Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/e8330ab1-6a1f-3e4b-936f-8089f40b8192.roa
File: e8330ab1-6a1f-3e4b-936f-8089f40b8192.roa (raw, json)
Hash identifier: jDc4bmRQtrFZ0ep5bPWZzb8iQOH4pjp61zSnxGIYtYE=
Subject key identifier: 86:78:43:DC:D1:3E:15:D5:E5:B3:69:36:43:BE:E7:73:3C:7C:95:63
Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial: 010D0C9F43285847FF4A7D893F2C5A2DE3933500
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/e8330ab1-6a1f-3e4b-936f-8089f40b8192.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 21928
IP address blocks: 172.56.0.0/16 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:7d:89:3f:2c:5a:2d:e3:93:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=7a4c167f-42e9-4227-9e68-a8a0215be7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0e:24:c9:4d:a5:7e:be:d4:3f:ef:11:d5:d2:
1c:f6:f6:65:66:2f:39:f6:f5:aa:bb:b5:d8:d8:5f:
ad:fc:d3:59:34:93:44:3d:8d:02:d9:81:5d:75:dc:
52:9c:03:57:ff:79:2d:ba:23:ac:93:96:78:17:a8:
79:24:5d:3e:5d:ac:94:12:06:cc:67:3c:34:fa:3b:
41:d7:36:b0:03:34:f0:3e:a9:53:fe:13:c5:80:fe:
ed:43:85:f1:f6:c0:df:0d:52:a0:46:70:b0:6f:5f:
48:32:b6:73:f2:0c:1d:3b:32:38:34:51:2a:54:5c:
c6:c6:91:4a:3a:29:7d:87:15:07:4d:23:d2:0d:94:
bc:13:2a:85:8d:77:41:a9:8e:7d:eb:35:4f:7f:2b:
56:a2:bd:59:20:80:89:29:44:9e:87:a8:8d:21:91:
dd:31:b0:34:65:0a:40:65:85:f8:70:b7:cd:f3:7a:
fd:93:b6:94:d3:45:be:3e:95:0d:1d:7e:35:1e:c3:
52:3f:1f:73:fe:dd:9d:bb:f5:66:78:a6:a9:0b:bb:
97:da:97:98:83:10:ba:dd:ac:28:da:9a:10:6b:cc:
88:8f:79:7a:ae:5d:31:fc:3b:64:68:d3:e5:1d:72:
7c:0d:ea:48:1a:89:fe:d7:47:c6:26:61:97:0a:bd:
b6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:78:43:DC:D1:3E:15:D5:E5:B3:69:36:43:BE:E7:73:3C:7C:95:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/e8330ab1-6a1f-3e4b-936f-8089f40b8192.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
X509v3 Authority Key Identifier:
keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
sbgp-ipAddrBlock: critical
IPv4:
172.56.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:99:30:4d:ca:79:b8:7b:dc:0c:0d:db:31:ef:37:8f:b5:3f:
ae:8a:38:a3:be:c6:b6:3e:a9:3e:f1:6c:ff:7a:23:70:b7:a0:
6b:2e:7f:52:8d:2c:0d:a7:75:f1:96:94:86:32:3a:7c:73:64:
f0:bf:04:dd:3a:d4:56:2f:1c:2e:b3:3f:85:a2:b8:a8:6a:22:
13:34:2e:3d:71:74:7e:3b:af:30:84:46:04:a8:7b:10:8a:2e:
20:e4:49:d1:a6:aa:3b:14:24:e4:fc:4a:77:ce:c6:25:3c:65:
70:74:63:06:f0:f2:36:b8:28:46:fd:61:97:f7:86:f7:a7:e2:
43:91:37:1c:4c:4c:ab:2a:b4:26:a6:dc:cc:63:45:a1:b0:0d:
d3:12:d3:6f:7a:f5:49:12:48:4d:ce:d1:8d:5e:c0:7f:64:aa:
40:b8:de:e5:0b:f3:43:68:60:7b:f4:a5:d0:2a:96:0f:fd:7c:
4b:e9:8d:27:db:55:75:37:a6:2b:af:63:dc:74:b2:74:39:e2:
24:7f:9d:23:6f:92:07:fe:d5:27:ec:0f:bb:48:e4:3f:ed:4e:
3d:88:37:d5:69:06:1a:fc:e4:1b:cc:81:2e:c9:5d:00:5f:92:
d9:c8:af:02:ed:b9:11:29:51:a7:25:2c:e1:c5:fe:cb:fb:e1:
89:f8:6a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:41:31 2025 by rpki-client