Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/743b685d-a995-33d3-b57e-32072f7b3a66.roa
File: 743b685d-a995-33d3-b57e-32072f7b3a66.roa (raw, json)
Hash identifier: 3h+fKNuOzJ8mYqjJUz0Wt4b/h+2mj1Rm9VfluhyXgi4=
Subject key identifier: F6:86:8C:87:EA:2C:AC:47:F3:CF:C5:65:B1:C9:BB:7D:ED:67:F4:2D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482AA8E9D8A48B6CFB69ACAFC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/743b685d-a995-33d3-b57e-32072f7b3a66.roa
Signing time: Wed 11 Dec 2024 02:51:11 +0000
ROA not before: Wed 11 Dec 2024 02:51:11 +0000
ROA not after: Tue 11 Mar 2025 01:51:11 +0000
asID: 13335
IP address blocks: 172.69.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:a8:e9:d8:a4:8b:6c:fb:69:ac:af:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 02:51:11 2024 GMT
Not After : Mar 11 01:51:11 2025 GMT
Subject: CN=38d2d4f0-cdc5-42a1-9098-bd70cb371eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ba:78:4e:38:d4:19:ad:26:32:a3:3e:b1:ed:
a3:eb:ce:8e:5a:34:b1:03:c9:39:03:e2:f8:7b:19:
6c:a8:7d:0e:6f:eb:cf:31:47:68:a6:da:43:ef:79:
7e:8f:17:71:1e:3e:13:8c:a4:45:0f:70:0e:28:60:
5f:09:bc:b5:14:e4:5e:2c:df:e6:ee:97:dc:7e:d9:
f2:16:a3:ae:f2:73:58:48:a0:b7:dc:c0:db:46:dd:
5a:b9:ba:a9:b5:e2:e5:ec:92:db:db:2e:ee:64:6f:
41:80:a3:ae:39:bb:3a:f8:1a:eb:14:4f:5a:ac:eb:
ad:0a:65:2c:d0:e6:8d:4f:de:41:0c:e6:7e:b0:9f:
69:50:c3:f4:58:7e:b7:80:49:21:ac:55:e2:93:16:
6b:83:aa:12:fc:59:50:51:dc:1f:ce:b5:5b:4d:5b:
d2:5a:db:f2:e2:d2:61:c2:25:d3:fb:aa:c8:3c:77:
32:94:09:e5:13:e1:10:23:5f:fa:31:b2:ee:39:d9:
8d:96:a3:bb:3a:42:a5:6f:74:ce:14:c6:4e:65:8f:
b5:78:71:fb:dd:d6:46:10:a2:1f:20:d0:7a:ff:c5:
db:06:b5:54:23:80:7e:0b:d0:7d:7c:2e:c3:68:d6:
c4:5b:bd:6e:f7:dc:b0:83:6b:32:69:3c:0f:66:56:
02:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:86:8C:87:EA:2C:AC:47:F3:CF:C5:65:B1:C9:BB:7D:ED:67:F4:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/743b685d-a995-33d3-b57e-32072f7b3a66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:87:5f:fe:9c:ab:78:40:be:3c:ce:e1:ef:80:a3:15:8b:09:
4c:b5:6c:5e:3c:be:11:d8:bf:a8:43:03:0c:b5:76:3a:8d:da:
2d:30:b8:fd:e5:05:a1:fa:7e:22:2e:f1:30:9b:31:9b:98:db:
05:89:a0:22:ed:29:af:5d:0d:65:5e:c2:f1:d6:7d:97:78:59:
9f:5a:89:be:55:a7:34:03:a1:0e:f1:d9:90:4f:cd:5d:97:d7:
7a:d0:e9:3b:af:b9:75:ac:a8:35:18:76:c7:84:f6:25:23:5b:
70:f7:1a:f5:47:13:d5:53:61:0a:7e:6a:2c:04:e0:f4:a7:fe:
fe:4e:82:a1:f3:24:24:56:3e:b5:4b:2d:dc:e9:b5:0b:5e:42:
7f:ae:5c:ff:e0:ad:87:b3:56:03:a8:8f:24:8d:59:92:d6:20:
82:95:00:3a:e1:08:26:25:48:c9:0a:2b:07:02:9c:e0:0b:9a:
11:f2:cb:09:70:48:54:77:27:a6:76:41:89:3c:cf:62:e0:2d:
2a:20:75:23:23:ef:64:cd:2e:12:9c:d7:4a:b6:89:1a:5e:2a:
bd:0d:17:29:26:a5:63:a3:42:4b:e8:05:2e:07:bb:fc:cf:05:
cb:15:31:62:c1:d5:3b:f0:26:d0:09:9c:9f:10:ff:c1:d1:f1:
3c:f6:a0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:56:33 2025 by rpki-client