Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/614204ac-6d1c-3957-aacf-46eaa6662605.roa
File: 614204ac-6d1c-3957-aacf-46eaa6662605.roa (raw, json)
Hash identifier: z4i10e8ql/UmGqw7fpLWeeqLak4dom5oxQr0hgLDgj0=
Subject key identifier: A5:41:94:79:27:46:E1:BF:A7:1B:A3:AE:05:74:50:01:DC:95:0E:2F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584828208C0F9CE6FC0309BAF400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/614204ac-6d1c-3957-aacf-46eaa6662605.roa
Signing time: Tue 10 Dec 2024 05:04:48 +0000
ROA not before: Tue 10 Dec 2024 05:04:48 +0000
ROA not after: Mon 10 Mar 2025 04:04:48 +0000
asID: 13335
IP address blocks: 172.67.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:20:8c:0f:9c:e6:fc:03:09:ba:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 05:04:48 2024 GMT
Not After : Mar 10 04:04:48 2025 GMT
Subject: CN=42814400-d111-4d19-bf8f-bd4361e457b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fd:4a:68:49:bc:3a:20:bd:08:e3:1f:f5:13:
50:5f:e9:04:53:5b:55:e9:94:f5:43:1f:1b:eb:54:
56:1f:0c:b6:b5:8b:e5:ac:68:0e:02:d1:73:3f:91:
b5:f1:60:44:32:db:59:2c:06:df:a6:97:12:c5:ae:
2f:40:06:c4:ee:30:c8:38:ff:d4:c2:dc:95:c4:42:
ee:07:c8:e4:39:27:9d:cd:e5:cc:eb:eb:ec:f7:77:
c0:c7:ab:12:67:ce:6a:dd:0f:17:f2:f0:42:35:46:
b8:ba:7a:f0:cb:6e:1f:28:c3:02:b9:12:8a:64:bc:
9c:d4:8a:23:35:35:fc:de:dc:17:14:9f:b6:da:d3:
f5:f0:de:99:cb:82:96:3b:fb:bb:df:35:a3:9a:6a:
d5:e3:b1:51:05:88:e6:94:2c:c8:54:29:f7:82:8c:
71:19:ca:7b:09:98:4c:1c:d3:6b:b3:27:2b:6a:6a:
2d:1f:08:9f:1d:6f:61:65:12:9c:1d:b7:6a:92:0b:
5a:be:7c:a4:df:8d:b8:2c:f6:f4:32:34:99:8b:6e:
2a:d6:cb:05:ae:b4:63:3c:78:02:95:fd:8f:f4:ce:
03:ac:f7:df:17:62:e3:26:82:4b:41:63:09:90:20:
d5:7e:7e:83:d5:08:f3:8a:e3:10:55:6e:81:91:2e:
72:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:41:94:79:27:46:E1:BF:A7:1B:A3:AE:05:74:50:01:DC:95:0E:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/614204ac-6d1c-3957-aacf-46eaa6662605.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.67.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:df:b5:7a:94:69:6f:2f:49:da:a1:3a:82:bc:b1:54:96:10:
e9:cd:68:43:6f:a0:07:ec:4c:e6:f4:b3:e2:d4:7e:c3:46:b9:
74:77:b2:e9:a3:42:cf:87:3b:b6:fb:83:2a:6a:d0:4a:f2:97:
6f:9d:89:af:49:9e:c1:65:a3:89:07:30:bf:b6:1e:2e:53:d3:
dd:55:ae:38:cb:23:8a:7d:26:5d:cc:cf:3e:57:db:64:b3:9f:
a3:54:e0:c2:8c:4e:74:56:4b:f1:b2:b7:ca:e2:dc:75:d6:e5:
73:d0:eb:31:9e:56:5e:44:40:7a:47:be:40:30:1a:f9:38:27:
b0:52:72:11:ed:ef:b3:2d:8a:21:32:d9:69:7b:94:30:73:4a:
3b:08:57:9c:36:47:e5:43:94:dc:cc:c8:1e:4f:c1:ff:cc:68:
9b:2d:c3:38:75:f4:99:95:5a:7f:bb:48:29:c2:e1:85:dd:ed:
ac:d3:bc:20:b8:da:58:d2:f2:21:86:99:5a:05:29:39:cd:49:
c3:59:65:49:01:9e:69:99:53:62:7f:00:a6:6b:a8:ef:46:cb:
f9:17:4d:e3:56:e2:50:57:d1:b0:05:4a:47:9a:0d:fe:79:a8:
73:26:ce:9c:d5:4f:82:c8:5b:00:ba:a2:c8:89:05:9c:36:2a:
a6:cf:82:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:40:54 2025 by rpki-client