Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f3269968-3de1-3235-a981-7a86eccf015d.roa
File: f3269968-3de1-3235-a981-7a86eccf015d.roa (raw, json)
Hash identifier: 6h0Ja/muF5mM+j4hi/tiWC0de4Zk+L+rXDUxT/BmL50=
Subject key identifier: CF:F3:6C:66:E9:4A:37:5E:B1:06:B5:B2:5F:61:81:54:C5:57:BD:20
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584828217ED894B02E757BEA0480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f3269968-3de1-3235-a981-7a86eccf015d.roa
Signing time: Tue 10 Dec 2024 05:06:43 +0000
ROA not before: Tue 10 Dec 2024 05:06:43 +0000
ROA not after: Mon 10 Mar 2025 04:06:43 +0000
asID: 13335
IP address blocks: 172.68.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:21:7e:d8:94:b0:2e:75:7b:ea:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 05:06:43 2024 GMT
Not After : Mar 10 04:06:43 2025 GMT
Subject: CN=d1c97499-790a-4e48-8187-9d7e78e3169d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f1:c2:bc:09:bc:8b:03:82:15:e5:c8:f8:5a:
8f:83:6e:79:64:54:e3:65:4e:b6:77:b5:36:2a:87:
f5:37:a8:54:fe:1c:5e:ee:ca:69:a6:3b:be:5e:82:
6b:02:0e:f3:84:55:ed:91:a2:6d:85:b2:b2:f2:24:
b3:b6:fd:7c:67:c8:2a:78:30:4f:8e:1d:89:86:c5:
7b:1e:63:fe:bf:4a:18:50:47:5b:ce:30:f1:ed:31:
4f:3d:4c:05:0e:26:7a:dd:ba:96:ad:41:91:61:68:
3b:57:3a:01:de:0e:f9:e1:63:14:fd:74:9e:dc:fc:
2e:3c:96:74:37:5c:fb:f7:38:a5:27:d0:3e:c9:c9:
4b:b5:d9:16:8d:8b:cd:e0:07:3d:f0:5b:8f:c5:2f:
da:88:37:05:d4:f7:a7:34:1e:f9:b4:6c:57:a3:08:
c9:3c:8d:73:5c:0c:47:19:aa:10:df:d5:fc:48:05:
8e:d1:29:21:eb:f0:13:0b:c2:13:85:61:2d:69:69:
31:ac:50:c3:b3:c2:2e:98:09:5e:e4:19:75:a9:cb:
44:5a:bd:b9:0a:26:d3:3f:06:a0:9a:a2:a8:1a:de:
67:88:04:96:42:d1:ae:0a:e5:bf:35:60:bf:eb:0b:
ae:6e:56:17:d7:54:90:74:08:6f:66:23:fc:bb:0b:
6f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F3:6C:66:E9:4A:37:5E:B1:06:B5:B2:5F:61:81:54:C5:57:BD:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f3269968-3de1-3235-a981-7a86eccf015d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.12.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:7d:66:a7:ac:39:0c:da:2b:ba:45:ff:93:e0:86:a2:11:03:
da:f8:ca:b3:ba:8e:70:f3:1f:51:90:77:a0:8e:e3:74:25:9c:
1b:a7:ca:40:ed:fe:3f:65:e6:b1:e4:87:a0:ea:91:84:59:c6:
48:2e:7f:3a:35:cc:8b:87:ea:57:53:f7:38:ed:a2:bd:f3:1f:
f9:29:2f:3c:07:af:f0:87:68:c0:0a:34:cd:a9:f9:d5:57:9f:
fa:8b:95:56:a0:6c:e0:42:07:7e:9b:16:c2:c9:f0:aa:c6:4d:
b5:c8:28:fb:be:0f:05:9f:81:01:10:92:7a:8b:6b:fb:d5:d1:
c7:40:a5:66:f8:e8:7b:9a:18:27:c4:57:13:ed:1e:51:32:05:
7c:ed:96:e6:90:24:26:c4:23:b5:e7:54:99:b7:7d:27:dd:80:
d0:ee:71:f6:7e:0b:d4:9d:19:2e:4b:5f:2c:2c:b7:ec:fc:89:
fc:66:b6:49:d2:a3:f4:16:d6:56:1f:f4:ca:5f:8d:d3:50:bb:
bb:6a:7f:41:96:20:73:e2:63:aa:d2:fa:ee:78:7e:3d:34:9a:
b4:52:a5:ba:d8:f3:bc:06:d9:26:bd:28:dc:a5:70:d2:1e:9f:
5b:15:db:9b:7e:d5:be:d3:9f:f9:fb:bd:43:56:e7:0a:25:5d:
0d:27:94:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgoIX7YlLAudXvqBIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDA1MDY0M1oXDTI1MDMxMDA0MDY0M1owLzEtMCsGA1UEAxMk
ZDFjOTc0OTktNzkwYS00ZTQ4LTgxODctOWQ3ZTc4ZTMxNjlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/HCvAm8iwOCFeXI+FqPg255ZFTjZU62d7U2
Kof1N6hU/hxe7spppju+XoJrAg7zhFXtkaJthbKy8iSztv18Z8gqeDBPjh2JhsV7
HmP+v0oYUEdbzjDx7TFPPUwFDiZ63bqWrUGRYWg7VzoB3g754WMU/XSe3PwuPJZ0
N1z79zilJ9A+yclLtdkWjYvN4Ac98FuPxS/aiDcF1PenNB75tGxXowjJPI1zXAxH
GaoQ39X8SAWO0Skh6/ATC8IThWEtaWkxrFDDs8IumAle5Bl1qctEWr25CibTPwag
mqKoGt5niASWQtGuCuW/NWC/6wuublYX11SQdAhvZiP8uwtvjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM/zbGbpSjdesQa1sl9hgVTFV70gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjMyNjk5NjgtM2RlMS0z
MjM1LWE5ODEtN2E4NmVjY2YwMTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEQMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIJ9ZqesOQzaK7pF/5PghqIRA9r4yrO6jnDzH1GQd6CO43QlnBunykDt
/j9l5rHkh6DqkYRZxkgufzo1zIuH6ldT9zjtor3zH/kpLzwHr/CHaMAKNM2p+dVX
n/qLlVagbOBCB36bFsLJ8KrGTbXIKPu+DwWfgQEQknqLa/vV0cdApWb46HuaGCfE
VxPtHlEyBXztluaQJCbEI7XnVJm3fSfdgNDucfZ+C9SdGS5LXywst+z8ifxmtknS
o/QW1lYf9MpfjdNQu7tqf0GWIHPiY6rS+u54fj00mrRSpbrY87wG2Sa9KNylcNIe
n1sV25t+1b7Tn/n7vUNW5wolXQ0nlJs=
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:18:01 2025 by rpki-client