Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/149f1bde-2647-3d5f-9359-93028886dc2e.roa
File: 149f1bde-2647-3d5f-9359-93028886dc2e.roa (raw, json)
Hash identifier: Lbxt2gJI1Z39+ZeOAP09HjTUps/mIBuSn929ccaDiVY=
Subject key identifier: AC:AD:43:05:9F:20:BB:54:D2:15:AA:BF:91:A1:25:5A:48:E2:8D:AE
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A9F4E685F5873CEC0209200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/149f1bde-2647-3d5f-9359-93028886dc2e.roa
Signing time: Wed 11 Dec 2024 02:31:49 +0000
ROA not before: Wed 11 Dec 2024 02:31:49 +0000
ROA not after: Tue 11 Mar 2025 01:31:49 +0000
asID: 13335
IP address blocks: 172.69.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:9f:4e:68:5f:58:73:ce:c0:20:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 02:31:49 2024 GMT
Not After : Mar 11 01:31:49 2025 GMT
Subject: CN=38c3163b-bf54-4a63-907d-c0fb4bf10fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:40:8f:25:02:24:4a:23:00:1f:3b:68:f7:f3:
ef:47:ad:bc:69:fa:31:50:fc:a1:7f:69:44:cd:98:
ad:d3:9e:3b:fd:5a:35:7c:00:79:13:fb:93:25:dc:
15:41:b8:9b:e4:a0:0f:e3:a0:2a:c3:63:07:2e:d3:
71:cb:72:d0:14:25:0c:fe:0a:7d:ea:cf:88:fb:03:
74:f3:b4:df:6a:6c:08:b6:2f:57:10:fc:00:5b:33:
da:5a:54:b8:fd:8e:4a:3b:21:3c:f3:36:81:a8:bf:
6c:60:98:16:8b:eb:f1:fc:90:d6:1d:b1:31:6a:fc:
d3:33:f4:23:a2:bf:04:a2:aa:76:64:44:95:fd:6a:
dc:5e:d7:11:8e:c2:cb:d7:aa:c4:8d:5f:44:37:56:
85:87:78:53:3f:46:26:f3:9f:76:b4:4f:aa:00:00:
22:06:de:b6:8c:4e:4a:c4:c3:3f:a9:05:fd:5e:04:
a4:aa:83:03:bf:c1:fd:e3:76:9b:d7:75:6f:0a:0a:
6f:9a:1f:2f:5c:f1:86:d7:96:94:e2:23:d7:5a:7b:
69:65:67:83:c9:41:aa:bc:98:7f:3c:60:d7:bb:bc:
b7:88:88:31:29:e0:ba:de:e3:d3:6c:e3:93:a3:c1:
cc:e2:88:88:f4:63:10:1b:e0:24:73:0f:c1:b8:46:
ce:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AD:43:05:9F:20:BB:54:D2:15:AA:BF:91:A1:25:5A:48:E2:8D:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/149f1bde-2647-3d5f-9359-93028886dc2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:94:e4:ba:59:d0:80:f4:8f:ef:8e:18:2c:3a:8e:20:80:c8:
52:bc:af:c3:00:92:69:d6:a5:4e:a9:99:9e:67:67:2c:3a:a2:
05:d8:53:4d:29:1e:97:40:2e:32:97:7c:04:b1:66:3c:cf:5e:
0d:61:2a:df:f3:28:06:aa:97:65:37:5d:e7:cf:8f:7e:83:45:
3e:ff:91:f5:97:fd:1e:01:e6:e8:8d:3a:d2:a0:6e:7e:23:34:
e8:97:61:bb:01:90:6a:8b:f1:e1:a4:0f:a2:93:2c:2b:52:77:
51:a2:5d:86:4b:d2:f6:44:0c:44:26:87:fc:4e:04:d2:b1:99:
95:45:c1:98:09:aa:7e:b2:d7:6e:ae:1f:29:21:d9:db:e2:b7:
04:fd:9c:a5:66:9f:39:d3:eb:fb:cb:40:87:ba:63:03:61:09:
ba:65:83:03:92:f0:bf:e2:b1:ae:d3:4f:c9:4d:41:64:31:00:
1a:da:5e:7a:55:1a:fd:ef:cb:1b:62:9a:af:6d:c1:bf:33:9c:
ed:44:04:ef:8a:eb:e0:8e:72:d5:f2:62:01:e3:fe:11:dd:50:
38:17:32:c6:c2:97:a0:f6:4c:39:81:30:39:b7:8a:87:92:a0:
e0:c4:f6:97:82:86:c3:d7:c9:25:32:0b:34:eb:50:9c:84:75:
a4:09:c3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:08:29 2025 by rpki-client