Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/540c9de6-ccf9-387c-9dc0-117d1911ac2e.roa
File: 540c9de6-ccf9-387c-9dc0-117d1911ac2e.roa (raw, json)
Hash identifier: ORYHV1le4h7mV7thRmUJATMkxw+N46ctt+SqdEDQayQ=
Subject key identifier: E3:40:96:BF:4E:A0:9D:E5:B3:F2:B2:F8:29:B3:84:C3:0C:A8:E7:34
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A9B8569ABB81081DDC30980
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/540c9de6-ccf9-387c-9dc0-117d1911ac2e.roa
Signing time: Wed 11 Dec 2024 02:24:12 +0000
ROA not before: Wed 11 Dec 2024 02:24:12 +0000
ROA not after: Tue 11 Mar 2025 01:24:12 +0000
asID: 13335
IP address blocks: 172.69.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:9b:85:69:ab:b8:10:81:dd:c3:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 02:24:12 2024 GMT
Not After : Mar 11 01:24:12 2025 GMT
Subject: CN=d74ab2f3-e6b0-4f7c-ad6d-7c5789f7398f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ac:29:4f:c6:73:22:6d:58:89:48:83:a4:f9:
59:4d:52:bb:7d:69:f1:2b:69:14:66:45:c9:b2:94:
ed:61:ef:8e:52:5f:ce:c9:fa:bd:3d:a1:3d:b9:92:
32:73:88:9b:43:49:d3:6e:11:1a:23:3d:ac:23:f1:
08:52:8f:fe:1b:f9:4d:84:54:db:93:92:d3:e6:14:
65:90:39:c2:f7:6b:bd:11:52:a1:1e:05:43:3a:eb:
cc:e8:b0:da:54:f1:f6:83:3d:1e:8a:98:10:f9:cd:
b8:c9:e4:cd:d7:db:df:fb:ca:f7:b7:9c:a9:57:99:
00:72:78:1c:e4:38:ce:61:52:e5:e8:e8:95:12:62:
60:45:1b:e9:cf:4d:4a:64:a3:4e:97:06:45:1b:89:
d0:c6:d8:c1:ab:b8:f2:31:7a:d0:8f:24:de:6f:74:
f2:fc:d5:68:64:81:03:9c:ee:af:ac:2a:00:a6:05:
96:7d:19:63:de:c5:b4:1f:1c:02:02:c8:b9:45:70:
37:e7:01:42:28:d1:d9:0a:f6:0e:75:86:f5:21:a9:
f7:4a:5c:ce:85:3b:4f:6a:26:40:bc:5e:eb:17:a9:
cc:96:af:c2:5c:a4:11:27:f5:44:b3:00:41:52:e9:
45:23:de:95:4d:8b:4d:87:4c:b9:90:f3:eb:6f:cb:
0c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:40:96:BF:4E:A0:9D:E5:B3:F2:B2:F8:29:B3:84:C3:0C:A8:E7:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/540c9de6-ccf9-387c-9dc0-117d1911ac2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.193.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:3f:69:de:5d:0a:b0:97:ab:73:6f:10:5d:c0:53:3f:3c:09:
63:78:66:1e:5c:d9:40:44:1a:10:61:ca:e5:1b:30:e0:8b:30:
48:57:c3:6f:45:5b:c7:3a:83:2e:ff:2d:22:61:9c:42:33:e7:
10:4a:dc:4e:05:96:4f:0d:45:03:51:14:9e:71:e7:8d:80:cf:
4f:28:e9:8d:32:c2:f2:db:2c:24:30:e6:2a:76:3a:0c:c0:9d:
23:96:af:12:94:53:4a:20:3b:d5:15:a0:fd:dd:63:75:8c:91:
1b:af:d0:c7:6a:14:6a:8f:5b:8f:c7:72:94:77:68:28:44:ae:
47:03:b7:2d:d5:27:14:77:29:75:53:67:a1:30:67:5f:43:d7:
ca:95:08:41:29:5d:4e:6a:43:92:c6:c7:69:98:d3:c4:cf:2d:
9c:41:33:d9:a6:d7:5b:ba:31:23:10:8d:ec:01:ed:cd:87:7d:
ed:ea:c3:65:d9:6e:dc:5b:9f:c6:d5:08:af:70:4a:eb:d2:c9:
cc:b5:3a:e8:63:42:68:b0:d9:65:de:20:16:9c:eb:7d:5f:2d:
8e:40:88:30:68:bd:1d:e2:92:a2:a9:04:49:55:72:a2:c5:e2:
2d:94:e7:9d:c0:84:26:a3:f1:51:a1:d3:67:d7:4d:bd:ba:57:
be:6c:73:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:46:22 2025 by rpki-client