Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b8ec4b1-3c3e-3144-ba22-d1e93a0808fa.roa
File: 9b8ec4b1-3c3e-3144-ba22-d1e93a0808fa.roa (raw, json)
Hash identifier: dadQ8otRjdJracexWtNQLLuw027IUAayeIcN8VQR5mI=
Subject key identifier: B3:CB:14:BC:AC:B6:FE:02:C3:C5:68:F7:9B:C3:7E:49:F0:C7:00:00
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A99C38ECCBA6ADA5FB35780
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b8ec4b1-3c3e-3144-ba22-d1e93a0808fa.roa
Signing time: Wed 11 Dec 2024 02:20:39 +0000
ROA not before: Wed 11 Dec 2024 02:20:39 +0000
ROA not after: Tue 11 Mar 2025 01:20:39 +0000
asID: 13335
IP address blocks: 172.69.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:99:c3:8e:cc:ba:6a:da:5f:b3:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 02:20:39 2024 GMT
Not After : Mar 11 01:20:39 2025 GMT
Subject: CN=c59f6730-021a-4512-9da3-5aca7c185783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:a1:9f:3b:42:2f:fd:dc:bd:45:bb:17:b6:
5c:fa:dd:94:c6:bf:e4:2f:a8:10:8f:3c:bd:cf:0e:
77:52:d7:7b:91:d9:d7:51:1c:90:f8:ab:6e:d6:af:
83:62:82:da:a0:0b:28:27:3d:da:31:df:c5:5e:f7:
e2:d9:f4:aa:57:47:2a:61:e4:cc:37:43:31:27:8d:
44:37:75:cc:fb:8a:b7:24:5d:af:d1:2a:ac:1b:63:
76:f3:be:8e:db:10:21:d5:68:8c:2c:1c:cf:4b:e5:
06:43:98:d5:69:93:53:6e:8d:94:ca:dd:a9:e0:d0:
e1:61:be:2d:1e:0b:16:fb:1c:67:d8:b6:86:d0:a7:
6b:13:94:f1:d4:65:02:c4:6d:53:5b:43:50:a6:29:
aa:e6:b4:f1:12:ad:14:2e:e1:5b:f5:79:dc:a7:38:
d4:27:0e:20:99:c0:d7:1d:33:08:b8:24:33:4b:3e:
1d:1d:44:0e:cc:51:32:ea:be:d5:e5:8e:81:32:6a:
7e:43:43:9a:37:18:f3:71:2a:e8:3b:75:6c:f1:e0:
a7:6b:bd:c2:c3:a1:36:34:36:89:12:e2:f4:06:41:
14:ff:72:65:ca:56:0e:dc:be:68:b6:52:12:69:b8:
e3:be:2d:82:c7:19:fb:13:bd:15:f8:f2:34:04:be:
8d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CB:14:BC:AC:B6:FE:02:C3:C5:68:F7:9B:C3:7E:49:F0:C7:00:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b8ec4b1-3c3e-3144-ba22-d1e93a0808fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:b8:be:63:d7:59:7c:6a:bb:57:02:54:ae:1a:c3:e7:5b:fa:
18:a7:30:35:62:90:f1:0e:50:12:71:9b:65:32:28:8d:c5:44:
4a:9b:2e:26:45:b3:8d:ff:0c:30:f1:56:2a:d3:db:54:a5:77:
2b:84:65:7c:f0:5e:53:ff:72:26:0c:3d:b0:05:3f:9e:97:29:
0b:89:d6:b3:7e:d3:57:75:b2:c7:66:bc:e4:f2:88:a6:3f:53:
73:60:29:d5:84:00:19:61:08:5a:69:a1:2d:bd:b7:2d:68:8d:
c0:9e:08:65:b8:d4:e5:fb:69:f7:57:17:4a:e6:53:14:04:48:
70:bc:e4:24:9a:17:44:fa:d2:15:a7:5b:de:7b:bd:c8:4a:79:
eb:51:a5:f1:bf:fa:52:bf:3d:18:15:cf:f4:23:a0:55:91:26:
db:84:d1:d9:ea:41:1f:19:80:44:dc:0d:8d:23:42:f7:f6:be:
20:32:ea:c3:8b:2f:73:df:c7:e6:cd:78:28:ed:01:61:96:8c:
3d:90:a4:ab:5a:ec:c7:4e:5d:b2:83:fb:01:99:eb:26:2d:c2:
34:85:66:13:32:ea:d5:59:b0:f1:13:6e:98:e3:c2:ad:ee:b9:
6b:66:7a:1e:fb:e2:17:fd:78:e4:c7:40:df:32:4f:e7:61:52:
12:ce:41:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:10:14 2025 by rpki-client