Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/08808117-e9bf-3f7c-997f-7dffa22721e2.roa
File: 08808117-e9bf-3f7c-997f-7dffa22721e2.roa (raw, json)
Hash identifier: fSlfxkaOtOOSpurmMjLEOs9e+8ANHdcWLhOVXcBu12E=
Subject key identifier: DD:05:09:B1:94:C1:5D:B3:F0:6A:91:07:EA:58:DE:7D:DD:93:EB:26
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848283FF48FBDC23BC43D7D2280
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/08808117-e9bf-3f7c-997f-7dffa22721e2.roa
Signing time: Tue 10 Dec 2024 06:08:05 +0000
ROA not before: Tue 10 Dec 2024 06:08:05 +0000
ROA not after: Mon 10 Mar 2025 05:08:05 +0000
asID: 13335
IP address blocks: 172.68.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:3f:f4:8f:bd:c2:3b:c4:3d:7d:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 06:08:05 2024 GMT
Not After : Mar 10 05:08:05 2025 GMT
Subject: CN=88b804c5-029f-4c1a-8145-49916e85254f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:76:6a:b3:a6:a7:8b:70:c4:59:b4:40:64:48:
41:f5:0a:89:76:b0:ad:f1:e4:13:7d:c2:84:3b:9f:
e3:68:1e:d5:de:13:54:5f:41:b1:8c:96:ee:4b:61:
e0:cd:0b:5c:df:0e:14:9f:06:04:39:1c:1a:4e:5f:
ab:87:76:16:bf:37:ab:ed:fb:e5:c1:73:3b:22:e3:
07:a5:20:37:69:1b:d2:15:93:81:08:be:cf:78:d7:
1d:20:28:8a:52:17:7f:cc:1a:29:09:d2:fb:75:4a:
9d:0b:0e:e0:ca:31:01:8c:a8:fe:ca:01:27:e4:9b:
ad:a0:4c:37:3b:f0:a8:c2:c1:f6:a3:50:b3:0d:65:
f4:17:28:cf:0a:4b:c2:8a:a4:ab:b5:19:1b:b8:14:
a7:17:8e:fb:a7:1f:32:9a:68:2b:11:db:01:30:92:
65:0a:fa:9f:b9:11:fd:1f:72:72:cc:44:f4:25:43:
36:4a:74:55:08:b5:b0:66:ce:b5:c1:dc:35:95:5c:
fa:eb:72:8e:04:2e:0d:19:b1:ea:33:99:ad:ce:94:
95:32:49:84:16:7d:f7:56:5a:5b:c4:30:0c:d1:49:
52:2f:54:4b:1d:55:85:9e:8d:ec:47:3b:52:7c:5a:
fb:1d:6f:0a:d4:df:7c:47:6d:15:ba:36:44:26:a8:
04:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:05:09:B1:94:C1:5D:B3:F0:6A:91:07:EA:58:DE:7D:DD:93:EB:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/08808117-e9bf-3f7c-997f-7dffa22721e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:a1:72:54:2e:8c:1e:34:57:4a:32:0f:28:db:7e:d1:4f:0b:
ac:70:51:6d:e2:42:e7:30:ca:2e:44:94:e3:b8:14:b6:74:59:
cd:c3:c5:0c:a9:ca:b5:96:ff:73:9b:21:9f:34:1f:a1:89:68:
a4:f6:0d:f9:29:68:96:99:6c:2d:06:95:da:b3:1f:99:45:c4:
0c:57:42:5e:e9:63:d5:66:37:df:cd:a1:e9:f0:a3:82:44:39:
a4:44:07:33:e6:54:af:9a:f3:76:8b:86:93:7f:18:d6:0d:9b:
33:68:89:e0:b5:60:d0:7a:97:82:9f:37:df:ae:86:b0:5e:d0:
28:34:be:60:59:7c:87:ba:58:a6:b7:49:d5:8b:b0:92:f4:c8:
01:d1:48:36:6e:54:c6:5e:af:98:bd:66:3b:4d:0e:34:e8:fe:
1b:33:b1:30:2c:53:fb:d3:53:52:1f:80:f3:81:30:82:71:69:
ef:1d:33:a2:1f:81:5b:80:7a:51:f7:fd:94:45:54:30:ee:15:
72:7b:6b:ea:7f:95:19:e6:86:01:d8:91:54:f8:e2:72:1e:d9:
2a:2a:b3:6d:b7:c8:80:81:df:36:fa:01:fe:67:e9:33:a0:a8:
b7:ea:81:f6:96:6a:d9:28:26:8c:cd:ea:fc:aa:87:df:68:56:
37:30:e0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:08:54 2025 by rpki-client