Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c306518-a228-3b7a-8c6d-093123c8d599.roa
File: 9c306518-a228-3b7a-8c6d-093123c8d599.roa (raw, json)
Hash identifier: VZJyFdQddZEAqHHJVE1PLrJLx8lt4eRJJ4u4rTSCKRg=
Subject key identifier: 98:18:D5:45:33:81:B4:79:57:20:43:C7:4D:F7:6F:C6:ED:72:6F:F0
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848301E3FD87456CA6B1CC63F40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c306518-a228-3b7a-8c6d-093123c8d599.roa
Signing time: Fri 13 Dec 2024 01:46:38 +0000
ROA not before: Fri 13 Dec 2024 01:46:38 +0000
ROA not after: Thu 13 Mar 2025 00:46:38 +0000
asID: 13335
IP address blocks: 172.69.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:1e:3f:d8:74:56:ca:6b:1c:c6:3f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 01:46:38 2024 GMT
Not After : Mar 13 00:46:38 2025 GMT
Subject: CN=a577f19f-88ca-4b43-9f4f-3ebaae77db53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c0:e1:af:30:48:f3:3c:79:8c:24:be:ab:e7:
76:16:7b:de:f0:be:46:43:51:d6:45:87:68:2b:6a:
2f:84:45:f8:4c:6d:06:9e:66:0d:f9:de:1e:d0:8b:
2a:00:04:e0:bf:13:57:f0:59:39:51:70:84:28:24:
cf:2e:3a:cf:1e:e0:bd:90:2a:11:de:ad:a4:59:eb:
bb:31:80:09:f7:04:f7:08:ff:8f:34:9a:fb:b5:9c:
94:8b:44:da:bf:36:54:8a:ed:84:9d:c0:34:7f:a8:
23:7c:e0:f2:ca:2b:c5:a4:3a:3c:59:c8:33:7d:23:
9c:2f:b9:49:8e:e4:8d:63:48:80:b3:6f:32:d0:3d:
61:ca:87:94:42:54:ca:5a:00:f4:d6:91:71:12:62:
4a:12:f1:2c:48:54:6f:2d:94:56:4b:64:e3:ec:3e:
0a:90:ad:f3:de:01:cc:8a:b2:4f:d1:af:be:e1:c6:
4d:89:e7:67:f5:26:5f:dd:bf:1c:70:ca:73:2f:a6:
6e:f4:1c:ba:cd:4a:ed:ae:c0:b4:86:22:f9:8d:e3:
19:3a:9f:83:28:b2:ad:c7:27:c6:d0:70:3f:ad:36:
22:0d:80:64:92:5d:b6:5f:93:ad:6d:b3:57:45:bb:
9d:0f:c8:c1:c6:3b:1c:32:0a:20:d1:ac:4a:b6:19:
0d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:18:D5:45:33:81:B4:79:57:20:43:C7:4D:F7:6F:C6:ED:72:6F:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c306518-a228-3b7a-8c6d-093123c8d599.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:66:79:ee:58:dc:e3:27:39:3e:c5:07:d6:2e:ec:50:2b:d1:
b0:ff:a2:b7:17:99:77:ac:c5:31:2e:9c:38:cd:6c:75:25:f2:
da:a7:d8:83:6c:17:41:a6:b4:ae:9a:57:d7:08:1f:95:ab:e3:
c8:f0:b6:69:e6:9c:06:2e:71:99:2e:81:09:23:a8:f7:8c:3c:
23:f0:c6:e0:5f:99:34:61:b9:4e:a0:21:37:c9:8c:cf:32:c9:
21:0b:a5:07:7e:4d:c4:83:ae:80:6a:fb:d2:66:c2:63:2b:d7:
09:f8:69:23:f6:98:62:a7:1f:83:18:87:aa:d3:24:9d:7a:c7:
2a:9f:49:ed:82:94:56:82:ea:11:96:c7:9b:ef:16:17:e7:36:
8a:1a:3a:6b:58:5b:ac:2d:d0:32:a1:c5:dc:ca:a0:75:5d:ea:
01:92:26:45:24:5b:b6:eb:3c:93:51:ae:6b:66:b1:73:e4:c9:
98:39:94:6d:10:ba:73:70:99:8f:5e:1a:b0:67:e4:25:9e:c9:
fd:b6:3d:55:c0:70:b3:7c:ca:62:ba:7a:08:79:71:64:f8:1a:
42:d3:a2:62:59:dc:95:b9:0c:ed:33:56:b4:cb:e2:d7:c3:c9:
3c:bf:2f:1e:de:4e:06:3c:89:2d:78:b2:7b:a6:b2:ce:85:60:
b2:1f:c3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:03:19 2025 by rpki-client