Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/84b21014-599c-378f-93b0-1228f9e8bd77.roa
File: 84b21014-599c-378f-93b0-1228f9e8bd77.roa (raw, json)
Hash identifier: v0d5wp25ctkunq/w3cz0gjF9rp/X8Dt+5ZfZXXgUfg4=
Subject key identifier: 6D:64:86:29:6F:67:B9:B0:93:DF:70:2C:89:06:46:CC:5E:21:E4:04
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848283D9511C59FDA8E5334E580
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/84b21014-599c-378f-93b0-1228f9e8bd77.roa
Signing time: Tue 10 Dec 2024 06:03:18 +0000
ROA not before: Tue 10 Dec 2024 06:03:18 +0000
ROA not after: Mon 10 Mar 2025 05:03:18 +0000
asID: 13335
IP address blocks: 172.68.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:3d:95:11:c5:9f:da:8e:53:34:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 06:03:18 2024 GMT
Not After : Mar 10 05:03:18 2025 GMT
Subject: CN=cbe43a5e-2ef0-4dc2-b03f-03b60b411ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:41:58:9d:a2:bd:b8:7b:cb:d1:51:6e:6f:8b:
be:0c:3f:ae:8b:0c:9c:3f:90:b1:46:c5:dd:da:19:
51:cf:7c:20:3e:2f:2d:1c:c5:2e:18:9f:9b:76:fa:
74:12:82:f6:83:e6:0d:ba:0e:68:79:bf:e7:32:53:
09:fd:9e:24:89:02:a8:a0:e0:9e:98:d5:34:e8:d3:
7f:5f:4f:da:b3:80:17:99:2f:4a:39:92:f3:4b:52:
a4:05:3d:6e:e2:37:3e:b8:be:29:d7:d1:a1:b1:b4:
c3:48:c9:f2:49:05:9f:19:8d:fe:14:bd:fc:93:a7:
fb:01:a8:ce:2f:48:ff:92:dc:95:37:27:a6:25:f0:
0f:d3:59:36:41:12:c6:97:70:69:ac:9c:65:05:f5:
da:63:97:66:94:7c:62:68:28:fe:65:a1:9a:e5:ed:
97:29:15:1a:87:e8:ed:d4:61:50:75:68:93:28:95:
5e:27:25:f4:38:c7:52:6f:00:fd:69:b2:f1:8d:3c:
77:7f:27:6a:36:0f:61:46:e8:64:4d:23:2f:fe:63:
fa:2c:4d:13:e3:88:72:5f:d1:db:17:2b:6c:cb:9b:
9b:4a:20:03:03:e3:27:7e:ff:ca:e7:2f:2f:79:bd:
db:c8:cc:1b:3d:79:5d:a0:71:9c:42:08:73:ed:e2:
2e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:64:86:29:6F:67:B9:B0:93:DF:70:2C:89:06:46:CC:5E:21:E4:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/84b21014-599c-378f-93b0-1228f9e8bd77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:8c:c3:60:2f:e3:dc:3b:0b:20:4f:44:54:f9:52:c5:c9:25:
5a:7f:01:cb:a4:d5:bd:72:79:2a:b5:c7:24:ed:69:5f:36:94:
e7:ca:b5:6e:2a:81:a5:e4:f1:f3:b5:d6:6a:72:7c:fa:6f:8b:
aa:bc:92:2c:3e:65:a1:31:29:af:60:1d:38:d5:8b:3b:42:0a:
82:3d:32:98:b5:7d:a7:ce:45:89:2c:73:b3:d5:a9:85:38:c7:
3b:f9:f6:c8:1f:96:eb:9a:33:34:3a:38:92:98:1b:78:6f:42:
a8:5b:6c:84:24:ed:6b:67:62:30:83:d1:a8:34:f4:ad:d4:69:
3b:25:cb:01:9f:22:c6:be:36:f8:66:32:39:fe:e7:84:6d:32:
c5:1a:b0:67:3a:ee:c5:28:9d:06:74:9f:77:73:74:dc:b6:c7:
de:e3:8a:9b:96:3e:6b:e1:42:e7:22:24:ab:dd:bb:f9:5f:64:
2f:51:9e:63:27:34:35:a7:a7:14:a6:03:f6:95:09:8c:d8:35:
5c:bd:5d:06:b2:b0:75:05:df:ff:85:82:82:42:91:ca:f1:9e:
a7:30:01:92:e7:13:1c:f6:bb:da:c1:d6:db:4a:3a:c0:aa:37:
d2:2f:19:5f:a4:38:a8:a9:ac:5a:de:f6:bf:4d:0b:c4:9c:83:
27:34:f0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:58:28 2025 by rpki-client