c:db:0a:cf:65:e2:
84:0f:e8:28:f6:fe:25:fc:a5:9d:83:ec:d8:f7:a8:72:5c:f5:
9f:29:c1:7c:a5:16:56:76:02:41:64:6b:0a:a0:13:bd:8d:24:
1e:3c:b0:f2:b7:a4:00:48:c9:85:e2:2d:d7:5a:01:9d:77:7d:
b2:e4:f9:bd:f2:29:29:42:5a:7b:f2:69:30:ce:ed:7e:e3:08:
85:79:af:29:c9:3f:37:a8:e9:a4:27:15:8b:1a:69:44:22:73:
13:25:43:fb:94:24:fc:d3:5c:58:7d:bf:04:f0:b1:3e:a9:99:
4d:37:3b:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgqkAoc79osGR3HT4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMTAyMDEwNFoXDTI1MDMxMTAxMDEwNFowLzEtMCsGA1UEAxMk
Nzg0YWUxNzEtNzkwMS00NWM1LWI1N2EtZDg3ZWIwMGQwOGMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn90j1oseDESBe/rs/aNKxgmG3M7GGjNBvmWz
v5jSPR02p/9x7nHMxJM8sOmro+wMfCFeTYPdxOXmeUdSaXszBDA4Ss62hsVyj6oe
r4Kh/1WFbfMMMnDn8xp/MOW6Yf7aVckg4tWwUgLoJ0bNlgZPS89FV8rqzaMQm9+K
7jphIf+aEPhFemUrQii9Nmls4J76rNzJzAkki7OE7a0H/HPeY1VkH9GhEX5AbFD5
SYsfbT9UKfaog1bRpCY8/WW26Fhfb+0SJC5kAKfkAy1wIEExeQgP//Hh5xui3RM+
NFv534FinwlsvEcemhky6kVLD1lzyvK7eKZV7Yy5v7LqJ34vBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC1ENUJckTPVVAtVogtf7ImFw5tqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTFkYjFlZjUtODg3NS0z
N2IwLWE4N2QtNWYzZjFhYmQxNDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrES8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMMuLDYYK56iFPnfoRxS7/f7SDz6Gs4fJgEeREt2jmyNFSuxShjpzGns
2a8u6HYHoaPH2aziF0aRClOFImhZWFWTaV9pwuwdd5hNt8kvqAPrQdTx0wIdgtN/
4Nm5V2cg8/ZryjINY4d4uY3CrRdcUNPWoBio4RLD4zozraxPYbtf1yV9HsNiUXfe
vIzbCs9l4oQP6Cj2/iX8pZ2D7Nj3qHJc9Z8pwXylFlZ2AkFkawqgE72NJB48sPK3
pABIyYXiLddaAZ13fbLk+b3yKSlCWnvyaTDO7X7jCIV5rynJPzeo6aQnFYsaaUQi
cxMlQ/uUJPzTXFh9vwTwsT6pmU03O8I=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:49:10 2025 by rpki-client