Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7a4c7d25-3449-383b-9c40-c1ddc7855ca3.roa
File: 7a4c7d25-3449-383b-9c40-c1ddc7855ca3.roa (raw, json)
Hash identifier: XvtN7BGbMOoGOB4LU5HAkvZTptcAtUYfs050QjzVxC8=
Subject key identifier: B0:D7:FC:E3:BD:54:6A:99:83:BB:45:69:D5:C4:4C:5E:E7:02:A8:BF
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848301F2A157F3D4D4AE915F9C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7a4c7d25-3449-383b-9c40-c1ddc7855ca3.roa
Signing time: Fri 13 Dec 2024 01:48:29 +0000
ROA not before: Fri 13 Dec 2024 01:48:29 +0000
ROA not after: Thu 13 Mar 2025 00:48:29 +0000
asID: 13335
IP address blocks: 172.69.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:1f:2a:15:7f:3d:4d:4a:e9:15:f9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 01:48:29 2024 GMT
Not After : Mar 13 00:48:29 2025 GMT
Subject: CN=4b7b7dbb-ead5-4495-bcfe-cbec2de6f49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d1:bf:23:2a:c8:b1:f4:1c:33:57:c3:a2:04:
92:6f:e6:6f:9c:3f:7d:f9:f9:57:f0:3f:5b:d7:0f:
e9:64:c9:f3:ff:3f:16:d3:4b:92:e6:ba:64:00:63:
2f:7a:d7:2a:6a:26:24:38:b2:a2:4c:35:cd:81:e7:
df:56:68:d8:ed:04:07:80:79:3b:19:4d:62:e3:ea:
16:93:eb:57:f8:91:ad:d7:36:65:1f:9d:de:8b:43:
0a:d5:01:f8:10:57:cc:26:99:23:e9:32:63:bd:f3:
f5:8b:66:68:56:bf:78:34:63:79:5d:39:1f:57:45:
d2:bf:bc:c8:f2:22:e4:e6:a6:67:2f:a4:d1:0d:c3:
ec:2e:d4:25:3c:25:53:8e:88:74:a5:d1:93:eb:a9:
c5:ac:27:0b:5b:20:ad:c2:cc:02:76:92:7c:82:81:
74:08:37:1a:cd:24:b7:ce:50:d3:4f:f4:ea:d1:56:
66:0f:0e:17:af:14:be:b1:09:4e:14:20:14:ed:cf:
89:47:e4:27:ae:f0:ed:35:8c:85:5c:76:d2:b4:a1:
d5:e2:07:0a:22:df:36:ec:e2:00:3a:b9:83:69:0d:
98:a0:56:d6:34:6a:05:fb:bc:2f:15:ed:ea:64:51:
f5:18:90:bd:1e:15:13:d4:c1:3f:9a:07:11:8f:e3:
73:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D7:FC:E3:BD:54:6A:99:83:BB:45:69:D5:C4:4C:5E:E7:02:A8:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7a4c7d25-3449-383b-9c40-c1ddc7855ca3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:17:82:54:76:70:81:d8:8a:60:ff:7d:f9:04:3d:a3:69:1f:
16:3b:09:60:27:43:30:b2:87:43:f0:fe:d3:97:8e:bf:4d:f4:
86:28:ed:90:62:3d:96:61:13:aa:ad:73:76:a0:50:64:6c:f8:
dc:c5:d2:9e:ac:5e:1c:dd:6d:de:1e:93:94:67:5d:5d:6e:bb:
a2:b5:7b:91:85:82:29:04:e9:0b:26:01:fa:ca:45:66:a5:15:
90:69:3a:a5:e2:0b:f6:bc:c6:19:2e:cf:2f:9d:31:66:f0:c9:
37:ec:e7:c2:e0:09:cf:33:bd:eb:7b:64:81:9a:80:b7:64:64:
90:6e:17:e2:4c:7a:df:37:fb:f0:9b:9c:ab:76:ea:fa:e9:e8:
4e:e7:f8:0d:b4:9b:8b:78:14:ce:ca:79:64:eb:d3:22:48:28:
ee:5b:e1:d7:9a:e5:cb:39:ce:6b:0d:c5:ca:4f:59:2b:4f:9a:
92:75:78:1e:bc:b1:67:71:24:45:bf:28:0f:da:a6:16:62:4f:
01:48:55:53:8a:fd:31:c5:d4:75:66:46:e7:5b:85:d8:59:6b:
12:c1:86:ef:13:ab:bc:92:a3:78:9c:0b:45:d5:0f:b3:27:e5:
cf:01:cc:a1:01:9e:30:d0:fe:2a:65:1a:54:70:c1:22:ce:19:
47:5b:e8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:58:34 2025 by rpki-client