Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00de3cfe-fd8f-31ab-8dc8-c5173251b9cd.roa
File: 00de3cfe-fd8f-31ab-8dc8-c5173251b9cd.roa (raw, json)
Hash identifier: AsGlOwXx0eMvjengqKrLo394WGjoeAbmA/4gEtddIfA=
Subject key identifier: 44:EA:23:2D:2F:14:AD:D9:D9:91:3E:BC:FA:1E:85:19:68:3D:9C:A8
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848279922507735B9EBBA5E9C80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00de3cfe-fd8f-31ab-8dc8-c5173251b9cd.roa
Signing time: Tue 10 Dec 2024 00:31:58 +0000
ROA not before: Tue 10 Dec 2024 00:31:58 +0000
ROA not after: Sun 09 Mar 2025 23:31:58 +0000
asID: 13335
IP address blocks: 172.68.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:99:22:50:77:35:b9:eb:ba:5e:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 00:31:58 2024 GMT
Not After : Mar 9 23:31:58 2025 GMT
Subject: CN=5b3c8e25-d198-4c85-b34f-97b360489ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2c:b1:3e:63:99:27:89:a1:9b:70:6e:ff:08:
55:72:cf:9d:88:b9:58:f3:21:3b:67:e3:8c:a5:5c:
26:b9:da:78:d9:31:a3:33:62:7f:62:76:0d:2e:6c:
5b:ed:df:d2:9f:b4:aa:8e:28:a1:30:00:26:fa:75:
fd:fd:f0:b8:d0:31:ee:dd:18:30:4d:17:b5:5f:25:
ae:24:7c:fa:3e:7a:ed:2e:89:29:0a:77:06:81:ce:
6a:fb:f5:cf:b4:ca:6a:ad:3f:ca:e2:a9:65:3f:c2:
1d:95:40:8b:d3:a6:e0:25:bf:38:0a:18:51:f3:4b:
e2:4d:15:f7:b1:22:53:73:d4:73:8e:28:a1:55:78:
b5:fd:87:65:28:2a:95:90:86:d9:82:de:98:ad:a6:
bd:16:ee:3e:ca:e3:e8:9e:52:09:20:7b:9f:89:ed:
37:2d:93:5b:75:bc:d1:ca:fc:cd:b3:46:69:ff:dc:
22:63:c1:98:c4:f9:71:3e:7a:4f:56:27:bd:4d:83:
29:10:74:c9:40:76:ac:e6:2f:b1:57:d8:56:80:16:
07:77:fe:57:79:1a:4d:3d:61:29:2a:77:cc:fa:c1:
e2:0a:3e:69:32:7c:d3:4d:94:3e:a8:c4:b4:4b:4b:
c7:5b:67:53:5c:5f:a3:20:2a:b6:c8:84:6f:6b:00:
a6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EA:23:2D:2F:14:AD:D9:D9:91:3E:BC:FA:1E:85:19:68:3D:9C:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00de3cfe-fd8f-31ab-8dc8-c5173251b9cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.19.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:84:1a:4b:c2:4a:bc:54:e2:f3:cb:b8:a5:a8:85:6d:99:32:
51:11:e7:b2:99:a4:a0:d9:5f:0f:3b:e2:e6:66:a6:bc:42:45:
d1:97:39:36:a4:7a:c3:4b:e8:e1:b3:e6:69:dd:b3:38:78:e3:
de:85:e0:c0:b2:78:6f:59:3a:4d:04:47:86:97:30:9e:b4:03:
a8:fd:4a:f0:c7:a5:72:76:80:7a:1b:db:06:b9:ed:0c:07:a8:
88:e4:9c:e3:4a:2e:7d:58:48:c5:55:fc:0e:6e:1c:36:e3:02:
6e:23:c1:d6:e6:5c:bb:59:1d:6d:14:7b:ff:71:1e:8c:1a:38:
83:22:e0:f6:8a:a6:9a:67:c7:7b:aa:43:cf:3e:4b:c0:b1:63:
3d:74:15:26:13:40:fd:d5:82:cf:4a:fd:1d:df:42:fa:2d:d5:
3d:2a:d8:b7:e8:a9:d1:91:88:32:db:7d:7a:83:aa:c9:ed:8c:
d5:da:92:12:59:cf:2a:d8:8b:50:0b:38:63:b3:b0:80:c0:a2:
68:cd:35:35:80:14:2d:29:04:41:02:aa:b5:d5:58:75:48:d8:
a0:aa:c9:da:42:8a:07:d9:88:83:77:7d:d6:10:29:1b:9a:46:
6b:3a:26:93:23:28:66:83:a0:45:b2:8b:9d:52:23:83:bd:df:
4a:50:2e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:42:52 2025 by rpki-client