Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25e8322f-2428-321c-a784-a85a0a7a9123.roa
File: 25e8322f-2428-321c-a784-a85a0a7a9123.roa (raw, json)
Hash identifier: CnhSGF09kNXVy8QFj+5Fqo1XLY3pNkww1D3hLyYm8Wo=
Subject key identifier: 52:CE:CF:48:AD:85:5C:EE:BF:1F:BD:5C:9C:F6:7A:1D:D3:FE:8A:D7
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328576D51CC73C042CFC1676229F206
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25e8322f-2428-321c-a784-a85a0a7a9123.roa
Signing time: Fri 30 Nov 2018 01:09:35 +0000
ROA not before: Thu 29 Nov 2018 05:00:00 +0000
ROA not after: Sat 27 Nov 2027 05:00:00 +0000
asID: 13335
IP address blocks: 172.68.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:29:f2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Nov 29 05:00:00 2018 GMT
Not After : Nov 27 05:00:00 2027 GMT
Subject: CN=2f721633-d932-416e-97fe-9ad8dbe60b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:54:9b:ae:4b:6d:58:e7:a0:44:b6:d4:16:d4:
45:00:8f:d5:b5:46:e1:8e:c3:73:c2:38:3d:73:8e:
fd:b8:7f:19:a0:24:c3:87:85:5c:35:7a:28:74:8e:
f0:c1:fe:6a:2d:56:d4:b8:e1:9f:17:02:9a:55:15:
a9:8d:5a:9a:90:cd:8a:38:1b:d5:71:9b:bf:ab:6c:
66:d6:9c:40:3e:a5:62:a4:d1:4f:26:5b:7e:fe:15:
13:93:9c:d9:e3:66:93:69:d0:fb:6a:a5:e8:24:95:
6c:59:fd:0b:fc:82:d3:59:2a:54:3f:71:71:40:c3:
b9:23:b2:04:f9:84:37:35:8b:2c:6b:1b:02:a4:41:
8c:cb:48:49:3d:e2:ef:3d:00:b3:13:0a:ba:24:78:
ae:31:b8:26:a5:5d:2f:89:29:f8:44:15:1d:93:07:
c3:fc:be:32:e9:70:c2:97:c2:9a:f6:7f:3c:99:e0:
ba:ad:f8:ae:43:e6:11:c2:75:db:55:46:d4:47:fb:
85:c3:9e:f8:eb:18:0c:76:c8:d4:a3:40:8c:1d:af:
4b:fe:41:85:ec:6a:e3:bc:e1:3f:55:17:65:ed:79:
81:11:1f:5d:5d:97:03:03:8d:b8:d7:a3:22:c1:ea:
6b:0a:09:dc:cc:f8:f3:14:f0:95:c1:bb:88:81:dc:
93:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CE:CF:48:AD:85:5C:EE:BF:1F:BD:5C:9C:F6:7A:1D:D3:FE:8A:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25e8322f-2428-321c-a784-a85a0a7a9123.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:98:ea:42:07:f6:ba:30:f1:0e:07:f0:ba:47:1e:b8:d8:87:
7b:16:12:b4:60:8d:0b:7c:82:4b:96:66:55:8f:75:e2:ad:df:
96:3d:35:0c:bd:f5:f1:86:1f:80:4a:47:47:e8:c6:38:ce:c6:
51:4b:f8:df:6f:03:bb:21:63:4f:a3:a0:1c:d3:bf:ba:8a:03:
de:07:3a:95:de:e7:c3:c7:76:13:46:c6:80:b6:0a:2b:ba:b3:
6a:ba:f9:e4:f9:b4:08:0d:6a:f5:72:a0:5d:b8:3f:87:1e:9a:
74:6c:f5:59:c3:92:55:a6:d7:6c:4b:f4:fb:90:e5:06:9d:83:
91:35:f7:9b:85:c5:92:d1:fa:c9:80:e1:16:a9:65:b2:43:25:
e6:34:34:b3:10:1d:c5:8b:95:bc:bb:22:53:58:c2:e8:cb:d1:
43:00:d5:91:c5:eb:06:28:d3:50:f7:2d:3d:0f:71:8b:68:33:
cf:b5:5b:8f:7c:b9:45:46:76:b2:02:75:30:b9:80:7e:99:8e:
cc:a1:ae:e1:d2:49:c8:1c:51:88:34:1c:8e:bc:fc:58:77:85:
33:07:15:49:08:ae:7e:ea:96:28:89:d1:76:00:32:cd:f0:1b:
79:78:a0:43:c0:d0:55:32:e0:93:5d:6f:50:8d:81:5d:f9:90:
20:4d:1e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:45:20 2025 by rpki-client