Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/70d2fdbb-4dc4-3ec4-9ec5-88e4a20220e1.roa
File: 70d2fdbb-4dc4-3ec4-9ec5-88e4a20220e1.roa (raw, json)
Hash identifier: MJAEV4gy1/L8RvXhEaouQU9bLQYC+c55VUo9cR3e3QI=
Subject key identifier: 54:DC:4A:2E:C7:88:F6:60:88:07:66:02:E3:54:82:2A:D7:B6:90:54
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848281E5BDF1B49AAA2B7662380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/70d2fdbb-4dc4-3ec4-9ec5-88e4a20220e1.roa
Signing time: Tue 10 Dec 2024 05:00:23 +0000
ROA not before: Tue 10 Dec 2024 05:00:23 +0000
ROA not after: Mon 10 Mar 2025 04:00:23 +0000
asID: 13335
IP address blocks: 172.65.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:1e:5b:df:1b:49:aa:a2:b7:66:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 05:00:23 2024 GMT
Not After : Mar 10 04:00:23 2025 GMT
Subject: CN=cc710262-29da-44b5-b1ec-f9e54eb363ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7a:a5:31:60:ce:20:76:ec:f1:5e:3a:f2:b6:
fc:3b:51:94:aa:05:a8:1f:98:66:a9:8c:06:04:f7:
71:27:1c:00:d7:53:da:41:43:d3:9b:75:05:43:8b:
a4:44:fb:20:a4:76:da:15:b0:28:bc:60:8c:12:70:
eb:82:4f:fa:06:58:cc:14:22:90:7e:8c:07:eb:10:
e0:b7:3a:7a:ff:f4:73:9f:bc:b3:b7:4d:f6:de:3f:
35:ee:b0:28:7e:52:4c:42:8a:89:6b:db:2f:e5:71:
81:c5:d8:01:f6:46:e6:6e:56:db:b4:df:7c:47:65:
8d:d6:64:c9:b8:a3:93:e2:ac:af:66:75:47:89:f6:
0c:b3:97:b2:70:a3:16:6c:df:b8:3d:96:38:16:b0:
0f:17:9b:d5:11:40:eb:2d:56:a7:cb:89:8f:8e:75:
5e:40:30:52:0b:dc:58:29:b7:0f:f9:bf:a2:b8:88:
85:d2:21:cf:0c:f6:bf:3d:75:93:60:2c:d2:ca:f5:
da:b9:e1:9d:c3:c0:47:da:87:b9:c3:53:a3:13:2e:
da:14:67:96:80:32:a4:8e:ec:8a:56:d5:94:ac:3d:
67:0c:9f:54:71:be:34:d4:11:ec:33:3a:03:da:13:
7b:46:fb:66:66:d9:52:44:8e:8b:37:c1:cc:b0:4d:
fe:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DC:4A:2E:C7:88:F6:60:88:07:66:02:E3:54:82:2A:D7:B6:90:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/70d2fdbb-4dc4-3ec4-9ec5-88e4a20220e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.65.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:e3:a9:55:91:af:a6:e9:98:32:06:9a:7b:02:24:86:8f:f0:
2b:c4:93:e3:fb:ca:37:ac:13:d9:44:16:82:70:b9:0d:b0:07:
b3:1c:0d:c2:20:7a:5d:17:d2:ba:bf:fc:41:4d:cc:50:05:05:
d1:da:9d:91:82:f3:6c:33:b3:8e:38:5d:18:37:45:4f:9c:1e:
6e:2e:5e:09:d6:58:05:a1:6d:8c:4b:87:79:52:eb:f5:ab:55:
ec:50:66:89:c6:e2:b6:5c:b3:e7:51:62:f8:1c:6e:db:ca:fd:
ce:f5:5a:67:b2:75:0b:e4:16:fc:d1:b5:3b:a7:7c:61:d4:8a:
42:2f:f8:95:d8:fc:8b:28:c4:fa:06:2e:cd:94:3f:49:1c:a1:
f6:45:60:ab:6f:46:02:81:76:9a:38:6a:28:52:84:5e:3e:9d:
bb:50:ff:37:05:6e:25:13:2f:6f:46:94:4c:e7:85:11:51:cd:
c7:c8:0d:7c:f1:0f:e0:0e:54:f8:b8:06:af:70:89:42:bd:5d:
cd:93:a2:93:17:d0:c9:e8:50:90:d5:01:31:f7:e1:70:79:0b:
e4:ee:7b:5d:cf:0e:51:3b:cf:44:56:2e:fd:ae:ac:e3:12:c7:
9c:0f:5d:69:5f:3f:0c:87:53:35:f4:01:e4:d3:23:67:c8:51:
e5:e5:62:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:43 2025 by rpki-client