Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0da0d0c9-ccab-3821-845a-dd0fdb86f429.roa
File: 0da0d0c9-ccab-3821-845a-dd0fdb86f429.roa (raw, json)
Hash identifier: oe9xT+TzDXqUfzI1BdiiIS68ytYqY+7/342U4i8Y9uU=
Subject key identifier: 30:DD:8D:E9:2C:0A:4C:BC:0F:FC:EF:5D:98:DB:18:0F:84:84:AD:BC
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584828209D5E30EB87B05FB904C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0da0d0c9-ccab-3821-845a-dd0fdb86f429.roa
Signing time: Tue 10 Dec 2024 05:04:56 +0000
ROA not before: Tue 10 Dec 2024 05:04:56 +0000
ROA not after: Mon 10 Mar 2025 04:04:56 +0000
asID: 13335
IP address blocks: 172.67.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:20:9d:5e:30:eb:87:b0:5f:b9:04:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 05:04:56 2024 GMT
Not After : Mar 10 04:04:56 2025 GMT
Subject: CN=455d8931-ecb3-4b64-8579-d0f45e792e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f1:f4:e9:6d:94:d9:5f:6c:92:ae:da:0c:c6:
37:6f:65:6d:b2:a6:c4:b6:ae:04:d7:3c:20:9c:22:
64:b2:7f:d8:da:da:68:6d:48:e3:da:49:ca:a5:57:
34:2f:08:ea:73:6d:8e:38:a0:6b:e1:82:0c:d8:c5:
8b:ae:24:35:be:d5:68:f8:97:46:97:a1:19:f3:97:
1c:f4:9b:9d:75:91:7b:98:a0:5a:da:9c:09:6c:4b:
5b:54:06:b5:ad:c2:30:eb:ee:97:fb:8b:d4:45:fd:
1d:27:18:7e:73:1d:3a:88:8f:01:ea:f3:98:b6:2e:
09:01:22:40:1c:92:8a:66:24:2a:65:06:1c:2e:ff:
15:f2:5e:c5:ec:0a:0e:d6:76:95:2e:55:ca:6c:49:
bd:af:2f:99:33:03:f3:c4:30:ab:de:cb:3a:ec:c9:
0e:af:02:63:41:3c:27:55:aa:e5:29:4e:d8:5b:d9:
fe:1f:f4:56:f1:5c:12:cf:2b:bd:6a:30:6f:03:32:
79:b4:19:3f:cb:da:f4:9e:e5:bd:3a:4c:a6:97:b4:
06:e0:bf:2e:42:b6:a7:49:b3:de:f5:31:7c:dd:61:
4e:6e:3a:63:8d:4d:3b:ee:a1:95:2b:83:92:88:c7:
1c:da:c7:9e:ec:f6:41:a0:79:96:97:27:f3:38:92:
87:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DD:8D:E9:2C:0A:4C:BC:0F:FC:EF:5D:98:DB:18:0F:84:84:AD:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0da0d0c9-ccab-3821-845a-dd0fdb86f429.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.67.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:34:44:fe:50:73:42:2e:c5:9c:35:07:34:0f:d2:be:4b:a6:
8c:d7:9d:b8:5b:fe:eb:78:6a:b5:26:a9:8a:27:a1:9b:77:6e:
68:6b:02:91:cb:d7:09:a3:f6:ae:47:c1:af:99:12:72:0b:3a:
0e:a2:c3:96:ae:fb:72:23:74:9f:93:f0:4a:66:b1:79:c7:9e:
37:47:f2:d7:e5:d9:66:e1:32:9a:31:99:73:e0:96:c1:9e:5c:
58:d7:42:ea:82:e2:b5:a5:86:8e:4b:57:41:67:9b:4c:5f:e9:
02:7b:c5:1c:61:7f:b3:9c:2d:04:5d:3c:ee:47:77:8b:12:f1:
7b:69:83:4f:ed:b3:c9:5b:2a:39:69:e1:93:61:f9:27:47:ec:
79:41:4f:55:1d:9b:46:2c:0f:12:16:38:cf:b3:bd:9c:51:70:
47:a9:13:1c:5a:9f:ff:34:07:f5:9b:d9:8a:11:89:f4:c8:91:
e9:5a:b7:4c:0d:5c:9c:9c:d2:80:4a:2d:91:29:3f:60:5b:a2:
5d:82:09:e2:61:33:a1:6a:f5:4e:46:00:31:cc:aa:eb:9b:83:
94:2a:b0:1b:31:30:f8:0d:51:74:ea:8a:e3:e6:57:fe:3a:7a:
05:22:cc:10:50:00:a7:3d:af:03:7a:8e:d1:2e:72:04:4d:e3:
e8:19:73:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:36:11 2025 by rpki-client