Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9e55a0a5-3656-3682-beb2-be20ac5aaebb.roa
File: 9e55a0a5-3656-3682-beb2-be20ac5aaebb.roa (raw, json)
Hash identifier: Fk1757AqkOlOUNpxN1IK+78laDe52nJwlRcIGVMC1i8=
Subject key identifier: 79:A2:FD:6F:03:4B:B9:71:03:C3:13:32:11:B4:79:F3:B2:5F:10:27
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848283A6F8FF17FA4255929F600
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9e55a0a5-3656-3682-beb2-be20ac5aaebb.roa
Signing time: Tue 10 Dec 2024 05:56:58 +0000
ROA not before: Tue 10 Dec 2024 05:56:58 +0000
ROA not after: Mon 10 Mar 2025 04:56:58 +0000
asID: 13335
IP address blocks: 172.68.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:3a:6f:8f:f1:7f:a4:25:59:29:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 05:56:58 2024 GMT
Not After : Mar 10 04:56:58 2025 GMT
Subject: CN=9dc4baf8-7bf2-4afc-8d12-6116feecf4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a8:bf:03:18:b9:94:2e:2c:80:50:93:85:a7:
86:37:07:e9:34:55:26:4b:e6:64:bd:72:5f:22:89:
47:33:ef:19:47:c7:c6:67:d4:72:2f:ec:d6:9a:b4:
25:6d:6e:a5:1a:02:bd:7c:f9:63:90:a8:de:67:c6:
fe:dd:87:30:5f:ac:82:0c:c6:7b:a0:12:1e:d7:4c:
26:1f:2b:0f:da:1e:a1:a1:4e:a4:a4:93:a4:ed:70:
02:35:0d:59:61:f3:d9:f6:1c:e9:3a:e9:9d:63:fb:
bb:26:73:9c:c7:dd:6e:4c:18:0b:19:f5:42:65:5b:
6b:b0:e0:88:0c:cc:50:8d:e6:c0:a1:54:b7:be:dc:
02:1d:51:8f:78:bc:ec:91:1f:9c:ae:39:dd:da:9a:
0c:36:44:9c:60:7f:9f:70:13:ac:ee:42:bf:4d:de:
45:b7:66:bb:bc:bf:12:22:a9:cf:83:74:31:7e:3f:
2f:db:1d:38:8b:9f:e5:e2:35:c7:75:e3:8f:da:1f:
de:90:4b:7e:90:51:d7:77:50:24:d1:38:c4:7b:91:
4b:a2:58:06:29:d5:84:21:06:14:88:d5:1d:8e:f2:
78:39:b6:7e:5c:2e:28:6b:64:e7:c0:47:30:d1:fd:
55:f4:97:0d:99:6d:e8:97:28:71:e6:a4:76:cc:fd:
9c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A2:FD:6F:03:4B:B9:71:03:C3:13:32:11:B4:79:F3:B2:5F:10:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9e55a0a5-3656-3682-beb2-be20ac5aaebb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:11:c8:64:07:62:46:c0:0e:64:a4:90:a3:a5:bd:fd:11:e5:
0c:58:72:6f:09:17:db:7c:b0:0b:7f:a5:8c:a1:d5:ba:d4:4a:
13:09:bd:2c:67:3a:8e:5a:37:00:34:25:91:1a:2f:ca:fb:ca:
89:68:d6:30:0e:ba:13:9b:b7:ff:f2:e6:69:2f:20:01:97:a0:
c5:b2:12:cf:a6:20:7f:e1:2c:fe:e8:e5:03:c0:cd:8a:8d:28:
ba:2a:08:bc:fb:73:20:cb:34:b5:27:0c:e0:2b:43:0b:e9:6f:
93:3a:43:d0:49:f1:b0:6c:d3:4b:f2:11:77:2b:08:b1:56:6d:
0b:11:63:7e:60:ea:c8:24:52:e3:5c:fe:5f:04:92:69:ef:96:
94:c0:d6:2c:e6:a6:fd:5d:48:93:80:81:f3:28:46:45:b6:0e:
4c:cf:87:29:cd:72:55:31:ce:ae:5f:30:51:e7:d2:5e:ef:bc:
21:8d:e4:eb:82:30:3a:3a:b5:7a:35:87:8f:82:45:e5:20:16:
68:71:c5:3e:97:48:fe:75:9b:70:62:21:5c:40:90:58:d1:0d:
66:a1:01:53:04:e3:07:7d:48:30:75:2c:6e:ae:f9:f4:61:9e:
9e:07:18:5c:b9:58:91:41:64:c9:0a:f3:53:71:6b:ed:22:f8:
08:53:fd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:10:54 2025 by rpki-client