Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/65591e67-0914-3f45-985e-ed195ce13ef4.roa
File: 65591e67-0914-3f45-985e-ed195ce13ef4.roa (raw, json)
Hash identifier: CNAXi5Wp9mJADRceQbSf6Gis6KDdwiRC3caVFzgAV4c=
Subject key identifier: 50:96:8E:2F:C9:33:4D:44:35:7E:D7:13:6A:01:CD:85:A0:FC:F5:38
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848283B87C4EA0542804CC60F00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/65591e67-0914-3f45-985e-ed195ce13ef4.roa
Signing time: Tue 10 Dec 2024 05:59:10 +0000
ROA not before: Tue 10 Dec 2024 05:59:10 +0000
ROA not after: Mon 10 Mar 2025 04:59:10 +0000
asID: 13335
IP address blocks: 172.68.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:3b:87:c4:ea:05:42:80:4c:c6:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 05:59:10 2024 GMT
Not After : Mar 10 04:59:10 2025 GMT
Subject: CN=a319ea32-96d2-4eea-a410-ad99b627667e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:40:0b:88:98:53:bc:1d:12:f8:f8:36:ca:fe:
9d:b6:fe:52:bc:88:2a:87:67:82:26:d7:21:91:7c:
db:69:bd:af:c8:a8:d4:4f:06:2d:71:21:0f:88:b9:
c6:c1:59:7d:78:21:1c:7b:83:43:cd:2b:f8:46:ba:
8a:b9:a9:a9:bc:e4:9e:80:66:ef:f0:d5:1b:f7:0e:
1d:31:ad:7a:21:8c:99:4c:7c:fe:21:1a:6c:e2:8d:
51:45:66:c3:5d:80:98:dc:20:21:ec:b9:db:42:11:
d7:b7:b4:71:9c:a8:88:df:83:1f:28:4a:36:61:86:
eb:20:ca:49:41:5b:7b:7b:d4:5e:b9:d8:55:ff:c5:
19:c3:41:74:61:ff:30:ec:bb:03:ae:38:53:47:83:
ef:32:9c:88:cf:ca:ea:ba:16:80:f6:ff:86:42:5b:
07:84:bf:07:b7:dd:75:df:df:7a:0f:eb:06:99:cf:
65:f9:cd:69:a0:77:43:33:9f:c5:4d:50:88:d4:45:
cd:6b:36:12:40:b4:68:77:b1:25:08:e3:e7:89:cb:
2d:5e:50:f8:a1:90:20:fd:f1:87:97:f2:93:c8:c7:
e6:a9:5a:33:79:80:f0:82:ec:9b:00:35:c7:81:72:
d5:79:63:0c:05:39:62:3a:c5:07:11:89:cd:59:0f:
1e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:96:8E:2F:C9:33:4D:44:35:7E:D7:13:6A:01:CD:85:A0:FC:F5:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/65591e67-0914-3f45-985e-ed195ce13ef4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:b3:15:80:f7:51:56:c6:59:33:ea:99:4f:60:f0:9a:98:c3:
d9:a1:ed:3b:78:30:44:16:e8:3b:60:77:67:ca:e5:34:98:58:
9c:ca:43:dd:c0:23:5e:83:9c:90:b1:89:40:05:f4:57:94:ed:
6e:17:e2:d2:c9:2f:13:15:41:57:84:31:c0:95:13:8e:e4:15:
5d:1a:12:1f:e4:bc:e2:89:86:c0:5d:16:7b:18:61:d1:01:87:
90:90:53:01:23:57:78:df:19:56:c9:bd:81:af:b6:21:37:63:
55:64:11:d5:67:50:17:5e:36:38:b6:d8:8d:04:b4:ff:b9:26:
37:17:f6:61:3b:f6:de:4f:de:2b:57:40:42:61:27:57:ad:55:
cd:15:93:5f:2d:b1:1a:1b:f9:01:ee:64:fa:b4:2c:08:a6:46:
6d:e4:88:2a:c1:90:3b:a7:ab:44:fa:be:be:2a:ed:3c:3e:46:
c3:d8:bd:1c:f2:33:f5:19:a3:07:03:39:69:c6:d5:ef:64:20:
4a:95:01:2f:c1:12:6f:7d:42:2a:0b:e0:a2:a3:4d:14:35:83:
a7:cd:58:47:df:38:61:9b:f3:62:d5:1b:fe:b3:bc:72:c0:4f:
eb:36:71:da:2f:45:f7:3a:9f:dd:ab:3b:4f:7c:92:b5:15:d6:
29:f0:ea:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:44:01 2025 by rpki-client