Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a2f5f37-9c52-3cff-bf73-4095009e313a.roa
File: 5a2f5f37-9c52-3cff-bf73-4095009e313a.roa (raw, json)
Hash identifier: IfuEKY6M1EBxCTrGvqQT6Erbj9chBDQFQyCv4mglTMk=
Subject key identifier: FE:F4:D7:68:C9:85:CD:35:9E:5F:C9:43:11:30:FC:07:1A:E6:C0:02
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584828401735967ED09286F15C00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a2f5f37-9c52-3cff-bf73-4095009e313a.roa
Signing time: Tue 10 Dec 2024 06:08:21 +0000
ROA not before: Tue 10 Dec 2024 06:08:21 +0000
ROA not after: Mon 10 Mar 2025 05:08:21 +0000
asID: 13335
IP address blocks: 172.68.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:40:17:35:96:7e:d0:92:86:f1:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 06:08:21 2024 GMT
Not After : Mar 10 05:08:21 2025 GMT
Subject: CN=0395ec8a-2f88-4dd7-b745-be67f5826644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c5:85:35:cb:78:bf:62:0a:37:a2:36:73:26:
40:d4:bf:e1:59:4a:22:76:66:17:48:29:34:3d:2a:
5d:84:8a:f2:a9:a1:99:20:24:19:38:93:f0:7b:4d:
a1:b3:d9:e8:3a:e9:c3:15:06:a2:f5:98:61:53:10:
08:aa:71:a4:35:35:db:9a:f8:ad:06:26:0a:46:59:
34:e0:36:a3:bd:97:de:2c:b0:33:67:3a:0a:6f:9b:
4f:ab:eb:63:52:2c:5f:7e:3d:f2:06:2b:73:57:61:
24:e7:e5:91:e8:27:35:e2:e6:f6:b0:55:70:a9:92:
f8:d3:fd:e0:59:de:97:46:2f:56:c7:05:e9:e1:39:
29:58:3c:a6:3b:9b:fd:0b:90:80:80:9b:bf:00:8b:
a9:e3:91:9e:5b:be:92:e2:70:fa:90:66:0f:30:2a:
3e:2e:44:b8:15:1c:ba:25:25:7f:01:5e:19:fd:11:
0a:a8:56:8c:4b:b7:13:f5:b7:d6:75:55:15:c0:b8:
57:e1:5a:98:07:d0:bb:6e:ea:63:71:11:52:53:52:
10:29:f7:aa:79:5f:80:53:be:50:62:1a:97:f8:d3:
f1:8c:cc:74:93:e3:16:e7:86:41:df:40:f6:09:dd:
63:d5:b0:43:d5:0a:a0:38:d5:c0:5e:9b:cc:e7:bc:
8b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F4:D7:68:C9:85:CD:35:9E:5F:C9:43:11:30:FC:07:1A:E6:C0:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a2f5f37-9c52-3cff-bf73-4095009e313a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:26:38:a3:60:aa:d8:a5:c8:c8:66:59:d8:74:37:69:10:50:
1b:a1:f2:37:8b:69:d2:09:31:e7:17:56:86:a9:a6:06:38:b9:
53:2f:ca:d3:38:77:ef:d3:4d:02:3d:6d:2c:60:69:97:01:99:
1a:1b:34:6e:32:70:51:1d:1c:03:93:4b:ee:c8:b7:d5:18:40:
ff:68:94:bd:3f:de:69:eb:ac:c1:09:f8:ec:08:cc:15:a7:d9:
6c:96:cb:b3:57:fc:68:d9:16:02:65:da:f8:81:e5:d7:8d:80:
a9:8a:9b:a3:3c:c1:ed:f8:00:5f:56:b6:f3:c0:14:10:68:71:
18:27:b1:1c:57:09:31:1f:57:8f:54:ca:ac:15:12:e6:04:b3:
06:d2:ac:7e:24:d0:4a:d1:a4:16:04:51:73:28:46:1a:04:d9:
71:74:3c:67:c9:76:90:36:cb:60:00:e9:15:65:de:7f:18:be:
b4:37:fe:0e:4c:c7:9e:bc:e9:63:65:bc:17:9b:c6:25:9e:a6:
9f:40:5e:0f:00:9e:eb:d5:00:32:b7:a5:4e:29:a8:00:c2:1e:
54:86:7d:e9:e4:ac:b9:82:78:43:8d:75:1e:07:1f:61:82:e5:
38:ea:de:33:d0:ae:eb:fa:8f:6d:80:0a:b2:bb:2c:b4:55:0f:
c8:77:6b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:03:03 2025 by rpki-client