Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1ba3c82e-c618-3e6f-aa6e-800ddac7f73b.roa
File: 1ba3c82e-c618-3e6f-aa6e-800ddac7f73b.roa (raw, json)
Hash identifier: iT2jQwV5NjIyOU8whxv5vjwLvlThVSYd+Zah1qlwQpk=
Subject key identifier: FB:ED:28:34:68:D9:0E:77:29:B1:9F:5A:00:23:2D:CE:E1:E4:75:18
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A9B4C5D7743029EB6CC9F00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1ba3c82e-c618-3e6f-aa6e-800ddac7f73b.roa
Signing time: Wed 11 Dec 2024 02:23:45 +0000
ROA not before: Wed 11 Dec 2024 02:23:45 +0000
ROA not after: Tue 11 Mar 2025 01:23:45 +0000
asID: 13335
IP address blocks: 172.69.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:9b:4c:5d:77:43:02:9e:b6:cc:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 02:23:45 2024 GMT
Not After : Mar 11 01:23:45 2025 GMT
Subject: CN=383d00b2-2992-4e8a-8741-551c013fbe5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:0f:a3:ec:dd:88:aa:5e:a3:4b:aa:71:d3:
af:f4:fb:83:d1:b2:43:43:bc:13:2b:c8:c1:ec:57:
30:e7:45:1d:cd:71:07:f1:29:19:59:3d:65:01:44:
9d:ca:78:db:12:01:c8:e2:0d:90:74:7a:79:8e:73:
20:c9:43:37:90:d8:91:59:e7:33:30:3f:7b:1f:66:
7e:ca:7c:3d:9f:b3:d8:c9:9c:84:19:9f:ef:19:fa:
df:a6:13:48:61:bb:b3:9d:67:4f:fe:f5:dd:bc:8d:
06:a0:ff:14:82:02:de:c0:78:92:c5:b1:b0:2c:6e:
93:26:b0:5f:c2:24:b1:19:7b:ae:ea:3d:8a:c0:70:
08:03:25:06:12:ec:1b:8f:e4:ed:cc:3c:41:96:d5:
1c:ad:bf:e5:e0:28:39:d5:1d:09:7e:ab:8f:43:32:
65:2c:fe:a6:57:c6:bb:e5:2c:78:5a:f8:00:af:c4:
55:67:24:cb:93:e9:f1:db:0e:6c:aa:b8:27:a1:52:
a6:a7:3d:ab:1c:2a:a3:19:7b:06:5e:2f:b9:31:d9:
00:c2:6e:43:50:4c:a1:8c:32:00:69:73:92:1e:e0:
08:cb:e2:97:c6:49:88:32:e9:24:94:1b:43:50:ba:
78:b5:8f:ac:8b:75:c4:13:51:2a:9c:1d:d3:ce:00:
89:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:ED:28:34:68:D9:0E:77:29:B1:9F:5A:00:23:2D:CE:E1:E4:75:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1ba3c82e-c618-3e6f-aa6e-800ddac7f73b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.41.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:d9:7b:d7:0c:c7:0b:3d:49:1f:0c:6f:38:3d:de:73:82:be:
d4:35:49:56:83:0b:3f:5c:91:68:0f:53:81:a3:d0:78:c2:e0:
d1:87:84:8e:35:17:d8:db:d1:cf:94:c0:02:7e:ce:94:b4:7e:
34:3f:83:e2:ca:b0:95:12:a3:d0:4c:4a:08:3e:b1:9f:fd:fd:
1b:15:5d:d3:c3:64:bf:78:79:00:28:91:b5:29:31:35:4d:cf:
fb:8d:7c:20:08:7c:fb:7e:10:d2:d3:b2:31:14:69:63:b2:37:
96:b1:4b:5b:b9:86:7c:f3:5e:2c:51:5b:a4:67:65:3f:fa:5b:
f6:b7:3a:5e:04:87:f9:09:f9:31:ba:03:da:1a:71:ea:54:33:
f7:33:09:e7:2b:0b:ec:57:6b:8c:29:b7:8c:2c:d3:71:4f:32:
24:7d:c2:46:4f:04:c3:c3:69:ec:7d:be:00:54:23:cc:5c:1a:
af:c4:fd:90:a1:6a:95:d6:e5:c8:5e:02:29:88:ae:c8:06:08:
79:2c:ab:6b:a1:9a:f5:24:b4:a2:ba:43:b4:3e:c6:78:0c:b6:
7d:92:12:dc:21:7c:b2:27:56:7d:bf:29:53:30:3e:82:a5:19:
7f:fc:d9:c1:fa:2b:81:99:d5:c6:ec:36:0b:52:66:b1:ce:f9:
9b:5b:01:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:40:23 2025 by rpki-client