Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c1fbff9-85a2-3eee-9d47-5618fa42445f.roa
File: 9c1fbff9-85a2-3eee-9d47-5618fa42445f.roa (raw, json)
Hash identifier: cWFBCGCKG463hoZIoLIbVddIne627DQlMmStMIfnpvU=
Subject key identifier: 32:62:17:BC:B8:93:9B:86:77:2F:14:69:F0:0B:3B:B1:86:F8:90:6D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848280936F4378D17007FB31680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c1fbff9-85a2-3eee-9d47-5618fa42445f.roa
Signing time: Tue 10 Dec 2024 04:17:47 +0000
ROA not before: Tue 10 Dec 2024 04:17:47 +0000
ROA not after: Mon 10 Mar 2025 03:17:47 +0000
asID: 13335
IP address blocks: 172.68.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:09:36:f4:37:8d:17:00:7f:b3:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 04:17:47 2024 GMT
Not After : Mar 10 03:17:47 2025 GMT
Subject: CN=a3fddf4e-0a14-4dcc-9ce0-fe32e36ba9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:43:a6:cb:41:3e:01:fb:87:97:15:b8:46:3d:
61:60:e5:13:6e:a6:8e:7b:c7:ff:68:81:1b:d4:d6:
3b:90:73:d2:06:35:73:e1:44:a6:10:f4:38:4a:9f:
20:61:c8:1d:ab:7a:25:6c:7e:02:f2:05:7e:ff:12:
ce:4d:74:9a:44:7c:7f:82:83:09:4c:0f:1e:55:e1:
ca:ea:93:85:e5:d0:1d:ac:db:dd:a6:66:03:e7:48:
ab:74:26:93:ab:be:3f:ae:f7:fb:a8:ae:57:b7:1a:
61:d7:b6:71:95:61:1d:ff:b0:ff:8f:83:c4:5c:d5:
c6:4c:ce:22:01:21:b2:c8:34:67:88:2f:f1:0d:cb:
a3:b1:4e:d1:01:15:19:3e:7f:7f:ac:7b:6e:ce:07:
93:f8:ac:27:19:a6:fc:fd:0f:0d:0d:15:43:14:e0:
02:e0:f0:92:08:31:13:6f:bb:63:87:2d:4b:3c:6d:
37:fe:e6:fb:7e:91:02:85:c5:ce:fa:34:93:07:bd:
5f:6a:0d:24:1a:17:4c:34:94:f5:61:26:b9:ef:b8:
e9:30:e2:ca:14:95:c7:42:49:69:fd:76:98:63:26:
ed:e6:c5:a1:7f:84:10:b7:cb:ac:89:78:2c:58:d8:
50:c1:09:2b:f1:4d:fe:7f:89:69:d5:4f:d5:88:dc:
5b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:62:17:BC:B8:93:9B:86:77:2F:14:69:F0:0B:3B:B1:86:F8:90:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c1fbff9-85a2-3eee-9d47-5618fa42445f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:71:b9:97:d1:76:31:f5:c4:3c:86:23:96:bd:bb:ad:a5:6e:
f0:3a:79:69:c7:94:af:a4:29:0f:8e:8b:97:10:10:44:9f:55:
b9:22:d8:4c:74:f1:ec:5c:a7:1a:be:ad:ae:fb:3f:3d:6b:e9:
63:d5:71:b0:29:7c:fe:4e:20:94:d7:05:1c:a8:55:23:7d:5b:
cb:ba:d0:ef:e8:d1:10:c9:90:dc:fb:b6:82:ab:73:5f:19:fe:
64:a3:1d:08:3c:25:aa:dd:b8:b7:a0:3a:f0:bc:1a:8e:24:9e:
83:71:f6:12:60:2a:4f:28:8f:ad:bc:c5:5f:f0:c6:0d:3c:cb:
6b:22:b3:6a:d0:76:b7:dd:de:e6:20:2a:48:0b:89:42:d6:55:
0f:08:1a:c0:ec:4e:cd:7f:59:72:8a:47:4a:9b:d9:69:59:49:
9e:d1:62:e6:db:34:c4:20:eb:96:cb:0c:d1:c3:8f:73:48:05:
9d:9d:bd:bd:1b:ae:82:e1:c0:9a:43:d0:ba:19:de:f2:52:a7:
87:9f:22:e0:eb:da:56:b0:1a:63:c8:dc:89:58:40:7f:2e:ac:
81:13:d4:c2:bd:99:73:50:d3:cb:af:65:05:f6:b0:57:83:5b:
d5:22:19:0c:ce:e7:84:59:5b:c8:99:1b:52:57:2a:b6:cf:81:
de:5d:dd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:05:30 2025 by rpki-client