Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34fec83d-6cef-34d4-97c0-8ffc18ca10b1.roa
File: 34fec83d-6cef-34d4-97c0-8ffc18ca10b1.roa (raw, json)
Hash identifier: T3St1iEbP4NPpfhFirCnouQix5RUomyQ2w74ydKKtZw=
Subject key identifier: 96:24:2D:37:8A:FF:C9:B3:00:EF:7B:B8:D9:C0:EF:5B:AC:2C:CB:A7
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827B8912D97DDA425F6B248C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34fec83d-6cef-34d4-97c0-8ffc18ca10b1.roa
Signing time: Tue 10 Dec 2024 01:35:18 +0000
ROA not before: Tue 10 Dec 2024 01:35:18 +0000
ROA not after: Mon 10 Mar 2025 00:35:18 +0000
asID: 13335
IP address blocks: 172.68.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:b8:91:2d:97:dd:a4:25:f6:b2:48:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:35:18 2024 GMT
Not After : Mar 10 00:35:18 2025 GMT
Subject: CN=3a318d65-2f21-402d-b696-bbf6540863c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:42:5a:8a:4c:96:46:da:2d:34:e8:23:cb:
5f:8d:21:ad:3e:cf:93:c9:9b:2e:7d:f0:7b:30:a5:
13:dd:66:83:d2:78:ef:88:39:3e:9c:81:34:95:b1:
a5:2a:5a:c7:2f:a6:af:b7:87:a8:55:c4:c2:63:eb:
b3:87:49:f7:7d:29:af:55:99:57:a0:7a:bd:10:36:
5a:f2:50:98:80:28:d5:46:88:fd:d9:05:44:71:e5:
7f:a7:cc:c8:9c:61:ab:e0:8f:ce:16:1d:15:94:19:
21:80:ff:a1:83:77:1a:c7:45:9b:6c:7c:98:d4:62:
66:3b:13:53:57:12:03:8f:87:4d:25:0b:d6:83:45:
65:77:09:24:80:d0:3e:4e:f8:80:71:97:74:d1:76:
f8:f9:a3:4a:3a:ee:22:f3:0a:75:39:40:c8:e4:a3:
49:59:b6:db:53:41:48:c0:83:88:45:46:f7:94:d5:
de:a8:0c:60:60:58:71:b4:d8:8e:b3:99:2a:3c:bd:
81:72:20:21:49:84:63:98:91:92:91:6b:87:d0:a0:
28:ed:33:ed:eb:f5:ba:8b:72:43:0e:64:a3:8b:61:
1f:48:51:bc:0d:3c:02:66:39:a8:84:8e:a0:b7:98:
26:28:4f:70:10:79:a6:5e:6b:1a:d0:03:5b:3d:4c:
38:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:24:2D:37:8A:FF:C9:B3:00:EF:7B:B8:D9:C0:EF:5B:AC:2C:CB:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34fec83d-6cef-34d4-97c0-8ffc18ca10b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:12:b8:6a:d3:51:ec:4d:a6:d3:93:2a:10:b0:ab:77:8a:02:
69:2e:ba:a9:39:67:b8:9c:97:03:f2:c3:aa:a1:1f:67:54:3b:
7c:c7:49:49:cf:9c:58:d1:62:dc:76:6d:9d:f1:ed:de:f9:e8:
c8:df:90:0b:39:a5:e9:44:a7:1d:a0:65:21:f9:04:96:0a:54:
15:89:b7:af:c7:05:8d:7e:95:64:11:51:67:10:d4:70:ee:cd:
ed:ef:1e:36:cc:6f:62:d0:9a:86:ad:a2:78:13:95:a3:d9:4e:
47:87:b4:29:5d:f0:d9:70:a0:03:3e:b2:32:e8:be:a4:7f:48:
d8:51:95:1c:25:06:ef:bd:24:2b:13:7f:ad:28:93:c0:6b:f5:
6c:79:1d:5f:27:86:c3:64:bd:4a:97:c9:95:ad:40:cd:69:ce:
19:c2:c8:be:6b:f9:3d:2d:bf:47:75:ea:a4:ee:76:90:16:25:
b5:53:a9:b5:11:b2:80:dd:df:a1:8b:1a:1c:ef:dd:78:a0:d2:
ab:c7:0d:eb:51:cb:26:ae:e7:31:95:e2:95:94:3c:76:0c:02:
a2:3a:d2:51:49:db:6f:ed:02:f9:b3:0c:b4:08:db:e0:ea:d3:
e3:ac:ec:83:4b:26:0b:63:e4:fa:ec:f4:1d:89:31:e3:59:04:
4d:16:80:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:49:22 2025 by rpki-client