Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3caa4714-af67-3b76-951f-e45d977ba012.roa
File: 3caa4714-af67-3b76-951f-e45d977ba012.roa (raw, json)
Hash identifier: N3G6pRw815PB7xQP+oJhlvm9scv8geU4tnXHPlqzKc8=
Subject key identifier: 21:08:4F:93:4F:61:97:87:DC:E3:4E:B5:2C:F3:4F:3A:E8:E8:01:D7
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848283B307958314B154A0CBE00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3caa4714-af67-3b76-951f-e45d977ba012.roa
Signing time: Tue 10 Dec 2024 05:58:29 +0000
ROA not before: Tue 10 Dec 2024 05:58:29 +0000
ROA not after: Mon 10 Mar 2025 04:58:29 +0000
asID: 13335
IP address blocks: 172.68.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:3b:30:79:58:31:4b:15:4a:0c:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 05:58:29 2024 GMT
Not After : Mar 10 04:58:29 2025 GMT
Subject: CN=cba3867b-d28e-4491-ba79-efa2c73e6035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:13:ed:98:66:7f:5f:04:b9:95:9d:5e:ad:a1:
72:4c:4b:2d:bf:9d:a5:4d:75:3b:49:2e:20:af:ea:
72:46:04:0a:0f:57:83:0b:09:8c:1b:7c:a0:43:a2:
c9:d4:d8:4d:01:63:d1:8d:e5:b8:af:74:ef:58:b5:
1e:e2:5a:f3:18:f1:c5:bf:34:bf:fc:38:ae:d9:a5:
03:2b:27:ae:28:d3:b5:90:a9:c7:77:30:05:d3:0d:
1d:ce:68:32:f0:89:29:b5:e5:28:1f:8d:fb:11:91:
a5:74:49:2b:94:95:14:aa:4f:15:23:b0:ea:f4:2c:
40:7e:64:5b:51:be:f9:0b:8e:21:bc:69:99:68:4e:
36:7f:84:42:8a:ed:e5:87:79:67:5d:2e:b5:20:5c:
82:1d:0b:b7:99:b9:5b:5a:96:ea:18:09:b8:9e:89:
7c:9a:73:ad:fa:89:5f:37:29:c2:42:e9:64:65:4e:
40:d0:27:a6:40:74:22:71:8a:40:33:f7:71:d9:1e:
83:73:42:2f:f2:55:f8:e2:8b:44:92:ed:25:96:1f:
4e:fa:5c:64:ff:f3:cd:f3:d4:74:99:bb:e8:f2:f3:
e1:a3:7e:4c:39:92:24:e6:fb:1a:c4:8a:fe:88:c5:
46:ba:2d:31:2a:e8:c1:65:7b:53:e0:05:b7:e9:26:
af:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:08:4F:93:4F:61:97:87:DC:E3:4E:B5:2C:F3:4F:3A:E8:E8:01:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3caa4714-af67-3b76-951f-e45d977ba012.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:9b:1a:ee:03:4c:b5:6e:47:aa:42:22:6b:7e:67:4e:50:b8:
a3:4f:fc:af:06:40:2e:ba:77:ea:9f:f0:96:20:e6:47:be:1b:
d2:86:56:98:56:d4:22:52:05:fb:f7:d6:bf:03:42:2e:4a:56:
6d:20:88:c4:30:ab:30:68:b2:bd:31:0e:02:e6:ee:c5:34:32:
72:f0:e0:1a:bd:2a:6c:f6:8c:77:0a:62:04:ef:3f:90:58:7c:
cb:ff:35:29:96:06:64:9c:47:da:24:e4:47:95:68:ee:e4:29:
6b:9c:dd:38:08:01:6b:3b:eb:e1:85:ac:15:99:9e:2d:e5:63:
b4:e6:05:2c:bd:46:aa:12:f9:88:2e:c9:e2:66:84:63:41:98:
6b:a3:ca:4a:1e:76:36:04:5f:05:6e:72:f2:d4:cf:56:3c:ad:
0d:83:45:4b:53:2b:92:b0:c4:50:21:60:e4:e7:40:8b:d8:38:
8d:9e:33:b6:47:14:aa:fa:88:1c:9a:85:20:ab:fc:97:9e:4d:
c0:31:7e:45:f8:f8:8a:3e:7e:e8:eb:7a:62:ec:47:4c:6e:b6:
dd:86:a3:cb:da:9f:0a:93:eb:06:1a:2a:71:7c:84:4c:df:1d:
41:da:7a:86:ab:29:53:d6:6c:4a:a5:45:45:66:09:ab:dd:c9:
04:70:8c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:49:17 2025 by rpki-client