Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3aa852a2-985f-304f-8ced-bb6e35a96410.roa
File: 3aa852a2-985f-304f-8ced-bb6e35a96410.roa (raw, json)
Hash identifier: ag/X4nGaOZeAtaNn4ub+7S2DaFB79nSQDmedueQzn8Q=
Subject key identifier: 38:34:84:16:5B:01:E2:D3:E3:01:64:F3:11:A2:35:65:C8:75:4E:BE
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848279910BBECDBD55B0E25E100
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3aa852a2-985f-304f-8ced-bb6e35a96410.roa
Signing time: Tue 10 Dec 2024 00:31:49 +0000
ROA not before: Tue 10 Dec 2024 00:31:49 +0000
ROA not after: Sun 09 Mar 2025 23:31:49 +0000
asID: 13335
IP address blocks: 172.68.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:99:10:bb:ec:db:d5:5b:0e:25:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 00:31:49 2024 GMT
Not After : Mar 9 23:31:49 2025 GMT
Subject: CN=da53da87-930f-4bdb-aa7a-94a632f2dbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:96:8a:34:1b:38:e7:48:9a:a7:18:99:38:c8:
ce:17:5a:fb:20:31:3f:9d:82:6b:b5:23:74:4b:2f:
c8:e0:47:e0:94:f8:93:11:de:61:b6:b0:7f:83:fb:
e3:f6:8f:c4:55:79:b6:11:a5:44:97:14:69:e0:c9:
01:24:ee:4d:41:bf:c1:b7:58:f1:f9:fd:0f:70:c4:
0e:38:4a:c5:1a:a8:f6:7d:b8:7c:a2:25:ec:11:40:
df:12:cb:1c:fa:80:d8:47:95:e9:e2:e5:6a:16:6e:
41:47:0c:c0:ed:f0:76:c1:22:e0:fa:b8:2f:e8:fb:
19:99:79:45:49:ca:dd:0a:d3:1a:5c:f4:3f:80:a6:
88:a3:1c:cf:49:4a:91:75:08:01:86:1e:04:8f:08:
0b:15:44:0b:f9:ed:e5:23:95:58:96:bc:42:b4:73:
46:2d:0e:93:61:37:78:59:13:81:56:3a:99:01:92:
5f:ec:0e:b9:db:3d:92:e1:fa:43:10:6d:04:06:15:
70:6c:c4:eb:b4:20:35:59:6c:e6:98:46:bf:3e:90:
9e:c4:6f:7e:08:1b:a0:fd:bc:8d:f1:98:2a:90:3f:
6c:ee:19:f4:f1:08:8e:0f:70:ab:5b:95:ee:6f:2f:
fd:51:c7:f2:85:21:d9:c6:0f:c2:e2:61:f0:07:4f:
03:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:34:84:16:5B:01:E2:D3:E3:01:64:F3:11:A2:35:65:C8:75:4E:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3aa852a2-985f-304f-8ced-bb6e35a96410.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.18.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:02:90:00:f0:3c:bf:19:21:75:0d:80:62:73:82:c0:b5:90:
9b:90:33:b1:f1:73:38:11:53:9d:ff:5b:12:e0:22:07:bf:16:
0c:33:8c:63:6e:fd:4b:b5:7d:46:85:0c:a1:90:49:bc:c5:7d:
e6:1f:f0:4b:18:52:7d:3c:98:f7:b6:cb:9f:f3:b3:27:14:32:
29:34:52:71:e7:6e:88:e1:af:c8:0e:00:3d:9a:d4:15:60:3c:
31:fd:e3:37:e1:b1:34:03:78:fc:cc:21:0f:24:b7:79:17:f1:
b1:92:cd:1f:80:3d:66:2b:b7:47:ee:47:64:ae:43:c3:05:0e:
6b:05:97:17:c9:9c:a9:26:af:79:1d:00:64:6c:08:d1:ed:01:
ae:e6:76:78:af:df:8a:bc:86:fe:bc:c5:4c:7c:e6:ca:74:4e:
0f:56:40:0c:14:37:19:0a:f9:84:cf:f5:c2:f9:3a:75:98:42:
10:35:70:1a:b5:5f:60:14:e6:b2:24:0a:23:21:7c:0d:17:2c:
8a:96:c4:73:b8:01:cc:f3:0b:b4:0d:5c:3e:ae:a1:68:5e:69:
09:2e:51:f4:4f:df:88:13:8a:0b:ef:6b:40:8b:1c:e6:0f:9a:
8c:09:1f:46:cb:59:c6:0b:4c:f1:3d:6c:0a:3f:6e:5c:b3:a0:
67:8a:bd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:56:23 2025 by rpki-client