Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/652448bb-3d6e-3504-97d2-6e50fc7101b0.roa
File: 652448bb-3d6e-3504-97d2-6e50fc7101b0.roa (raw, json)
Hash identifier: XVEHrbSl/54H5pE3QhgxI4EIUj3ClIgHlBcrT4N5VUw=
Subject key identifier: 65:3B:9A:51:05:5B:BA:42:07:77:0C:EB:43:28:CA:2A:8E:69:C8:3B
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A908B39F2FED354858B5D00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/652448bb-3d6e-3504-97d2-6e50fc7101b0.roa
Signing time: Wed 11 Dec 2024 02:02:05 +0000
ROA not before: Wed 11 Dec 2024 02:02:05 +0000
ROA not after: Tue 11 Mar 2025 01:02:05 +0000
asID: 13335
IP address blocks: 172.68.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:90:8b:39:f2:fe:d3:54:85:8b:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 02:02:05 2024 GMT
Not After : Mar 11 01:02:05 2025 GMT
Subject: CN=2b78e98e-ff70-4c0c-852b-0f5a4f02a54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:13:71:0c:9c:36:88:86:af:cd:10:b0:8a:92:
26:db:a5:60:01:9a:33:29:5b:ae:64:84:1b:bf:6c:
35:72:01:65:5c:4e:66:ab:14:30:72:e3:98:cf:28:
a3:a2:8a:bc:5a:6d:ff:4b:7c:df:2e:6f:ad:9d:56:
b7:30:61:c6:13:4a:6c:c9:4e:ee:f7:46:99:46:5a:
b6:fc:e6:89:2f:a5:89:d1:18:d5:c0:94:e7:29:3c:
e4:7f:93:9b:65:a3:a9:ea:79:b0:c1:59:68:dd:db:
5e:2f:63:31:b3:76:49:eb:a2:3b:da:38:a0:80:e1:
d8:c5:a8:00:e5:c3:4f:50:73:18:6a:66:23:9a:91:
65:9c:6b:1f:1f:d2:6a:b5:96:63:85:0b:a7:e6:9b:
d4:ba:eb:eb:2d:20:4f:a7:25:05:09:35:d2:2f:68:
1d:a2:b9:59:de:0c:84:38:4e:a2:0e:1c:4b:c2:ef:
a5:00:99:2a:5c:3e:47:3b:cd:d1:45:8f:14:91:7c:
60:38:a4:aa:4d:09:9c:94:e3:39:a7:7f:08:76:4c:
89:83:98:0f:f4:9a:d0:57:ca:73:7c:c4:60:e1:d7:
17:6c:3e:0c:8b:c0:47:81:14:1b:9b:2b:0d:f0:e3:
92:10:7a:18:df:72:f0:11:e3:00:8d:b9:29:29:8d:
c9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3B:9A:51:05:5B:BA:42:07:77:0C:EB:43:28:CA:2A:8E:69:C8:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/652448bb-3d6e-3504-97d2-6e50fc7101b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:cb:b7:57:c7:38:25:87:f2:8c:9e:8e:7b:a0:f5:b8:23:04:
98:8c:81:fb:33:79:05:6e:fd:1e:13:17:56:e4:ca:8b:70:db:
59:14:67:1e:3d:11:11:db:b9:0e:43:d6:46:09:fe:2c:4d:f7:
66:43:a3:3f:52:0a:dd:aa:68:14:29:9b:37:70:d0:5d:a2:52:
57:4b:95:02:c0:80:28:46:c2:95:27:2e:f3:f5:29:2e:9f:61:
30:e9:6a:7e:94:aa:3a:c2:d7:47:62:01:44:85:01:24:58:bf:
4e:33:d7:38:56:35:fe:86:9e:90:88:2d:09:ff:08:1e:85:83:
a2:17:3e:e3:8a:6e:c8:26:f8:4d:49:80:73:9f:a9:c9:56:b8:
90:47:b5:e9:54:6f:f0:f5:e0:92:85:aa:e6:7c:1a:17:77:26:
c8:bc:d3:fc:1a:25:8b:bb:cc:72:9c:d6:9c:10:a0:72:d3:46:
35:98:c7:aa:1e:42:e0:7c:a5:6b:04:8e:a9:39:51:e3:7c:dc:
01:4e:f0:4b:7f:72:f9:b4:ba:cd:a9:7a:36:91:6f:3b:6c:21:
0d:01:98:fe:96:9c:f4:2f:b1:d0:e3:3e:89:4e:f4:97:0d:47:
b9:a5:b7:e2:a9:7e:69:da:9d:74:38:63:97:07:75:1b:15:87:
d0:6c:66:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:05:22 2025 by rpki-client