Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24baa86a-b2ef-3852-a2ab-4bc6169dbe13.roa
File: 24baa86a-b2ef-3852-a2ab-4bc6169dbe13.roa (raw, json)
Hash identifier: 5pLuCQe9EYuWeCzDoNOLyb27+wgljkj0d5NpyxUEan8=
Subject key identifier: 54:4C:FB:89:E7:A5:16:A6:F0:E4:91:07:28:80:8A:A8:70:51:30:55
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584828054647908A031B01CC2F20
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24baa86a-b2ef-3852-a2ab-4bc6169dbe13.roa
Signing time: Tue 10 Dec 2024 04:09:51 +0000
ROA not before: Tue 10 Dec 2024 04:09:51 +0000
ROA not after: Mon 10 Mar 2025 03:09:51 +0000
asID: 13335
IP address blocks: 172.68.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:05:46:47:90:8a:03:1b:01:cc:2f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 04:09:51 2024 GMT
Not After : Mar 10 03:09:51 2025 GMT
Subject: CN=5f5ef6b4-8d6e-4263-a9e4-1bf70dd41431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:40:17:62:3b:08:32:8e:43:96:41:65:c4:f4:
14:62:45:ef:6c:79:e1:e5:4c:eb:89:4d:4b:e2:a6:
36:e2:50:b1:6a:5a:47:8f:95:26:15:17:a4:10:45:
7f:d4:50:4a:e3:0b:c6:4a:13:fd:06:a8:dc:e9:dd:
c4:d3:77:54:3c:bd:e6:1a:15:7d:d9:ee:1c:ac:f5:
4e:63:57:25:31:2c:47:0d:6d:71:95:98:38:6d:09:
77:63:54:b9:2c:88:a0:d9:8a:cc:9d:f7:5b:ac:e1:
87:b2:ad:ff:2a:e2:0e:b5:35:1d:c4:fa:97:ce:16:
94:9f:63:70:42:54:bb:5c:01:f4:20:80:87:46:f1:
a3:fa:e2:d8:19:03:e0:86:50:6c:3a:7d:4e:02:35:
dd:ba:42:49:d9:de:ed:a2:72:c0:85:90:8a:37:6a:
1e:11:cb:44:a1:f2:0f:25:78:46:03:cf:29:a3:aa:
30:e7:f0:75:4f:c2:2a:08:81:30:eb:3d:50:1a:a8:
72:02:2e:24:1e:cc:65:4d:2b:69:f5:fc:f4:b3:ec:
e7:17:f2:c8:9e:4e:ef:7a:1c:e5:b6:5e:37:6f:70:
df:15:37:24:82:c1:10:18:e1:8b:3d:e7:21:ae:c2:
72:ec:51:d0:e9:47:cd:50:bf:53:e7:94:87:50:19:
1b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4C:FB:89:E7:A5:16:A6:F0:E4:91:07:28:80:8A:A8:70:51:30:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24baa86a-b2ef-3852-a2ab-4bc6169dbe13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:ce:72:fa:80:3e:7e:6c:83:78:8d:c9:2d:f4:fe:ef:5a:dd:
9d:39:34:4a:b8:6a:19:9f:58:fc:35:78:75:84:c8:09:f8:4e:
79:2a:e7:28:2a:fb:ec:f4:85:88:0a:ef:44:2f:2f:ba:c9:56:
e7:45:40:b3:0f:2f:fc:02:3a:58:3b:6a:6c:c8:3d:ce:21:00:
82:d2:53:19:1a:00:a0:b9:4a:c4:20:35:d2:9d:11:3b:95:f7:
29:d2:78:aa:a5:93:a3:fc:0a:45:6f:02:7d:0c:46:cd:39:1b:
c6:62:a1:52:65:e6:1b:19:2f:2d:c6:d6:9a:d2:34:f9:49:8f:
ed:fa:3d:23:d1:a8:d7:4e:dc:a1:cb:3f:36:8a:c8:c7:7d:eb:
12:75:e5:a8:e9:2d:79:f1:99:e5:96:f8:7c:7c:98:94:dd:63:
77:96:07:ab:92:87:49:60:13:36:37:5b:35:5c:5e:3c:84:e1:
e9:e4:ca:df:c1:16:52:23:b6:c0:c3:3d:48:d9:95:0c:1c:8d:
d1:c9:7d:44:ed:a6:67:b1:f2:21:cb:9d:2b:20:a9:3f:dd:b7:
24:1e:ca:5a:9d:5d:86:5d:35:1f:b3:7c:da:d4:c2:7d:6f:c3:
27:f2:0a:d7:fd:c6:b7:a8:36:07:da:29:02:49:d2:c1:3b:ae:
a4:60:50:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:12:54 2025 by rpki-client