Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/300d2c24-89da-330f-80d8-38e8bd7fdf8c.roa
File: 300d2c24-89da-330f-80d8-38e8bd7fdf8c.roa (raw, json)
Hash identifier: YyoMd4auR1YxDr5lUaiuhnM6RwSouseE2h/AJX+wa4M=
Subject key identifier: 55:0D:8A:3D:08:9D:89:B2:69:CE:B4:BC:85:F4:AB:06:3A:BB:93:AA
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482804601E97FE56ABB23B5860
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/300d2c24-89da-330f-80d8-38e8bd7fdf8c.roa
Signing time: Tue 10 Dec 2024 04:08:02 +0000
ROA not before: Tue 10 Dec 2024 04:08:02 +0000
ROA not after: Mon 10 Mar 2025 03:08:02 +0000
asID: 13335
IP address blocks: 172.68.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:04:60:1e:97:fe:56:ab:b2:3b:58:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 04:08:02 2024 GMT
Not After : Mar 10 03:08:02 2025 GMT
Subject: CN=e40c8f54-3327-44f4-b0e0-afdad415a6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ae:f6:60:8a:3c:90:e5:6e:ac:04:4c:5b:13:
70:ee:54:36:d8:49:ef:9a:27:09:54:5b:22:aa:68:
8b:71:d9:eb:87:36:56:f5:66:53:f6:86:b1:b3:3a:
60:35:51:fe:18:f1:21:f1:65:3a:bb:aa:74:be:e0:
1a:1a:df:63:69:34:e1:64:37:f3:a9:7e:aa:9d:be:
83:0d:c0:91:e0:0f:e9:62:bf:3d:1d:21:fe:56:88:
89:04:2e:a5:c5:f1:88:58:ca:2b:d0:86:5f:69:4a:
a3:c6:09:69:70:44:6f:1e:e6:5d:ae:8b:72:c5:c8:
d2:2e:0f:48:bd:ae:20:82:3d:cf:2c:40:25:60:24:
eb:ce:78:e7:9a:0b:d2:c8:4e:8c:b8:88:c6:34:e7:
14:a3:74:b3:42:13:2f:65:7b:3a:e7:2a:11:43:c6:
e9:c0:7e:5a:ec:d2:61:d2:d4:44:1d:b6:9a:64:a4:
b4:c4:19:2e:63:68:07:47:c6:00:eb:6e:46:69:8d:
99:2f:b0:82:69:38:ba:15:02:b8:d2:c9:4e:01:04:
52:e4:4f:ba:ae:f1:94:dd:f5:0a:10:70:0c:ef:00:
44:0e:fd:fb:21:55:96:31:0f:dd:85:cf:26:4f:36:
6f:bd:80:c0:7d:93:c5:12:e2:d1:dc:0e:7a:3e:fc:
cb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0D:8A:3D:08:9D:89:B2:69:CE:B4:BC:85:F4:AB:06:3A:BB:93:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/300d2c24-89da-330f-80d8-38e8bd7fdf8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:65:5e:2d:3d:24:83:ba:53:80:de:b8:00:bb:87:5f:48:5c:
06:9c:7e:fe:fe:a8:1f:96:36:c8:cd:b0:f1:90:ec:a0:ae:ca:
41:ee:56:97:bd:ed:c3:f0:3e:13:98:96:e8:78:27:26:76:05:
bf:72:8f:9e:b7:3e:b2:e1:f8:d3:53:05:93:46:6f:8a:fe:43:
35:fb:64:a8:9e:2e:44:83:16:f3:0e:f8:57:63:fa:94:a4:48:
0f:4e:b9:31:e6:32:30:b0:05:77:ff:2c:b9:25:83:db:70:aa:
ac:eb:8a:d6:90:a5:ae:27:23:71:ec:56:48:16:89:ab:a6:06:
36:d1:bd:f9:78:66:9e:c8:f2:d9:3a:f1:56:65:af:86:7e:29:
55:e4:2d:35:db:61:4a:cb:1e:29:3d:0a:e2:cb:a8:54:c0:e8:
3b:38:38:f4:50:45:ae:61:d9:9e:82:cf:6e:0a:3e:0f:b9:fa:
e7:e5:71:79:ea:6c:53:e6:a5:e7:07:d0:24:4e:2d:d5:68:7a:
31:67:01:6c:00:28:f1:f8:fb:d1:c3:2c:c5:82:40:33:7f:d1:
27:6d:2f:4d:62:18:8d:52:57:3e:88:ff:4d:06:33:b1:33:d1:
c4:64:e7:77:a3:b4:d3:5c:73:4a:a2:81:4d:2e:9c:40:25:3b:
9f:0a:7e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:52:11 2025 by rpki-client