Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24623cb4-a137-3d76-a45c-126f643d62f1.roa
File: 24623cb4-a137-3d76-a45c-126f643d62f1.roa (raw, json)
Hash identifier: nfUUl9HyENN6wpv6Oq65m91oYZIsWf2pppisQmc0jJk=
Subject key identifier: 14:C7:AA:01:B6:E7:21:80:40:9A:2C:AA:D1:4D:AF:69:D1:95:A9:1D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A8F47CFF0F360745E4F0700
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24623cb4-a137-3d76-a45c-126f643d62f1.roa
Signing time: Wed 11 Dec 2024 01:59:32 +0000
ROA not before: Wed 11 Dec 2024 01:59:32 +0000
ROA not after: Tue 11 Mar 2025 00:59:32 +0000
asID: 13335
IP address blocks: 172.68.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:47:cf:f0:f3:60:74:5e:4f:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 01:59:32 2024 GMT
Not After : Mar 11 00:59:32 2025 GMT
Subject: CN=1c2a96ce-9539-4bf6-abfe-cba8085f69dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:31:2a:dc:48:bd:09:d2:9b:6d:99:c7:d9:98:
b8:90:3c:3f:a1:92:5d:12:9e:a6:e1:b5:d2:4e:c1:
46:01:90:74:9e:45:ac:c6:15:86:69:c0:ed:d5:47:
2f:6e:0d:a9:92:33:82:65:e3:a5:ee:b4:85:82:28:
3b:96:d3:b6:9d:b8:79:c6:9d:4e:5d:fe:9a:8d:88:
a3:d8:8a:01:52:68:df:f0:53:19:db:bd:34:4f:62:
02:af:ee:ba:d6:c9:a3:16:90:0e:68:78:02:0e:1b:
3e:30:db:75:f8:39:80:dc:0d:79:14:06:8d:00:21:
ce:67:e1:a2:e9:26:46:46:0b:a7:4b:d5:bc:97:9a:
80:5c:06:ad:84:59:ca:dd:94:13:b9:e3:2f:48:ed:
b9:0d:c1:c4:e0:b6:f7:22:26:30:5d:c2:74:cc:94:
ec:a5:cc:7f:cb:7d:3c:89:c6:32:13:aa:cc:00:72:
d0:81:02:57:9b:9e:92:f9:49:96:92:5c:b5:8a:60:
3e:60:dd:c2:a9:36:38:6d:b2:e4:cc:da:85:d5:da:
28:b0:ba:53:89:1b:0b:c5:0f:91:9c:e5:48:c1:7a:
fb:0d:af:68:86:b4:c8:f6:71:83:e3:ab:dc:09:63:
8b:3c:62:d0:78:22:5c:fa:92:e2:e5:bb:c7:c8:dc:
09:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C7:AA:01:B6:E7:21:80:40:9A:2C:AA:D1:4D:AF:69:D1:95:A9:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24623cb4-a137-3d76-a45c-126f643d62f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:82:eb:e0:c1:c2:80:97:c9:23:58:41:f1:67:fd:7b:85:1b:
65:0d:7c:94:9f:0a:f0:1b:fe:e5:ff:95:d9:a4:b1:8c:83:b7:
c3:62:b9:39:f5:8d:06:8d:27:08:9f:ed:1d:b1:f1:13:c7:cf:
b1:8e:80:d5:03:09:41:49:be:a0:6b:18:07:cd:0d:e5:29:9a:
9f:0a:79:b7:87:f2:cd:1b:88:20:5c:5a:df:bd:9c:5d:94:56:
0f:d8:09:7e:04:10:e2:04:65:a5:1a:11:2e:18:86:30:ac:c5:
d9:b1:9b:19:19:95:f1:36:d2:93:cd:b1:22:e5:2f:ca:11:c4:
5a:4d:e7:b8:08:7b:38:47:b9:7b:1a:93:c8:6d:65:cc:e9:fe:
78:1f:3a:e0:c3:de:b3:e3:c3:b0:09:93:b7:c5:66:4e:a6:51:
64:ce:0c:a6:90:16:21:96:40:be:06:45:11:ec:a9:f9:1d:53:
9b:74:be:86:c8:6a:5c:71:35:d5:18:18:fb:8f:76:83:ac:76:
23:cb:b8:11:8e:34:77:68:38:2f:bb:46:49:59:e5:a6:a5:a6:
c8:3b:a9:12:c7:d9:b1:13:21:54:03:b6:4b:62:5b:f8:25:ac:
d6:3a:89:12:fe:b6:2c:5c:ab:47:64:cc:d8:3a:e7:e1:c2:ba:
e1:9e:61:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:57:58 2025 by rpki-client