Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bfcb1b8-fdc8-33e4-a1e0-0741f7b101ee.roa
File: 5bfcb1b8-fdc8-33e4-a1e0-0741f7b101ee.roa (raw, json)
Hash identifier: bauCFVR7e+cODEVHjXc8vMzJXD9ewcWg5aFsjK4MrxE=
Subject key identifier: 7B:7C:30:9C:31:E4:17:B2:14:65:6F:F0:F8:E5:B7:EB:D9:52:8C:AC
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848283B1F1B8B810B1E5487EFB0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bfcb1b8-fdc8-33e4-a1e0-0741f7b101ee.roa
Signing time: Tue 10 Dec 2024 05:58:21 +0000
ROA not before: Tue 10 Dec 2024 05:58:21 +0000
ROA not after: Mon 10 Mar 2025 04:58:21 +0000
asID: 13335
IP address blocks: 172.68.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:3b:1f:1b:8b:81:0b:1e:54:87:ef:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 05:58:21 2024 GMT
Not After : Mar 10 04:58:21 2025 GMT
Subject: CN=3cdb254d-f24b-4688-87eb-6aa6609e4d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8d:8f:58:22:8d:41:15:20:23:fe:ba:a7:98:
f4:4c:d6:88:2a:c5:b6:82:e9:4b:ee:46:48:78:a9:
e7:d8:55:24:b9:a9:15:cb:77:a8:27:0c:d5:cd:1e:
cb:d1:0d:89:dd:ee:19:a1:dd:ee:37:66:a8:01:51:
3c:d7:88:a1:03:e0:45:0d:7d:ce:0f:e7:25:72:31:
4d:ec:66:53:09:ed:10:63:ee:67:cf:87:d3:1f:5e:
6a:38:2d:8e:e1:a8:92:5c:27:e0:5c:10:2d:70:39:
b9:8a:02:e9:3a:51:6a:3d:e9:e1:ae:7d:cd:1e:cb:
20:d6:40:98:57:d0:9d:49:74:fe:f1:bd:d4:64:74:
ec:62:f6:4d:11:1d:5d:c4:dc:cd:86:72:5c:9b:45:
04:32:d0:19:ad:ac:64:bb:09:e6:f0:c9:56:21:af:
ad:9a:7b:f6:42:2d:9f:b9:e4:35:7e:38:76:92:06:
e6:94:f8:93:85:5a:3b:43:2f:c7:e7:48:77:d9:48:
6e:07:e8:56:b9:f1:18:ee:ba:9f:ab:8c:5b:1c:42:
32:91:af:a8:4c:fb:17:4f:94:24:1f:b1:bc:34:50:
95:94:d1:6e:be:c8:02:33:fe:e0:c3:90:29:87:6a:
4b:88:ea:05:d4:38:53:75:5e:ed:54:2f:90:70:94:
51:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7C:30:9C:31:E4:17:B2:14:65:6F:F0:F8:E5:B7:EB:D9:52:8C:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bfcb1b8-fdc8-33e4-a1e0-0741f7b101ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:05:0e:32:ec:da:f9:0a:14:f2:ee:d8:6f:88:ae:2b:85:0f:
b9:f3:69:68:c5:0c:a6:8b:7e:62:8e:ed:91:f0:04:76:4e:3f:
97:10:b8:93:61:f6:44:f2:c3:33:1e:1a:09:95:f5:75:d1:cb:
c3:0a:61:b4:d9:f9:94:b0:3a:2a:f4:46:16:5b:60:3e:de:a1:
79:4e:19:5f:5d:60:2d:3a:47:ad:4a:de:3e:9b:9e:50:b3:c9:
0b:3c:ee:64:98:2e:f8:e1:79:a2:75:00:7e:a0:3e:03:a3:12:
2d:c3:40:45:42:eb:4f:ac:bc:db:c8:dc:fa:0a:3d:35:cd:7d:
b7:1f:5a:a8:60:47:af:d1:73:70:a7:40:9b:ac:18:00:47:53:
2f:b6:b1:ee:ab:3d:70:29:ac:0c:ba:9f:88:c5:2c:43:3e:62:
50:c5:21:65:03:77:73:43:ba:64:df:21:f0:04:12:e4:80:3c:
2f:b0:ed:b9:36:f2:5e:ac:53:8c:d5:72:ec:72:14:d9:06:60:
f0:7e:c2:c1:f3:07:51:21:7f:14:da:b1:99:a6:17:ab:14:b6:
c9:12:e5:85:cc:af:ea:a0:c3:81:65:03:15:44:91:86:2d:31:
da:23:2e:32:46:10:2f:12:f8:8a:0b:56:9c:ce:01:cc:b1:e4:
37:a2:78:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:45:53 2025 by rpki-client