Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bb2e80c-9652-3ef8-9112-813a640cf13f.roa
File: 5bb2e80c-9652-3ef8-9112-813a640cf13f.roa (raw, json)
Hash identifier: c/BSJ5y2k0lkAryFlQMJQ4ax64BiF7KvblNEIxa2zBU=
Subject key identifier: B4:8A:78:04:0A:A0:03:65:B4:7E:4C:A6:A0:CB:E3:75:1F:DE:D8:AE
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584828403A7B61DC5E386CA34C80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bb2e80c-9652-3ef8-9112-813a640cf13f.roa
Signing time: Tue 10 Dec 2024 06:08:38 +0000
ROA not before: Tue 10 Dec 2024 06:08:38 +0000
ROA not after: Mon 10 Mar 2025 05:08:38 +0000
asID: 13335
IP address blocks: 172.68.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:40:3a:7b:61:dc:5e:38:6c:a3:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 06:08:38 2024 GMT
Not After : Mar 10 05:08:38 2025 GMT
Subject: CN=41b824b8-4797-4439-aea4-b1775cc1e6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:69:9b:16:83:4f:a0:6b:3e:30:82:aa:17:b9:
9b:1e:b2:bb:b4:29:18:2f:50:e5:d7:90:40:ae:a3:
d8:60:f0:c0:40:d6:d7:a9:70:f3:a1:e1:f1:16:cb:
e7:79:9c:a6:67:41:bc:b1:d0:dd:3d:70:bd:69:cb:
42:d2:cc:e6:4e:2f:cf:1d:57:1c:c6:7b:87:2c:0a:
f1:ff:2b:95:7a:1f:3c:15:8b:7b:16:86:3c:e2:9f:
f1:bf:25:2b:bf:7b:4d:fa:1f:2d:3a:a5:83:c9:97:
74:60:b7:34:e1:53:51:07:66:12:41:97:2b:6a:e7:
ad:3e:73:af:ea:48:20:4b:5c:71:5d:34:13:0b:36:
9c:ec:f2:57:54:ed:af:62:7c:89:41:d6:e6:c5:35:
6f:05:6c:8e:ae:9f:5f:31:01:28:e7:0d:75:71:4e:
93:4d:97:75:76:da:b9:d2:72:18:41:12:79:b7:83:
99:ff:a6:c8:de:7e:81:97:90:1a:aa:0f:b2:a8:9f:
c7:d1:9f:9e:58:8d:4b:57:f4:7f:3f:c5:cd:25:a6:
8d:dc:ec:55:7f:92:38:d9:f8:66:62:8f:e4:3a:f6:
43:7d:6d:81:c7:9a:d0:dc:2e:9f:e9:91:99:6b:6b:
96:99:21:de:47:af:58:cf:e6:87:72:54:6f:6b:8f:
00:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8A:78:04:0A:A0:03:65:B4:7E:4C:A6:A0:CB:E3:75:1F:DE:D8:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bb2e80c-9652-3ef8-9112-813a640cf13f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:ca:f3:be:39:d9:fa:7d:11:51:94:bd:8f:86:8e:31:d0:95:
c6:ca:96:a7:6d:b5:e9:3a:4a:6d:f0:dd:5c:86:ec:f1:78:a2:
70:44:0f:9a:b8:cb:07:8c:50:85:9a:8b:fe:1d:c9:1b:ff:c4:
b8:4c:1e:06:7b:38:b8:cf:74:9c:fc:2a:73:4c:50:86:ca:e4:
9f:8f:2d:38:8f:59:77:d0:6e:a4:2d:54:61:9c:f9:30:0f:fc:
b8:84:4a:38:ea:82:96:17:4f:9b:5e:40:3a:44:42:88:c3:94:
27:ca:ff:51:07:b2:3c:0b:81:a8:fb:1d:dc:6f:82:1b:27:70:
f9:81:e7:a1:40:20:ec:95:68:00:16:2c:80:df:d1:30:51:91:
6d:ea:b8:be:09:ed:24:af:fb:61:b4:9c:dd:09:a9:5c:06:9d:
dd:f0:a4:fd:b2:96:0e:a7:00:29:a3:bd:69:5d:99:cc:94:2f:
c6:95:73:91:59:79:34:e8:f5:f7:50:d0:af:5f:9e:26:a7:45:
6c:14:43:5d:5f:f6:da:ee:c1:cd:e0:86:ce:9f:a8:08:a1:b6:
fa:92:5f:3d:71:e1:6b:d2:a8:ea:74:3e:c0:c4:80:32:a0:b7:
6e:70:bc:5e:de:6e:6f:b6:71:6d:9f:b6:ec:4b:3d:a5:d3:20:
9b:ae:f7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:48:47 2025 by rpki-client