Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1fe2b666-cc96-3a3b-b4e3-11cc28554a08.roa
File: 1fe2b666-cc96-3a3b-b4e3-11cc28554a08.roa (raw, json)
Hash identifier: g2Dq928rUoL/61kfxB8KE6Jby/HVe0gnmna6Fekeni4=
Subject key identifier: 07:FF:34:17:6C:1B:96:80:17:F5:84:D0:DC:B5:C5:D4:64:8E:8E:7A
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A996C7966C17CE3A721BB00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1fe2b666-cc96-3a3b-b4e3-11cc28554a08.roa
Signing time: Wed 11 Dec 2024 02:19:58 +0000
ROA not before: Wed 11 Dec 2024 02:19:58 +0000
ROA not after: Tue 11 Mar 2025 01:19:58 +0000
asID: 13335
IP address blocks: 172.69.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:99:6c:79:66:c1:7c:e3:a7:21:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 02:19:58 2024 GMT
Not After : Mar 11 01:19:58 2025 GMT
Subject: CN=399050c5-a1b2-4f35-a436-5b1d52610400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:74:d4:30:65:fb:f5:2c:3a:ce:7a:88:6a:7c:
74:4c:9a:ed:bc:f5:b1:ea:c7:5e:58:72:71:46:74:
07:f8:10:83:89:9b:e8:98:40:2c:c1:4d:76:80:2e:
07:44:1f:b9:fd:e7:f8:e2:d0:9f:7e:a7:e6:7f:88:
56:e2:d2:ab:e2:c0:b8:d4:69:7c:d8:34:0b:67:65:
dc:d6:9b:d2:cc:81:0a:53:07:10:42:f8:a7:c7:bc:
47:f4:c7:1d:f4:15:15:92:df:68:47:ab:a8:d9:90:
8a:03:8f:ee:b3:9d:51:14:c6:94:c8:d1:bf:37:bf:
e1:4f:31:85:08:90:d7:3c:4e:83:5f:f4:01:52:1f:
af:8b:15:83:8d:46:27:62:e6:6e:0e:9f:86:a6:f7:
5c:6e:be:de:67:d5:01:bd:e3:3c:14:2e:63:33:c3:
d9:36:0e:4c:d6:ba:cd:7f:f5:1e:7b:27:7a:f5:7d:
ca:1f:de:41:65:08:ae:d1:ca:90:56:b1:d9:b9:12:
3e:c9:ae:cb:1f:6d:28:3b:db:1e:b8:f2:05:0f:35:
f8:d8:b1:98:9e:f7:85:c2:2c:1a:2e:24:57:33:cc:
15:c8:68:f6:e0:d7:c0:dd:5c:0c:5f:d5:38:be:51:
32:c7:0f:81:09:0e:b8:4e:ba:f4:d6:c0:72:25:37:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FF:34:17:6C:1B:96:80:17:F5:84:D0:DC:B5:C5:D4:64:8E:8E:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1fe2b666-cc96-3a3b-b4e3-11cc28554a08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:0b:a4:c4:20:1f:23:dd:a7:e1:63:1f:cc:0d:08:c8:2c:c4:
8a:58:a1:f4:26:78:28:d6:a9:81:69:0e:45:eb:5b:c7:8c:da:
88:45:6d:5b:aa:f8:05:88:0e:b0:cf:0e:ac:19:ef:1f:f2:69:
dd:b3:ce:a1:24:91:3c:11:e8:60:a4:fa:6b:4a:37:7d:8d:5b:
b5:8b:8f:65:eb:23:45:31:d6:76:ea:dd:df:a7:81:8c:5f:de:
79:d0:87:b4:26:14:ff:71:f8:46:62:8c:9e:ae:4a:6f:be:8f:
0c:f4:4b:46:d0:96:45:ad:49:a3:ec:aa:c8:f4:34:37:a7:45:
27:20:a3:7c:c1:26:e2:76:79:34:d7:44:2f:ab:53:29:d0:b0:
5e:ec:41:b5:0a:50:10:1d:32:0e:02:e0:4b:54:01:23:c0:9b:
84:68:3d:a8:cc:92:47:08:d5:ba:97:b0:0c:68:ea:f2:3d:1b:
7c:02:f1:92:48:33:34:ec:09:3c:f1:66:1c:f3:9a:a1:be:5e:
25:2b:ee:76:2f:34:ea:ff:6e:a5:1e:90:cf:de:d4:9b:5d:32:
01:e1:e0:b1:2f:5b:bc:fe:09:c0:ad:89:4c:07:7d:f8:43:37:
92:aa:6c:ff:4e:1a:18:9e:7a:e5:44:8e:ae:34:1e:00:bd:f8:
cc:e4:86:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:19:20 2025 by rpki-client