Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9e441c69-be51-3b81-a88f-9254a15bff06.roa
File: 9e441c69-be51-3b81-a88f-9254a15bff06.roa (raw, json)
Hash identifier: yCpTLmH1PG4/+siQCRNbikgv1lK1afvtFJW63Fs0KLo=
Subject key identifier: 4A:4B:A5:86:73:CF:79:86:19:AC:F3:F1:82:6F:50:2F:25:4B:5E:1B
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482540148FF0A0A238C87F3180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9e441c69-be51-3b81-a88f-9254a15bff06.roa
Signing time: Mon 09 Dec 2024 04:20:55 +0000
ROA not before: Mon 09 Dec 2024 04:20:55 +0000
ROA not after: Sun 09 Mar 2025 04:20:55 +0000
asID: 13335
IP address blocks: 172.64.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:40:14:8f:f0:a0:a2:38:c8:7f:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 04:20:55 2024 GMT
Not After : Mar 9 04:20:55 2025 GMT
Subject: CN=ef2df515-1930-4b9f-af69-2892fd4262e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:92:b6:8b:80:c0:82:03:5e:44:63:61:1c:5c:
a7:8f:e7:89:37:f0:a3:7f:ba:28:65:fc:ce:01:ef:
9b:b9:15:e9:85:a8:84:58:a3:3d:7b:eb:b5:c2:69:
f1:aa:f3:74:b9:33:f3:00:b9:4d:88:cb:ba:66:ff:
c6:3c:94:d0:b3:d3:9d:37:44:9a:13:0d:71:05:ab:
6a:3e:f8:ab:09:6e:8b:68:36:ff:ab:9b:59:af:e1:
9b:a2:53:17:15:0f:d4:a6:cc:a1:ae:72:41:42:f5:
1c:fc:77:a0:aa:a9:51:73:62:16:14:03:7d:d7:f9:
a0:57:f3:66:22:33:9f:90:bc:94:70:3c:f9:db:bc:
42:c2:ed:4d:56:24:72:9c:b7:06:2c:41:fc:d2:ec:
13:56:b8:04:e2:85:ac:ea:61:9a:e9:03:52:49:63:
18:3f:db:2c:a6:bc:fc:ed:8e:db:aa:d0:4f:05:26:
bb:d7:ba:e8:42:ec:94:00:74:da:ce:01:fb:fd:1b:
84:4b:a1:c6:dd:11:9a:d6:da:89:6f:10:f6:c0:3c:
72:7a:1d:74:22:e0:1b:03:26:c9:20:e5:36:2c:d1:
e2:33:33:1e:73:66:82:fa:97:a4:56:8a:d1:ed:b7:
52:30:0d:0c:aa:92:4e:aa:81:b3:6c:f6:63:6d:e0:
82:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4B:A5:86:73:CF:79:86:19:AC:F3:F1:82:6F:50:2F:25:4B:5E:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9e441c69-be51-3b81-a88f-9254a15bff06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.64.155.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:8a:b7:e4:b2:78:e9:fb:3e:52:86:c5:4b:6d:fb:e2:1f:73:
d1:30:1e:05:6e:f9:ab:a8:41:70:ff:6d:b7:a5:6c:81:8f:42:
4b:ab:c2:24:7f:aa:96:ee:b4:5e:00:10:45:ac:96:ec:7f:ae:
b8:8e:b5:4e:af:12:1e:15:0c:61:4d:9b:b6:d8:85:a4:d0:ea:
77:91:9d:20:3b:8f:dc:71:ad:72:60:37:2e:59:9a:23:af:59:
08:35:1b:fb:ef:58:26:4e:39:43:39:0d:d1:4a:d5:aa:0e:cc:
8e:42:5f:b7:a7:f2:81:30:dc:b4:e9:39:12:bc:3b:09:e9:e3:
f8:52:39:0e:1f:b8:56:34:ea:2a:d5:af:a0:4a:ac:be:2a:f7:
ff:c2:2e:06:27:7b:b3:c5:fc:52:b1:c2:c6:31:21:f8:08:8a:
90:45:82:37:1c:f6:cb:bc:a1:c2:85:60:9c:5e:5f:8d:be:ef:
0b:71:72:ac:cc:bf:14:27:75:5b:94:23:c5:a4:6c:b1:1d:98:
28:0f:a7:46:66:f7:b1:b5:95:d4:44:a1:f6:17:3e:67:e7:c7:
36:26:d5:f0:75:5e:e9:44:3c:5c:b3:30:d1:e5:05:cc:a5:99:
7b:3d:d1:0c:73:16:c5:8d:30:d0:7c:87:ce:0b:12:c0:8c:78:
2d:fc:b4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:45:46 2025 by rpki-client