Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/555d125d-f376-3387-ab81-1586334e83a8.roa
File: 555d125d-f376-3387-ab81-1586334e83a8.roa (raw, json)
Hash identifier: EcH+EZ6m7nB42ioCpxsZGGWDZeDxOUBgzYwMzLfNJeg=
Subject key identifier: 18:47:89:4C:0E:3F:4D:88:61:C5:60:7C:77:A9:3D:E9:3C:79:CC:CC
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848283CE6FFFA1E2A61D4A51D00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/555d125d-f376-3387-ab81-1586334e83a8.roa
Signing time: Tue 10 Dec 2024 06:01:56 +0000
ROA not before: Tue 10 Dec 2024 06:01:56 +0000
ROA not after: Mon 10 Mar 2025 05:01:56 +0000
asID: 13335
IP address blocks: 172.68.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:3c:e6:ff:fa:1e:2a:61:d4:a5:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 06:01:56 2024 GMT
Not After : Mar 10 05:01:56 2025 GMT
Subject: CN=102e003a-1401-4627-89b5-c3a00614e1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:92:4c:52:47:be:8a:48:4b:c1:5a:e7:57:d0:
29:a6:45:00:36:52:28:14:2c:3d:0c:9c:95:b3:4c:
92:8f:5d:cb:9a:4a:b3:1b:5f:81:c9:ab:33:1c:85:
7a:c5:66:39:48:58:2a:10:a0:71:22:52:a2:d8:6c:
f0:5b:7d:4d:1e:46:4d:53:c8:3a:03:f2:ea:dd:d1:
f9:5f:50:4e:5e:66:5a:46:40:0f:17:c1:2a:8c:4b:
fa:52:de:1f:73:94:f0:94:8c:c2:ff:81:24:24:cf:
43:b6:f5:7a:f4:76:6e:a3:de:4a:9b:7f:d5:f6:2d:
10:c3:bd:95:d1:52:47:6f:17:76:fa:ba:0e:83:b7:
0a:09:35:a7:bd:ba:65:88:d2:36:18:31:4e:96:60:
54:79:57:50:c6:e2:3c:64:59:02:eb:3c:6c:17:fe:
33:cb:b8:ed:86:31:48:43:aa:0b:22:ca:ca:de:d2:
9f:57:b2:54:a6:ad:95:26:35:71:14:84:3f:57:65:
bc:51:78:4d:b5:2f:9d:05:3c:7b:45:5c:5c:25:5e:
97:3a:7c:cf:9d:c2:46:2a:76:fa:ab:da:e3:74:2b:
69:ff:00:d0:2c:6b:86:df:d3:e9:73:21:51:0f:cf:
ab:a4:49:03:bb:d3:56:bf:d9:f8:28:ee:21:7a:46:
8d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:47:89:4C:0E:3F:4D:88:61:C5:60:7C:77:A9:3D:E9:3C:79:CC:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/555d125d-f376-3387-ab81-1586334e83a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:74:0a:83:2b:2c:e3:02:54:69:b7:38:58:e2:21:a0:d2:f2:
86:25:88:19:49:fd:b9:69:03:13:63:9a:a7:2c:0a:e3:52:c6:
96:fd:4e:9c:9e:af:36:93:01:6b:7d:34:7d:c7:5e:b4:11:eb:
34:54:a8:90:bf:3f:b3:bb:38:de:85:26:73:ed:0e:89:bc:d8:
af:e3:2c:05:04:fd:60:9d:e0:98:5c:25:83:37:99:2d:68:db:
16:a0:57:b2:50:74:f9:e1:e1:1b:4b:9b:2c:7c:60:c9:de:cc:
62:aa:a3:9c:e3:54:0d:4b:36:16:de:af:37:c8:73:9b:9c:0b:
5b:b2:78:30:37:ed:fc:96:d8:1c:af:68:e5:94:99:80:cc:d2:
ca:c5:a5:6a:80:96:ab:43:a3:ad:c8:f9:44:64:fd:a6:d5:0d:
ce:c9:37:51:43:9c:ca:05:b2:4e:11:ae:b0:66:1e:f5:4f:82:
ff:90:7f:52:56:dc:1f:ab:02:b2:31:9f:20:d9:73:37:b5:b6:
be:d3:38:7c:03:a6:fe:93:0f:71:ae:75:ef:8e:24:6b:1f:df:
19:1c:a5:fc:7d:77:f4:fd:ec:6c:07:20:ff:2e:23:78:8b:cf:
bb:d9:41:06:bd:12:ab:9f:c4:ce:63:17:2c:8c:01:73:2c:95:
ac:b7:30:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:47:45 2025 by rpki-client