Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6885fc50-69b1-3ea9-b198-141c1f789b0f.roa
File: 6885fc50-69b1-3ea9-b198-141c1f789b0f.roa (raw, json)
Hash identifier: c4D3A62sBz0Lsj8GKN0BYRsVPB/rI8ajU90A+YxEXyU=
Subject key identifier: 52:8C:47:93:BB:7E:B7:CA:9E:7C:A6:A6:2C:DA:3F:BE:9D:AC:6A:11
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A8BCFD1182594F92F802F80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6885fc50-69b1-3ea9-b198-141c1f789b0f.roa
Signing time: Wed 11 Dec 2024 01:52:32 +0000
ROA not before: Wed 11 Dec 2024 01:52:32 +0000
ROA not after: Tue 11 Mar 2025 00:52:32 +0000
asID: 13335
IP address blocks: 172.68.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8b:cf:d1:18:25:94:f9:2f:80:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 01:52:32 2024 GMT
Not After : Mar 11 00:52:32 2025 GMT
Subject: CN=aa1fe914-5434-43a0-95a5-86d64484f93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:fb:90:e8:03:0d:b3:66:59:14:39:91:1b:
5f:4a:82:a2:69:88:9f:1f:c7:96:eb:a5:94:99:3c:
df:14:f6:32:23:69:16:a7:2e:0d:ed:c6:c2:b4:0b:
c4:fb:1c:00:47:c7:97:82:bd:d1:b8:55:5a:2a:19:
ba:ea:fd:db:0a:88:33:93:e7:97:63:43:6b:31:30:
f9:00:e0:45:38:9b:1f:f0:f1:92:31:6e:6d:7d:ac:
25:33:b9:56:b7:40:17:c3:f1:9d:5b:0b:a6:73:2e:
07:cc:72:f6:ac:88:2e:c4:33:74:8a:2c:df:76:e7:
b1:5f:92:a1:fc:ab:4a:e1:cb:c6:68:d9:01:03:1f:
9c:05:94:7d:f3:e4:fe:00:e8:80:15:a0:3f:2e:a8:
6e:9a:81:f2:63:a4:a9:c4:68:0d:87:ce:57:fa:ff:
6c:55:f0:b5:4e:e4:ec:8a:25:f4:c4:34:8b:24:6a:
65:8f:2e:33:33:8a:85:be:7a:c4:61:d4:17:85:e4:
fe:2e:c0:64:c7:fc:be:9a:5a:35:40:53:c4:d9:9d:
f0:e3:b5:84:bd:a3:a9:c5:72:6b:bf:b7:69:9c:af:
46:f3:b7:75:3b:59:d2:86:0e:35:d8:63:0e:df:19:
e7:ec:21:dd:1c:0f:9d:dc:7b:f9:3d:42:08:0d:93:
df:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8C:47:93:BB:7E:B7:CA:9E:7C:A6:A6:2C:DA:3F:BE:9D:AC:6A:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6885fc50-69b1-3ea9-b198-141c1f789b0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.116.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:71:8a:fb:68:07:b7:ee:a7:19:38:16:f0:e4:12:a1:98:80:
f8:63:fd:17:f6:4d:08:92:2f:6b:d4:3f:1a:79:3f:41:0b:61:
e0:11:6c:6f:2b:3c:dc:27:e7:ee:9b:7d:c0:98:24:62:a0:61:
53:0b:b5:f2:0b:a5:b9:fa:58:0f:f5:93:68:2c:8a:ac:19:df:
3f:52:6c:4f:00:63:cb:4e:22:fe:29:7b:7d:b1:90:06:84:74:
d4:79:a7:81:ff:9e:25:df:f8:8c:3e:c0:4a:a4:d4:a3:dc:06:
10:11:55:c5:34:9a:a8:c4:7d:6c:6b:6e:98:a9:fc:3f:92:78:
8d:98:1b:00:ce:06:51:2d:38:6d:6d:f7:b5:8f:ea:9d:7a:06:
54:fd:5c:91:0c:1c:48:35:47:c1:3c:21:7d:a8:93:90:78:a2:
7d:10:aa:03:27:9a:b7:4b:cc:cd:6c:93:79:1f:f2:23:65:f9:
8c:d2:72:ed:b6:3f:2a:9b:14:11:7a:99:9c:1c:95:19:b5:49:
0b:da:6c:0a:a9:4c:c9:1b:6a:f3:97:09:8b:68:93:73:1a:6d:
2e:3d:b8:37:26:87:ab:ca:5f:5a:96:24:44:ce:83:a4:fb:96:
43:a5:6e:78:90:c8:aa:be:53:2b:c9:88:9a:9d:30:13:4b:88:
40:c2:5f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:23 2025 by rpki-client