Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/92e4e419-f2f3-3346-9dfd-f221a40709de.roa
File: 92e4e419-f2f3-3346-9dfd-f221a40709de.roa (raw, json)
Hash identifier: p9rwFkqHSkosvfrBVpP+L1jUQTnWhSiL/6V4qjSL91E=
Subject key identifier: 40:58:71:8B:C8:D9:1A:2C:A1:A8:91:A1:E3:63:94:0E:69:32:1F:C8
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A9E58D7A92F9C7B394E9A00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/92e4e419-f2f3-3346-9dfd-f221a40709de.roa
Signing time: Wed 11 Dec 2024 02:29:53 +0000
ROA not before: Wed 11 Dec 2024 02:29:53 +0000
ROA not after: Tue 11 Mar 2025 01:29:53 +0000
asID: 13335
IP address blocks: 172.69.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:9e:58:d7:a9:2f:9c:7b:39:4e:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 02:29:53 2024 GMT
Not After : Mar 11 01:29:53 2025 GMT
Subject: CN=ff001bba-fff9-44dc-9ee5-d5eed266b028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:10:43:51:ee:e3:a7:fa:9f:d5:71:78:03:46:
b2:d9:af:46:44:fc:fc:f0:e7:17:4d:36:f8:1a:7a:
8d:8d:5f:f9:d2:69:96:37:9e:af:81:3d:a7:9e:88:
d9:2f:32:56:af:6a:49:b8:52:8e:c2:37:27:fb:4c:
06:99:e5:8f:3e:0f:97:5e:ea:d1:98:8c:d5:c0:24:
0b:6e:db:69:9d:78:c6:c4:7b:48:f9:1d:f7:35:61:
fa:60:e8:63:c7:94:ee:03:d7:ad:13:c1:9e:da:19:
c2:1a:e8:31:95:a0:4d:dc:12:79:3f:91:f6:88:4c:
a1:a3:9a:54:28:62:75:d9:3a:75:14:80:9d:6f:f6:
f4:21:fa:ae:f4:13:75:74:b2:b0:d1:40:6c:53:a7:
29:76:76:97:9b:28:68:a1:f6:78:cd:c1:34:4c:85:
da:8c:ac:ae:88:fd:b2:ed:4f:14:e4:b2:57:6c:c4:
c1:20:d4:c9:8c:36:3b:93:21:7a:93:be:48:05:0c:
ce:39:ce:82:a0:f0:a7:4c:7a:d5:2b:b5:cf:14:62:
ec:d3:9c:e2:b7:02:5a:f6:1c:8f:22:9d:3d:f7:05:
da:5a:8f:e5:02:d0:28:c9:73:66:75:0c:6d:29:68:
64:93:c0:5f:1f:2a:49:a2:eb:41:47:f9:2c:06:52:
b0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:58:71:8B:C8:D9:1A:2C:A1:A8:91:A1:E3:63:94:0E:69:32:1F:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/92e4e419-f2f3-3346-9dfd-f221a40709de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:e8:a5:cd:25:82:e8:0a:eb:98:ac:a2:c4:b9:8c:4b:83:1c:
1d:8e:99:f9:2f:9f:5e:a0:79:e9:9f:15:ed:a3:a8:5a:99:99:
b3:31:e1:ea:b2:e5:95:5f:d1:03:c2:bc:3c:52:05:b7:63:04:
31:86:3e:a9:2a:8a:9a:8f:ad:79:36:68:25:c2:51:86:91:03:
62:39:bd:45:de:19:a3:97:b5:b6:b0:3f:45:04:27:26:26:fc:
f4:93:c4:a8:6d:ab:40:40:c2:c2:c4:a2:81:cd:b4:7f:53:1b:
de:61:e1:83:bb:f0:4b:03:2e:38:40:2e:60:a6:2f:61:8a:be:
2b:b5:63:11:c3:26:b2:f8:9e:0f:f4:f6:4d:a4:b0:95:78:b6:
94:03:be:eb:64:69:86:c7:bf:51:1b:e8:52:2f:d6:6c:4f:34:
a0:ed:82:2d:82:ac:88:16:e7:7d:47:72:4a:e6:f8:a2:e1:b6:
b2:43:cf:4b:f8:e1:62:0e:80:6a:4b:62:15:bd:f3:33:14:5a:
30:cc:95:8d:70:44:17:32:2d:f7:8f:76:a3:5a:19:99:c4:9b:
54:3d:86:b3:c0:63:0c:a2:3b:4b:6c:56:dd:6d:7d:b3:ca:61:
66:15:0b:fc:e7:38:a4:cc:aa:82:cb:21:85:f8:07:3f:c9:a9:
b4:f6:18:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:10:25 2025 by rpki-client