Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/820efa47-8b84-3760-949a-545c9c09ab4a.roa
File: 820efa47-8b84-3760-949a-545c9c09ab4a.roa (raw, json)
Hash identifier: I+sbn8MY++ZHOXWezHNm+BOlpiv7qtxvJz+B5OzFUfM=
Subject key identifier: 31:96:BE:74:66:1A:E2:3A:17:32:0B:06:B6:BC:46:A2:7E:78:56:9A
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A8E1F1D97BD3026B3AB7C80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/820efa47-8b84-3760-949a-545c9c09ab4a.roa
Signing time: Wed 11 Dec 2024 01:57:12 +0000
ROA not before: Wed 11 Dec 2024 01:57:12 +0000
ROA not after: Tue 11 Mar 2025 00:57:12 +0000
asID: 13335
IP address blocks: 172.68.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8e:1f:1d:97:bd:30:26:b3:ab:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 01:57:12 2024 GMT
Not After : Mar 11 00:57:12 2025 GMT
Subject: CN=d86a37ad-515f-4389-be23-3125b6da3f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:5c:fa:76:a2:9b:7e:bf:92:f1:f0:84:de:43:
e3:c9:1c:58:f8:bd:0a:49:4b:d7:aa:2e:6b:62:6a:
50:f0:60:bf:4b:4a:61:61:d6:f1:a5:04:1c:f1:fd:
88:71:02:bd:9e:29:51:a1:51:b3:fd:f8:f6:a8:5d:
d7:dd:37:db:ab:eb:f7:f9:3a:7a:64:88:1c:b4:41:
46:74:f2:83:ad:5c:79:23:db:c1:65:4a:37:a5:09:
43:ce:c4:13:12:1e:f0:e6:92:aa:49:bf:3f:95:ab:
ec:b8:08:a4:b9:c1:e4:c4:06:6b:6f:03:50:03:fc:
c3:68:70:cb:d2:c6:2a:b3:7e:c6:71:e5:d5:1d:30:
20:f9:2c:42:91:fc:51:50:fb:64:8f:f6:b6:4c:ee:
00:a0:26:d4:67:e4:df:64:a0:ec:ec:a4:a6:cf:cb:
9b:15:3a:0e:b3:5e:77:70:fe:fe:53:6e:68:e8:a5:
58:d3:3b:c1:81:10:dd:f3:67:99:3a:dd:7d:47:10:
01:7f:55:fd:a4:1a:19:07:58:5b:56:53:2d:2d:18:
a3:63:f5:4b:33:08:c2:b9:55:11:b0:9e:73:6e:a3:
71:3e:50:13:f3:54:1e:3e:2a:fd:48:5b:51:b5:17:
a3:95:6b:b9:f0:50:b2:47:e8:5a:eb:01:70:09:1e:
68:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:96:BE:74:66:1A:E2:3A:17:32:0B:06:B6:BC:46:A2:7E:78:56:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/820efa47-8b84-3760-949a-545c9c09ab4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.160.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:a5:9a:70:bc:0e:a8:49:85:3c:91:74:ce:d3:48:41:16:dc:
75:c6:2e:cb:9e:d4:da:ea:bd:c0:54:f1:bb:6d:55:09:64:e9:
8e:ec:70:4b:1d:0c:30:ef:3d:bb:51:43:a8:ca:ba:7b:bf:42:
17:e7:6c:4e:09:9b:20:74:1c:83:31:97:0c:ac:3b:3b:d9:12:
65:8f:40:d0:63:49:82:1f:1c:34:f2:64:48:4b:f6:d8:fe:c4:
1d:07:1c:b7:27:22:e3:68:bb:c8:67:cb:b5:97:e2:61:72:7b:
a5:ce:3a:79:52:b9:3b:9b:6f:f1:31:ea:23:13:dd:cf:1f:fd:
8a:0f:f3:02:48:86:e1:1f:80:e2:95:e4:28:6b:83:57:9a:c8:
bb:6d:80:09:66:a7:bd:27:3b:70:da:80:5c:3e:dd:6c:af:d9:
1f:f9:35:e4:af:4f:9c:92:02:e6:13:97:ca:95:73:2b:3e:b3:
61:d6:34:a9:fb:5c:5d:91:f1:10:cb:ef:93:72:62:d9:30:48:
c8:30:6e:5a:b7:0a:d2:68:89:0f:1e:53:76:0e:a5:b9:ad:64:
f6:73:77:4b:59:0b:de:f8:ca:27:84:69:3d:ed:17:70:05:b6:
e7:c2:98:98:93:aa:da:ed:bf:64:1d:11:ad:2a:93:13:b7:d2:
b4:a5:21:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:10:39 2025 by rpki-client