Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2896349d-d866-3aca-a14c-16a1b5220e33.roa
File: 2896349d-d866-3aca-a14c-16a1b5220e33.roa (raw, json)
Hash identifier: lW8pAaZo/wVBcS/rL+OKusZB24iuuSnKiA1eisKND7o=
Subject key identifier: 0E:C0:3F:9F:31:B0:91:0E:44:5B:E7:41:BD:2A:92:3E:7B:6D:4D:8C
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848281D572D0281BC2D181E1160
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2896349d-d866-3aca-a14c-16a1b5220e33.roa
Signing time: Tue 10 Dec 2024 04:58:20 +0000
ROA not before: Tue 10 Dec 2024 04:58:20 +0000
ROA not after: Mon 10 Mar 2025 03:58:20 +0000
asID: 13335
IP address blocks: 172.65.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:1d:57:2d:02:81:bc:2d:18:1e:11:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 04:58:20 2024 GMT
Not After : Mar 10 03:58:20 2025 GMT
Subject: CN=085e097b-a1e3-4c4d-8935-8024843fec6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a1:d7:98:3a:33:75:07:e2:2a:80:45:72:fd:
88:2e:53:b1:1b:2e:21:19:4c:aa:85:6b:3b:1f:60:
7e:26:b9:8a:38:64:3b:fe:c0:4c:8b:bf:c4:b1:95:
60:8d:0d:86:cb:3a:75:4b:a4:e7:d4:6a:1b:ff:8d:
c3:25:ef:19:25:5b:a0:d3:4b:46:4b:2c:d4:a9:60:
57:ef:67:4f:d1:40:a2:2a:13:d3:ee:54:86:a4:64:
a0:72:d5:9b:fb:9b:12:60:8f:5c:26:99:fc:71:e7:
ef:e5:6f:82:e6:23:c6:fb:aa:1a:db:43:55:71:76:
da:f8:6e:ed:9f:10:a3:75:84:0e:e7:d9:e7:c5:5e:
73:10:d5:f2:60:03:d2:8b:82:26:35:cc:07:e8:ef:
6e:4b:49:ae:44:3b:d4:34:7b:10:9a:e5:98:1c:5f:
63:87:3b:34:9e:be:1d:5f:26:5c:09:bb:8d:96:16:
f3:b3:43:a8:a4:6a:7f:00:a5:80:ce:83:f6:77:16:
39:cf:2b:48:fd:a1:31:40:57:50:4b:5a:af:f7:a9:
14:53:9b:5e:04:3c:32:ef:ae:81:5e:2f:8b:c6:24:
28:50:c5:41:52:ee:e5:00:56:cf:b7:70:c3:c2:77:
2d:aa:08:1c:7a:bb:f0:eb:96:5d:05:f0:cc:48:f5:
8d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C0:3F:9F:31:B0:91:0E:44:5B:E7:41:BD:2A:92:3E:7B:6D:4D:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2896349d-d866-3aca-a14c-16a1b5220e33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.65.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:02:3f:46:f4:f3:11:aa:2f:89:9b:9b:cc:40:99:fa:df:53:
e8:e8:9c:71:c5:e2:f1:5e:41:b1:45:af:89:66:ea:b8:dd:e9:
ba:98:eb:d6:b9:f3:30:25:b1:64:c5:d7:98:28:0e:db:7e:52:
07:42:84:84:9b:26:65:87:b7:43:1b:b1:2b:8f:a5:07:1a:ef:
b0:15:8d:b0:85:c3:34:40:e3:c9:e9:15:7f:db:9a:9e:27:31:
65:70:5c:6c:52:dd:0d:66:44:03:7f:a8:b4:f5:ea:03:f0:2b:
88:57:a1:39:88:af:a6:2a:ac:db:09:d7:43:1e:ec:7f:9f:0e:
f1:32:1a:68:73:0d:70:3e:9a:80:31:1d:e5:5f:d6:f2:56:c1:
eb:a1:ba:94:cf:5a:38:47:09:1b:50:08:c4:0c:1d:54:4e:70:
d4:b1:7f:4d:16:86:0a:65:d0:ec:d0:d8:57:66:bb:eb:5c:5f:
fe:b1:ad:0d:8a:f9:0a:55:67:f5:dc:9f:4a:61:f6:53:b2:e5:
76:48:ab:6f:40:a3:54:1d:73:7e:a6:08:67:07:6d:10:7d:80:
b7:2f:bc:98:15:c6:07:b3:17:4e:5a:59:53:5e:e5:49:3d:95:
f5:5e:98:0f:e3:97:dd:05:1b:ae:11:0e:43:69:d5:2e:e1:22:
95:4b:8e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:50:44 2025 by rpki-client