Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/972449bb-7cee-3ab2-8b1b-a5de60bee399.roa
File: 972449bb-7cee-3ab2-8b1b-a5de60bee399.roa (raw, json)
Hash identifier: 4ka6te2Bh7SjLtBYHQ39krXRlKcZSMrOxaiOfkibsZY=
Subject key identifier: EE:1E:17:FF:89:DD:05:E7:38:FE:E0:43:B1:6A:B9:B6:90:EA:2C:76
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584828204543830AD43E0FE9E420
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/972449bb-7cee-3ab2-8b1b-a5de60bee399.roa
Signing time: Tue 10 Dec 2024 05:04:15 +0000
ROA not before: Tue 10 Dec 2024 05:04:15 +0000
ROA not after: Mon 10 Mar 2025 04:04:15 +0000
asID: 13335
IP address blocks: 172.67.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:20:45:43:83:0a:d4:3e:0f:e9:e4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 05:04:15 2024 GMT
Not After : Mar 10 04:04:15 2025 GMT
Subject: CN=6ae4aa96-b969-446a-9fcf-f526dd898d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:36:4f:77:83:13:f0:22:4f:2e:13:5e:1c:51:
8d:d5:2a:4e:42:05:7b:6e:c6:f6:20:21:05:13:06:
1d:41:24:82:85:46:79:a3:43:f1:62:f6:01:b1:69:
14:b3:c2:cd:94:b9:46:cf:9c:6c:3a:19:fa:69:26:
41:27:7f:a9:6a:bb:63:1e:7a:6a:c1:2a:d7:58:37:
6a:61:1a:0b:ef:68:0c:45:8e:ef:a6:95:16:da:01:
70:ae:94:a2:b7:75:43:2b:38:d0:07:d0:b2:b7:7e:
d5:57:8f:3e:87:b5:22:89:5c:71:e2:40:c7:96:75:
06:73:a1:cd:d2:81:39:2e:c7:4d:6e:f5:2a:a1:23:
34:68:70:1a:b2:1f:4a:79:67:09:3d:7a:ae:3f:9b:
cc:ff:cf:cf:ce:76:41:07:fa:80:7d:c5:c4:57:c7:
1e:e4:8f:49:fb:e3:ab:58:7c:ad:66:1e:09:b9:22:
4e:da:1c:68:e6:d3:ec:8f:a3:a6:a7:0c:3a:46:01:
66:78:4d:c2:f2:90:af:55:0b:0d:7a:44:06:f6:a7:
53:6b:15:a7:d4:a4:37:20:ea:2b:87:08:98:b0:3d:
f5:95:02:02:02:05:8f:35:2d:68:00:09:81:cb:f7:
28:3f:71:75:4b:94:03:1a:5b:0a:68:34:53:c0:9c:
28:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1E:17:FF:89:DD:05:E7:38:FE:E0:43:B1:6A:B9:B6:90:EA:2C:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/972449bb-7cee-3ab2-8b1b-a5de60bee399.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.67.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:57:48:1a:49:af:77:53:c4:85:8a:0c:30:a9:a8:56:11:70:
c0:13:c1:eb:2b:71:99:13:b9:1a:f9:98:9d:6e:47:df:ee:07:
1c:a7:8d:94:f2:55:d4:32:07:c5:d4:ab:f3:f6:c4:e0:69:05:
95:97:71:05:19:84:28:50:de:41:d2:b9:30:f6:79:da:c2:05:
db:43:5c:24:81:19:45:76:69:73:73:66:f6:18:95:25:a3:07:
ad:80:d7:1d:68:50:4a:e4:77:ed:d2:61:23:79:1d:98:4d:02:
71:f4:95:ab:a1:45:85:82:78:7d:94:48:81:b4:ef:95:96:96:
51:5e:c5:8e:ee:ce:81:01:c8:3b:db:33:0c:07:1d:72:f5:c7:
7e:34:62:ec:28:a9:66:4d:f1:92:e5:58:3c:76:76:2a:fb:b4:
30:7c:04:d0:cf:d3:b2:de:69:82:15:a3:cf:d5:23:3e:20:76:
f5:c5:36:35:52:32:06:c8:3d:aa:99:5d:3c:33:0e:a0:b1:2a:
f9:6a:f3:f9:2a:b0:7d:fa:98:70:f5:76:08:e7:34:f3:44:a7:
bf:99:2c:70:9d:4b:45:86:5c:49:2f:e9:63:03:99:5c:63:51:
3a:6f:03:3b:e8:80:04:83:70:ad:4d:77:2d:dc:41:5d:27:8b:
7a:3f:07:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:46:42 2025 by rpki-client