Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f185db9-aad7-31a3-a0cc-b3fa8a1e6f9e.roa
File: 2f185db9-aad7-31a3-a0cc-b3fa8a1e6f9e.roa (raw, json)
Hash identifier: OUhOibkIly3AR+kWaemDCsv03syyzMGYf7Rxyo/gBnA=
Subject key identifier: F3:9F:EE:39:AE:D3:E7:34:46:92:71:05:D8:0E:9F:52:73:D4:31:FF
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A915D69CB030B719F3343C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f185db9-aad7-31a3-a0cc-b3fa8a1e6f9e.roa
Signing time: Wed 11 Dec 2024 02:03:44 +0000
ROA not before: Wed 11 Dec 2024 02:03:44 +0000
ROA not after: Tue 11 Mar 2025 01:03:44 +0000
asID: 13335
IP address blocks: 172.68.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:91:5d:69:cb:03:0b:71:9f:33:43:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 02:03:44 2024 GMT
Not After : Mar 11 01:03:44 2025 GMT
Subject: CN=708671e6-9dd2-4136-9f3e-ab334d4d4cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bd:63:3e:64:a5:de:cf:39:c5:05:65:af:17:
c3:c7:68:7e:e8:64:18:e4:4d:86:40:d6:db:4d:63:
49:6c:02:ce:ab:68:83:5a:0c:3d:a9:72:79:71:1d:
30:75:6b:99:82:5f:24:66:d3:6d:5e:97:50:43:87:
22:c9:40:bd:08:37:2d:e6:e0:31:8e:c0:05:d9:96:
3b:57:a4:c0:37:a1:70:c8:8b:11:43:ef:ff:d7:14:
98:73:64:a6:90:65:de:c4:c5:96:67:5e:9c:ba:a5:
82:21:2c:bf:19:16:6e:c6:47:bd:cb:30:2f:5c:8e:
cd:3d:b5:0f:2d:ce:d1:05:05:0e:9d:dd:63:21:a4:
90:f0:e4:8b:18:9a:6d:0a:84:81:16:2e:e6:47:77:
ce:07:a6:60:5c:34:8c:6c:a8:f7:db:13:63:a7:c1:
be:d4:8f:b4:0f:1c:f1:a5:72:8c:6b:3e:24:b0:c3:
d8:b5:97:17:8f:53:14:9b:4e:9a:f5:14:95:e8:cd:
14:a8:6e:83:93:cb:bf:f9:96:82:42:a0:28:da:1a:
f6:da:77:c0:f2:cc:7f:9b:9f:22:9e:13:de:2b:f3:
22:86:40:20:3e:33:f6:12:42:7e:1f:63:bd:a8:64:
ed:d0:50:8d:81:ae:d3:57:c3:41:ad:b7:0d:7f:46:
7a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9F:EE:39:AE:D3:E7:34:46:92:71:05:D8:0E:9F:52:73:D4:31:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f185db9-aad7-31a3-a0cc-b3fa8a1e6f9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:a9:1d:e5:a6:ca:41:a8:46:38:43:52:cb:0d:0b:67:ba:c0:
ba:a6:b9:d5:a6:34:13:75:52:76:95:4b:35:56:33:b2:6c:06:
52:ad:ea:f6:55:67:6c:04:ae:ae:1c:01:fa:46:3f:55:69:3a:
f1:11:64:39:3c:03:42:0f:21:2e:32:bb:9a:3f:70:d9:f3:e6:
8d:26:57:3f:8f:45:4f:7e:0c:84:45:92:b0:fe:3c:2e:58:f1:
43:11:6b:7b:8e:e6:5a:56:bd:c5:be:54:f8:b9:b9:b8:a6:54:
cf:62:de:8b:e6:00:61:2b:92:90:4e:e3:68:99:79:9e:f5:5d:
df:80:bf:37:8f:55:33:37:92:98:a1:4a:df:1e:c5:21:47:5a:
67:19:f2:06:39:66:2a:da:bb:01:a2:36:16:fa:2e:f1:d2:ce:
f4:71:33:17:15:b3:0c:2e:78:b8:93:dd:6a:b2:3a:08:fb:c8:
d2:43:7f:4f:72:39:0f:43:b7:4b:2c:10:73:b0:0e:97:30:5d:
96:b6:57:9c:27:f4:70:bc:36:dc:f0:f7:f9:b5:a7:b5:8a:72:
34:cc:7f:ec:e3:30:de:78:22:58:ad:8a:24:b6:42:98:8f:76:
d3:ea:c3:94:c7:fa:10:f8:d9:02:d0:6d:c4:a2:1f:9a:c2:ae:
86:85:5f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:23 2025 by rpki-client