
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/73e2c3d7-4e4a-3966-b48c-28107c4df733.roa
File: 73e2c3d7-4e4a-3966-b48c-28107c4df733.roa (raw, json)
Hash identifier: jkc+qlo4Vx7HYPTru8c9sE/hNcqmG1vIjBIws8aJJlY=
Subject key identifier: E5:2A:0C:9A:79:58:17:5E:CE:0B:E1:EF:73:1F:6B:16:4D:11:D3:0A
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482809253B5CB536306F467E80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/73e2c3d7-4e4a-3966-b48c-28107c4df733.roa
Signing time: Tue 10 Dec 2024 04:17:39 +0000
ROA not before: Tue 10 Dec 2024 04:17:39 +0000
ROA not after: Mon 10 Mar 2025 03:17:39 +0000
asID: 13335
IP address blocks: 172.68.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:09:25:3b:5c:b5:36:30:6f:46:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 04:17:39 2024 GMT
Not After : Mar 10 03:17:39 2025 GMT
Subject: CN=476cd991-1fec-4cc6-9018-e1d8e80e8d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:58:07:8e:0e:8b:2c:93:81:4f:a3:1b:c0:
cd:e8:87:77:58:87:ce:e0:d2:40:3e:9d:2e:6d:52:
9c:ba:76:ef:13:30:0a:11:b9:34:b4:1d:69:ec:e4:
e7:d0:dd:4c:f9:56:60:f6:60:1b:6f:09:e1:9e:fd:
38:3c:28:e3:53:98:9e:0a:99:d3:6f:eb:7a:64:7a:
db:c8:1f:68:e1:a9:a5:16:54:78:43:ed:b0:47:24:
0a:53:5c:82:6b:38:cb:75:a4:f0:50:71:75:e3:a2:
03:f7:01:09:a0:85:4a:37:a5:a5:2a:b0:15:49:cf:
f9:44:99:89:d4:96:6a:34:bc:98:33:41:69:56:96:
b9:12:ac:86:99:ab:ce:21:10:17:ce:48:35:bb:72:
47:9b:f6:fd:e4:39:3e:c5:c3:11:4f:e3:2a:1f:76:
46:6b:2b:b1:2f:24:22:a9:d8:fe:73:4c:57:74:a0:
91:e6:3a:fd:70:7f:7f:a6:53:c4:b0:22:58:40:1f:
a3:d5:b2:9a:c3:91:b3:61:8a:7e:6f:24:44:75:60:
41:2e:0c:d9:58:b0:c7:ba:ea:8c:a2:38:b7:dc:e9:
9d:76:70:9c:27:e3:04:cf:0c:84:e4:62:ff:4b:08:
f6:bb:5f:5b:79:c8:d5:ca:70:e5:28:0e:24:9b:05:
6b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2A:0C:9A:79:58:17:5E:CE:0B:E1:EF:73:1F:6B:16:4D:11:D3:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/73e2c3d7-4e4a-3966-b48c-28107c4df733.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:6f:fe:59:7c:69:f5:86:47:ad:a0:7a:ce:75:35:21:75:a9:
7a:04:ce:cc:5d:38:18:32:a7:c0:3e:99:e2:e7:d4:88:53:f7:
88:79:42:07:b6:b3:3c:c0:11:3a:7b:bc:70:70:d5:63:2a:dc:
b7:a8:83:0e:02:cd:09:82:30:b9:03:48:ef:18:93:18:7f:94:
d2:54:bc:5e:80:21:69:92:8e:f8:4e:7d:5b:2e:f3:33:1a:29:
3b:c5:9b:79:b2:66:ed:f4:a2:83:f6:63:99:71:e6:62:f3:c1:
27:c5:03:1f:42:d9:c7:b5:7e:03:08:0d:9c:04:97:46:ad:f4:
26:c1:7d:3b:8e:59:31:9f:db:c5:44:46:35:bf:f7:ee:b0:70:
53:c4:c9:30:2d:1a:be:17:b3:96:c4:bd:85:00:fd:58:2a:3f:
af:f4:c9:93:1a:67:f7:42:86:df:e7:2e:6a:58:e5:7f:fb:ca:
0f:88:1c:df:02:38:1a:f6:25:6f:4c:55:eb:95:ce:6f:ab:66:
4e:f4:59:f4:cd:4b:2b:4d:c2:3c:8a:91:93:ac:53:b9:89:34:
f8:25:21:b7:f4:44:6c:8a:52:ca:d9:dd:8b:a8:c9:34:57:50:
06:6b:49:88:b9:78:88:e9:e2:ab:28:68:00:06:6b:b7:87:4c:
30:6b:34:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:56:23 2025 by rpki-client