Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ed42e92b-74d6-3da8-9e3e-28352097104d.roa
File: ed42e92b-74d6-3da8-9e3e-28352097104d.roa (raw, json)
Hash identifier: xdoA9kiFp3M3RAp6cmzkjGC8v+MTuZRO/2+GwIlynjg=
Subject key identifier: 49:EF:8D:A3:DC:A2:11:25:5D:9E:D6:E2:C4:57:90:D8:1B:A9:DB:FC
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848283F0232A6A9C2299A841200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ed42e92b-74d6-3da8-9e3e-28352097104d.roa
Signing time: Tue 10 Dec 2024 06:06:11 +0000
ROA not before: Tue 10 Dec 2024 06:06:11 +0000
ROA not after: Mon 10 Mar 2025 05:06:11 +0000
asID: 13335
IP address blocks: 172.68.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:3f:02:32:a6:a9:c2:29:9a:84:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 06:06:11 2024 GMT
Not After : Mar 10 05:06:11 2025 GMT
Subject: CN=eae4b368-5626-48fb-8a21-c703db319122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9f:11:41:61:f3:e3:b7:fc:82:77:a4:56:07:
aa:df:e3:d5:37:4a:c5:9d:48:54:5f:61:97:b5:ec:
86:f5:0d:ee:64:e1:05:e7:1b:7b:b5:4b:13:ad:f6:
fc:80:29:bc:2a:a2:e6:cd:d1:32:60:35:35:96:b0:
77:7a:b3:44:95:bf:5a:58:ca:9f:49:40:e3:24:87:
98:7c:f9:bd:79:91:18:ef:2e:84:98:f2:7d:4a:aa:
8d:af:d2:ae:2f:34:39:05:ae:19:cf:c1:71:76:59:
a8:e9:17:6d:d8:af:09:d3:a1:ae:0c:da:38:d4:c6:
16:64:3a:b7:ec:3b:c1:8d:89:c9:93:62:cd:3e:fd:
30:92:5e:0d:91:35:80:77:c9:42:7b:e9:36:a4:7b:
6b:1a:33:aa:ab:e3:0b:b1:6c:92:66:7a:e5:7f:81:
68:ff:0b:f2:cc:01:02:2d:33:a6:ba:6e:f6:21:35:
8f:35:e9:18:c7:76:2d:39:c8:50:27:38:32:61:e6:
5a:4e:70:a2:33:d1:6a:4e:b5:bf:e0:cc:80:57:c1:
f0:06:47:63:a1:6d:29:b6:33:8a:2c:39:3c:2b:cb:
ad:1c:d4:fa:c2:5a:73:82:ad:33:a4:d4:4d:18:0d:
73:86:b2:7a:cd:13:bd:01:2b:e2:ca:d2:79:98:66:
b1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EF:8D:A3:DC:A2:11:25:5D:9E:D6:E2:C4:57:90:D8:1B:A9:DB:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ed42e92b-74d6-3da8-9e3e-28352097104d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:e2:e2:bc:af:25:34:3e:aa:21:4a:83:a4:0d:d2:b5:71:81:
9f:64:f8:4a:9f:46:61:82:3c:41:f9:4a:f3:9a:74:c9:e1:3a:
cd:50:72:5e:95:b4:01:9a:5b:9e:15:36:b5:c5:7d:91:3e:91:
64:11:46:7e:36:11:c9:bb:4a:5d:72:4b:82:a0:1e:0f:0a:e1:
05:07:fb:6b:26:e4:03:0c:9c:61:20:73:4f:b3:5c:40:eb:a0:
73:ec:76:57:28:2e:f4:2f:98:98:9e:9f:38:f1:68:ac:be:da:
e0:7f:80:b9:d2:87:04:9d:72:13:1d:2d:79:38:86:f4:21:21:
2d:0a:88:28:78:04:c3:20:bb:dd:b4:8a:18:b1:df:1b:7f:41:
d1:bf:07:96:82:23:72:29:a0:f4:c4:33:80:2d:ab:4d:1b:5b:
41:7e:85:90:94:0d:e9:c7:e5:f3:60:96:eb:89:3b:2c:34:8b:
ae:10:b4:17:39:4f:e6:e2:1c:dd:4c:e8:4c:59:d3:67:ae:65:
6c:47:dd:61:cd:a8:cc:f6:01:8b:e8:35:cf:72:d2:44:b4:d4:
bc:57:d1:3a:43:22:ec:78:52:25:a7:ce:76:aa:fe:ec:0f:1e:
f5:a8:1a:7d:85:3a:81:27:39:9c:a3:59:83:a1:9a:56:0b:49:
7e:28:1d:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgoPwIypqnCKZqEEgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDA2MDYxMVoXDTI1MDMxMDA1MDYxMVowLzEtMCsGA1UEAxMk
ZWFlNGIzNjgtNTYyNi00OGZiLThhMjEtYzcwM2RiMzE5MTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ8RQWHz47f8gnekVgeq3+PVN0rFnUhUX2GX
teyG9Q3uZOEF5xt7tUsTrfb8gCm8KqLmzdEyYDU1lrB3erNElb9aWMqfSUDjJIeY
fPm9eZEY7y6EmPJ9SqqNr9KuLzQ5Ba4Zz8Fxdlmo6Rdt2K8J06GuDNo41MYWZDq3
7DvBjYnJk2LNPv0wkl4NkTWAd8lCe+k2pHtrGjOqq+MLsWySZnrlf4Fo/wvyzAEC
LTOmum72ITWPNekYx3YtOchQJzgyYeZaTnCiM9FqTrW/4MyAV8HwBkdjoW0ptjOK
LDk8K8utHNT6wlpzgq0zpNRNGA1zhrJ6zRO9ASviytJ5mGaxNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEnvjaPcohElXZ7W4sRXkNgbqdv8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWQ0MmU5MmItNzRkNi0z
ZGE4LTllM2UtMjgzNTIwOTcxMDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADbi4ryvJTQ+qiFKg6QN0rVxgZ9k+EqfRmGCPEH5SvOadMnhOs1Qcl6V
tAGaW54VNrXFfZE+kWQRRn42Ecm7Sl1yS4KgHg8K4QUH+2sm5AMMnGEgc0+zXEDr
oHPsdlcoLvQvmJienzjxaKy+2uB/gLnShwSdchMdLXk4hvQhIS0KiCh4BMMgu920
ihix3xt/QdG/B5aCI3IpoPTEM4Atq00bW0F+hZCUDenH5fNgluuJOyw0i64QtBc5
T+biHN1M6ExZ02euZWxH3WHNqMz2AYvoNc9y0kS01LxX0TpDIux4UiWnznaq/uwP
HvWoGn2FOoEnOZyjWYOhmlYLSX4oHRw=
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:25:49 2025 by rpki-client