Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1985b8ae-4049-3a66-a92f-f098549f6d2c.roa
File: 1985b8ae-4049-3a66-a92f-f098549f6d2c.roa (raw, json)
Hash identifier: TCZt+YxxotxbvhQRSwRMENrdczvcZluO68LROOyCssA=
Subject key identifier: 89:CE:0B:CB:3C:E5:86:0F:0C:93:58:62:40:D4:F0:7D:EB:07:1A:86
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A8CF7A1DDEC18371E6B6EF0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1985b8ae-4049-3a66-a92f-f098549f6d2c.roa
Signing time: Wed 11 Dec 2024 01:54:52 +0000
ROA not before: Wed 11 Dec 2024 01:54:52 +0000
ROA not after: Tue 11 Mar 2025 00:54:52 +0000
asID: 13335
IP address blocks: 172.68.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8c:f7:a1:dd:ec:18:37:1e:6b:6e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 01:54:52 2024 GMT
Not After : Mar 11 00:54:52 2025 GMT
Subject: CN=b67c03ae-d42f-45db-b86b-95b8065097b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:10:23:a7:f5:0b:4f:1b:18:a2:87:cb:ac:14:
2e:49:bb:e1:1d:3f:c2:a6:06:55:63:e0:7f:fe:d2:
f3:e0:f2:ee:3c:e0:d6:b7:99:b8:92:91:69:66:78:
87:6c:71:a0:be:44:eb:cb:d0:98:1e:c7:d3:4b:ef:
2d:7f:5d:08:47:b5:39:5e:5d:9c:8e:67:1a:51:cc:
67:18:bc:b9:43:b6:65:77:e8:eb:f4:c1:90:94:22:
d1:69:a6:5c:cb:c6:34:98:a0:51:4a:c4:98:14:51:
48:a4:23:a8:56:e6:77:c7:21:c6:07:fc:4b:c6:27:
36:05:1c:86:4f:8c:c7:b2:cb:11:88:9f:38:bd:ba:
fc:b5:cb:b0:4e:61:0e:8d:d0:fc:1e:c2:cb:9e:d9:
21:25:23:6a:ff:04:d1:fa:0c:f2:00:f8:92:bf:36:
a0:53:55:c1:4d:dc:5f:0e:88:7c:04:0b:83:19:17:
8d:25:e2:63:de:44:bf:48:3c:bd:c8:e9:e1:4a:74:
36:94:11:63:79:76:cd:12:84:c5:9f:d7:66:1f:06:
9f:7d:b5:1f:e6:d3:26:bf:ab:af:b5:ab:bc:22:f5:
a9:e4:f5:13:59:89:3a:ed:0b:c8:6a:9e:92:73:a6:
bf:b3:60:19:47:8a:fd:6c:ed:1f:cf:3b:64:2f:7a:
fe:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CE:0B:CB:3C:E5:86:0F:0C:93:58:62:40:D4:F0:7D:EB:07:1A:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1985b8ae-4049-3a66-a92f-f098549f6d2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.134.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:9e:a9:33:f5:b2:9b:3a:59:a2:5f:db:5a:8a:d3:1f:04:5b:
e7:ea:7c:a0:ff:b3:55:40:0f:bb:f8:60:9d:79:6d:de:6e:ea:
c6:67:ae:8d:5d:1a:49:2d:b3:32:f9:74:77:79:48:6a:ef:fb:
21:d6:db:57:03:a0:62:0a:3e:c0:5d:29:e4:25:cc:ee:a8:b9:
df:06:36:19:07:90:f7:9f:8a:74:f7:64:fa:71:ab:7c:6d:99:
cb:4c:ea:d6:6a:bd:70:54:c8:a6:ca:b3:09:81:85:91:38:cf:
56:1a:a3:45:9a:ce:41:68:3b:ac:a3:dd:e0:d9:db:3a:1a:e7:
af:d4:6e:ed:ba:d5:41:cb:67:88:89:14:98:18:b4:26:37:55:
56:a1:ad:de:d0:63:1a:33:89:fb:6e:10:b0:24:59:89:46:9b:
ac:6a:ef:1a:68:d3:10:9e:77:02:44:d4:7a:c2:bc:c4:97:fe:
7b:db:a3:fd:98:84:a4:f7:bb:8a:de:19:3e:65:4f:52:4b:79:
8b:08:c4:3d:96:e3:45:17:62:24:fb:3b:d5:89:d4:58:6d:91:
3b:c8:ed:8c:39:8d:83:68:de:a6:73:31:17:8c:06:40:80:88:
6f:56:e1:b1:c5:a5:91:02:02:eb:0b:02:ac:2f:3b:38:1b:ac:
98:35:d7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:45:28 2025 by rpki-client