Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d572a85-d2e9-3c92-a7ea-9412eee9750b.roa
File: 2d572a85-d2e9-3c92-a7ea-9412eee9750b.roa (raw, json)
Hash identifier: L/WkkPGjwcA2l/n0coGT5H3CbO9ATKKOSS5+VDvSCeg=
Subject key identifier: 89:BF:3F:C1:C8:33:96:C0:25:F7:3F:EC:C4:6D:E4:65:D8:73:F1:47
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A9CD596E08C964C35AEF4B8
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d572a85-d2e9-3c92-a7ea-9412eee9750b.roa
Signing time: Wed 11 Dec 2024 02:26:50 +0000
ROA not before: Wed 11 Dec 2024 02:26:50 +0000
ROA not after: Tue 11 Mar 2025 01:26:50 +0000
asID: 13335
IP address blocks: 172.69.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:9c:d5:96:e0:8c:96:4c:35:ae:f4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 02:26:50 2024 GMT
Not After : Mar 11 01:26:50 2025 GMT
Subject: CN=33ef6f21-dc75-435e-9bfc-e3de3f8717b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e2:04:14:de:d4:c8:40:85:91:f9:11:f8:48:
20:57:d3:f5:0b:55:c6:f5:db:51:57:68:e2:76:15:
e3:da:73:06:73:1a:b0:ec:7b:1b:87:24:ce:df:49:
fa:40:95:51:87:58:52:53:b0:e8:d7:42:98:99:a9:
fb:72:53:9b:ed:19:18:c5:bf:a0:6c:b4:1e:1a:97:
41:7d:69:a2:8c:d3:34:e4:45:22:94:06:84:d2:36:
d7:fe:bd:69:7e:22:84:a3:93:b5:45:45:42:a0:29:
fa:12:b6:f4:7c:59:34:af:83:0c:3f:26:ec:59:4a:
75:21:22:70:1b:23:46:4a:69:17:ed:b2:4d:e7:b4:
18:3d:d3:23:63:f3:95:60:af:5f:31:7d:f2:7f:96:
c2:17:12:77:21:22:62:5c:3a:21:d9:07:f5:9d:05:
81:a1:e9:bd:ee:69:a9:0b:e1:dc:4f:25:0e:00:52:
b0:c1:de:9e:3a:1c:1e:68:de:df:4e:fd:6a:db:dd:
2a:4b:02:73:03:0a:fa:71:1e:5a:0b:b1:9c:73:25:
a6:94:c9:bf:7a:28:73:5b:d0:fa:c8:c9:51:7d:d5:
34:b6:0d:06:c0:75:78:92:01:88:f1:9a:18:c9:4e:
cf:b9:aa:62:cf:83:a9:77:a1:78:d8:6c:5b:d8:a3:
fb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BF:3F:C1:C8:33:96:C0:25:F7:3F:EC:C4:6D:E4:65:D8:73:F1:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d572a85-d2e9-3c92-a7ea-9412eee9750b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:cd:ab:b2:79:f8:a4:7a:fb:cd:8d:9f:d8:7a:d8:74:b1:d4:
6e:65:c4:93:1d:54:db:8a:4d:d2:2c:6b:4d:af:8a:4f:b9:05:
7c:62:30:1c:9e:3b:b7:62:ca:cf:5a:d8:21:6b:3d:e1:98:fd:
99:81:a4:67:eb:71:b9:6c:05:e5:ef:74:b3:00:31:69:c2:fa:
ee:84:c3:22:f4:f5:00:c0:fc:8a:92:cf:12:79:57:4c:52:9d:
4f:b5:80:77:1a:49:78:d7:6e:c1:d0:d8:0e:a6:84:8d:c7:ac:
2f:91:48:dc:d7:ce:7f:8b:35:e4:f9:79:40:43:51:5a:f5:0c:
d7:fa:03:63:ec:0e:62:2c:06:8f:a7:a4:24:fa:80:88:4b:46:
36:33:87:ab:4c:e2:36:f0:c0:e1:ac:60:5f:ea:91:13:2f:24:
95:fd:c4:7a:d7:96:59:5c:b2:b2:13:59:87:cf:0a:d1:36:60:
c2:31:03:b9:e4:c7:bb:22:19:a5:70:c8:6f:e4:3a:29:e1:74:
ef:43:3e:d2:0b:12:4d:f3:97:ba:6c:d4:21:45:0a:9b:6b:36:
0d:b7:51:d0:35:4c:99:55:ed:d6:bb:31:ca:cf:bc:cc:53:be:
f5:02:c4:70:2d:3e:5f:5d:23:d3:55:fc:5c:a6:0b:4c:2f:b8:
11:bb:37:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:08:00 2025 by rpki-client