Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42cd4ca5-e0cf-3ecf-b894-45e467de22ab.roa
File: 42cd4ca5-e0cf-3ecf-b894-45e467de22ab.roa (raw, json)
Hash identifier: aaYEvm3q69wOrZzj27Ac92un9pqBGQXeUJRP1AMDwr0=
Subject key identifier: 55:1D:F0:74:6E:51:EF:9E:76:63:06:CF:B2:2A:DE:F1:7D:53:1C:E5
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584828214A7A6F5171117A5A2700
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42cd4ca5-e0cf-3ecf-b894-45e467de22ab.roa
Signing time: Tue 10 Dec 2024 05:06:18 +0000
ROA not before: Tue 10 Dec 2024 05:06:18 +0000
ROA not after: Mon 10 Mar 2025 04:06:18 +0000
asID: 13335
IP address blocks: 172.68.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:21:4a:7a:6f:51:71:11:7a:5a:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 05:06:18 2024 GMT
Not After : Mar 10 04:06:18 2025 GMT
Subject: CN=5a5ca6fc-cd5e-4588-b325-4b7251dcc303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:73:98:21:c7:b0:28:19:80:d6:1e:ee:c3:
c8:78:71:c1:65:ed:52:37:e9:1a:fb:c9:43:b8:0c:
5c:d7:b1:87:1e:44:0b:22:85:b2:9c:c6:f5:2a:a8:
c8:11:74:19:33:ed:be:58:93:55:26:33:69:c5:56:
45:d3:13:9c:3f:93:14:d9:db:91:f7:cf:d3:df:dc:
63:47:d1:6e:08:e5:0d:4d:81:2a:b1:e3:db:7e:a7:
de:67:30:cb:b3:00:e2:ca:4c:a3:94:20:fd:40:ae:
c3:9b:47:1c:c7:3b:15:04:bd:f6:d1:25:16:c9:1f:
9f:54:61:34:8a:68:b8:27:03:aa:cf:78:10:a6:33:
29:70:c4:0b:2c:42:67:47:09:19:ed:5d:bf:90:01:
e1:82:66:a1:5a:09:fa:69:a2:4e:c6:50:b3:2e:58:
09:4a:f5:1d:c4:bf:5f:1b:b0:07:ce:8a:15:b3:1b:
19:e1:37:73:9d:94:6a:27:69:83:40:b2:1b:50:df:
50:62:30:af:d8:34:13:93:fa:79:68:8f:2f:b1:6f:
38:1f:9f:47:2c:24:76:d3:b3:34:3e:ea:fa:cb:46:
77:41:81:f8:2f:c6:c3:9b:b8:3a:9e:82:94:d0:c7:
01:fe:d2:eb:bc:92:8f:2a:9d:0b:8e:71:37:8f:e8:
3e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1D:F0:74:6E:51:EF:9E:76:63:06:CF:B2:2A:DE:F1:7D:53:1C:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42cd4ca5-e0cf-3ecf-b894-45e467de22ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:c1:72:fe:22:5e:09:ae:a9:4b:5b:50:88:a6:0b:20:5e:cd:
ce:73:2f:df:e9:bd:e4:aa:83:65:3f:a4:21:83:0f:20:5a:e9:
12:70:88:68:4a:cc:66:7d:18:45:bc:bf:f6:cd:21:9b:20:de:
89:13:a7:03:45:18:88:08:bc:ee:80:a3:96:c0:a3:26:c0:3e:
7b:c7:4c:ba:5a:c5:5a:59:b9:de:e7:5d:97:9e:c9:1d:ba:2e:
69:12:d2:2b:c8:ed:f7:8d:0b:cd:20:33:01:4c:57:3f:58:5b:
28:39:2a:43:b6:dc:f4:04:ff:f9:7b:bd:e8:c8:9d:0b:d3:7d:
02:f4:b5:9c:65:3a:24:74:6e:28:2c:17:51:dd:78:00:34:ee:
18:18:83:03:01:91:54:28:95:66:cf:b4:a3:7a:0c:ff:f2:a2:
6c:98:07:aa:e3:0c:67:07:79:c7:24:ec:63:a7:de:44:22:3a:
41:4f:b7:56:f7:12:7b:d3:55:3b:2b:ae:ca:2f:8a:0f:34:57:
60:77:65:fb:81:d8:94:6d:9d:12:28:e7:e2:98:e8:b7:2a:a5:
eb:44:51:dc:2d:dd:40:ee:b3:f0:21:dd:66:77:55:25:e9:88:
df:b4:e6:fe:98:1c:ea:06:5c:97:20:93:d1:69:7d:ef:0a:7e:
32:8f:84:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:56:36 2025 by rpki-client