Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0a692b3-54f0-3f79-9859-a0084e1ab35c.roa
File: a0a692b3-54f0-3f79-9859-a0084e1ab35c.roa (raw, json)
Hash identifier: fSnfjzvxZQrm+DjNJqDPAqS+Q8kukG5R/BJkHYRBNOE=
Subject key identifier: C5:41:8C:04:76:DA:07:75:67:C2:CD:44:16:8C:5F:75:54:77:FB:71
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A8FE639705A250032524200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0a692b3-54f0-3f79-9859-a0084e1ab35c.roa
Signing time: Wed 11 Dec 2024 02:00:47 +0000
ROA not before: Wed 11 Dec 2024 02:00:47 +0000
ROA not after: Tue 11 Mar 2025 01:00:47 +0000
asID: 13335
IP address blocks: 172.69.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:e6:39:70:5a:25:00:32:52:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 02:00:47 2024 GMT
Not After : Mar 11 01:00:47 2025 GMT
Subject: CN=dafdd248-3e5c-4c9c-8105-b3c1a49c466c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:74:c5:d2:f2:d2:c9:2d:5a:01:ff:85:fe:db:
b0:5b:5a:29:61:2d:ce:49:38:59:57:6b:cf:c4:41:
3e:87:ee:b2:13:4d:6b:28:c5:ff:f7:0c:96:6e:d6:
fe:cd:2c:d8:1b:14:0b:69:7f:3c:1f:25:0d:25:1d:
e6:74:dd:49:fa:ae:9d:e8:4b:30:2f:47:a5:a5:04:
a2:c8:c3:29:bc:6f:dc:41:a3:14:52:4f:48:d9:21:
61:97:c1:0e:01:aa:f6:a2:6f:c4:22:a4:6f:31:a6:
46:72:02:48:b8:a4:8c:2d:1e:58:db:7e:f6:9e:e0:
c6:a2:08:d9:2b:b1:10:73:21:67:37:c5:99:7b:2b:
b8:7c:40:d9:7c:26:cf:14:76:08:18:d4:8a:2e:13:
36:e4:9a:e8:2d:da:19:04:8a:d5:b4:4e:ce:31:36:
8f:d9:7e:b6:cc:b5:9d:7f:ac:f4:c9:85:9d:3b:a1:
8e:d7:ef:a4:e2:39:b0:1d:87:57:1b:cf:0a:12:b0:
7d:a4:72:01:86:43:82:73:f1:23:ea:ea:16:21:59:
92:0e:52:a4:ea:9c:21:da:3e:5f:10:07:4a:3b:81:
45:c2:0d:e4:10:b6:7f:c2:0c:16:7b:01:ee:15:c7:
6b:b5:f1:40:02:98:8f:46:af:35:2b:af:d5:9c:80:
d4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:41:8C:04:76:DA:07:75:67:C2:CD:44:16:8C:5F:75:54:77:FB:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0a692b3-54f0-3f79-9859-a0084e1ab35c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:89:de:b5:ca:2a:32:f1:36:f4:f8:b9:a0:62:dc:88:39:81:
da:4a:7f:08:c7:e4:51:53:7c:6c:22:75:30:30:fa:da:df:50:
7d:1c:30:f8:2a:e4:0a:80:8c:76:52:19:46:a5:9e:78:48:55:
3d:01:be:36:13:38:5b:48:96:c8:a3:02:7c:52:e5:c0:f2:5d:
2c:1b:8a:51:50:80:a6:4c:90:14:2f:a0:62:05:07:0e:54:9a:
ee:43:4d:d9:20:c6:00:0c:a6:88:88:48:10:21:6f:d3:86:dd:
e9:d1:7c:58:19:27:8f:b8:fe:e5:a4:0e:cc:4a:f0:02:d0:c2:
9a:64:0f:36:af:fa:0e:a8:ee:76:40:f2:9f:c8:cf:f3:33:1d:
7f:5a:40:0e:d9:2d:f9:60:af:29:ef:3f:09:f7:1f:f7:3e:e8:
51:e9:43:dc:14:e9:59:ea:9d:49:9b:8d:82:4c:ee:ab:26:3e:
74:38:21:b1:0c:a5:d5:54:ac:21:be:6e:73:7d:bf:fd:72:49:
f5:c1:df:ab:91:8d:bb:f4:83:b7:b0:15:14:1a:b3:41:19:89:
b8:5c:db:3e:51:8a:de:06:54:cb:d6:91:c7:52:86:73:71:d4:
c1:76:26:67:63:7b:1a:e2:3c:fa:1a:96:e4:8b:ec:ab:bb:8e:
bd:54:a8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:55:16 2025 by rpki-client