
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25a8ab15-e085-3562-9462-51bb91799e31.roa
File: 25a8ab15-e085-3562-9462-51bb91799e31.roa (raw, json)
Hash identifier: p/H4+qVwxPSWgD+CcHOH5hT7oMcPYl53Z2o3RmqqHzE=
Subject key identifier: A9:D5:77:1C:40:9F:C9:94:E2:99:85:E7:2C:5A:6B:15:4F:52:DA:ED
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A920B6E9B93DAF834524700
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25a8ab15-e085-3562-9462-51bb91799e31.roa
Signing time: Wed 11 Dec 2024 02:05:06 +0000
ROA not before: Wed 11 Dec 2024 02:05:06 +0000
ROA not after: Tue 11 Mar 2025 01:05:06 +0000
asID: 13335
IP address blocks: 172.68.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:92:0b:6e:9b:93:da:f8:34:52:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 02:05:06 2024 GMT
Not After : Mar 11 01:05:06 2025 GMT
Subject: CN=1810fd33-feb2-47a5-b034-72ff67bc134f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1d:59:10:04:d3:52:92:e1:18:a1:c7:91:af:
bc:b8:bd:df:24:b2:ef:0a:71:57:37:9f:fb:1f:36:
b5:09:84:82:c3:c4:e1:3f:1b:1f:70:d1:80:57:f2:
c1:c1:71:36:c0:5b:2e:c6:1a:52:1e:34:48:4b:c2:
ec:86:5c:db:18:37:9d:be:aa:b5:40:fc:02:b5:8c:
6e:c5:81:f3:5a:f8:9e:f8:87:44:05:c0:9f:e0:bc:
c8:f6:e6:da:65:7f:9d:d5:1a:03:cd:a9:ff:8c:6d:
ac:d2:47:6b:c7:bc:37:3c:36:b0:f6:d4:1e:29:98:
25:96:0a:42:14:64:cf:bb:8a:ab:9b:10:e1:48:a7:
03:3d:d4:7a:48:4c:e7:e2:7d:95:8c:b5:a3:b8:be:
35:8f:6f:90:e4:82:5f:68:55:51:b4:8c:9c:d5:e5:
39:7a:f3:88:44:fe:95:94:b0:4c:c8:73:bc:da:e5:
fe:48:4b:d2:ac:79:73:ec:35:79:0f:68:8a:a6:ed:
5f:41:79:4f:29:36:ff:98:a9:42:e5:54:4b:34:f9:
14:c3:69:e2:96:42:6c:b4:c4:e2:5b:b7:b6:21:aa:
13:d1:98:3e:c0:7a:2e:7c:3f:45:e0:2e:97:ac:a3:
fc:5c:ac:98:4a:8c:88:52:69:2d:b9:83:61:bf:19:
af:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D5:77:1C:40:9F:C9:94:E2:99:85:E7:2C:5A:6B:15:4F:52:DA:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25a8ab15-e085-3562-9462-51bb91799e31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:ca:ca:a0:0f:04:e3:3d:5f:09:6a:ca:0e:e2:88:73:09:9a:
72:26:1a:49:c4:6d:97:86:8b:8a:6c:43:ae:69:2f:31:37:2f:
a0:2c:1d:a1:54:c0:a2:16:4b:85:d3:33:94:5c:06:8d:a8:9e:
19:1b:d3:1a:8b:80:c1:c4:39:56:9f:9b:21:66:bb:2c:1e:fa:
49:af:70:83:50:4a:60:ce:9b:7b:d5:f3:5f:89:09:1c:e7:81:
e2:3a:70:69:c3:99:99:fc:8c:c6:6a:ba:c4:a8:23:43:f6:50:
96:d5:de:67:69:69:35:0a:6d:02:cc:41:43:0a:8e:96:c7:6c:
6e:db:b7:53:aa:4c:ac:f2:50:06:dc:f8:fe:9a:3a:5c:3e:0e:
54:76:a8:6c:07:93:eb:83:2b:74:c8:56:16:62:d8:bb:b7:5b:
9d:2e:50:ab:c3:39:ff:3b:9f:63:47:66:34:13:f4:2f:41:c1:
24:08:69:3a:42:80:56:e9:3d:a2:04:9d:cd:b3:55:30:b2:56:
de:d7:93:e0:f5:4e:bf:6e:be:99:ad:36:5d:ab:5d:fa:85:a8:
51:75:35:4e:75:da:24:fe:af:7c:2d:a8:94:17:91:87:85:f9:
ad:56:fc:d8:00:a5:44:72:19:ac:69:e2:49:29:c5:cf:1b:2f:
6a:a7:9f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:16:32 2025 by rpki-client