Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a7f284f9-b5dd-303e-a9d9-97bce4720082.roa
File: a7f284f9-b5dd-303e-a9d9-97bce4720082.roa (raw, json)
Hash identifier: nCsU0H6yO88AYak77I2yRNHT8ib49HVyt10kv37KtVM=
Subject key identifier: 26:60:25:02:B1:BC:EC:0E:DC:1D:CD:A0:96:5E:8E:A5:3E:1C:88:07
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848281F62A3DC8F96F53C332F00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a7f284f9-b5dd-303e-a9d9-97bce4720082.roa
Signing time: Tue 10 Dec 2024 05:02:28 +0000
ROA not before: Tue 10 Dec 2024 05:02:28 +0000
ROA not after: Mon 10 Mar 2025 04:02:28 +0000
asID: 13335
IP address blocks: 172.66.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:1f:62:a3:dc:8f:96:f5:3c:33:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 05:02:28 2024 GMT
Not After : Mar 10 04:02:28 2025 GMT
Subject: CN=38f46f28-a0e8-4f0d-a31c-8dda71f85b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6e:77:c7:ca:ef:22:aa:cd:45:00:b3:6c:af:
de:2d:52:23:b5:a1:1a:ab:50:1d:d6:c0:9f:75:ca:
45:9e:73:c3:f2:e9:7d:38:fe:d2:ce:5a:90:91:f3:
5e:a9:d4:2b:9c:d2:d3:82:f9:a6:d6:40:67:c5:83:
8a:15:08:fe:84:22:cc:97:79:9d:a2:66:66:f5:e0:
39:5a:a6:b2:b8:78:83:ac:8a:18:97:c5:55:f2:12:
ea:6d:fe:b2:f9:dc:2b:d1:04:3f:a5:ea:16:61:32:
4e:65:61:68:da:f5:af:8a:e0:db:5c:86:81:b1:00:
f2:22:f0:f2:4a:df:6c:e1:a2:b6:12:02:c6:97:04:
e8:59:d6:f1:a3:f2:ed:0d:7c:59:0e:75:bb:e5:95:
9b:60:ac:f4:bd:ab:5b:2b:49:9a:9b:06:13:28:52:
13:38:15:57:d4:31:39:4d:b8:1b:77:5f:a9:fa:8f:
df:cd:b1:da:59:0a:a0:dc:d8:5c:36:ea:f7:2d:1c:
6c:dd:1d:18:8c:ca:7d:79:33:4d:ef:36:c1:23:87:
dc:4a:d0:e0:6e:e5:10:6d:ca:4f:6f:45:26:cb:37:
87:e5:52:3c:53:3c:c2:db:27:ce:60:2c:0f:15:8d:
20:45:11:02:5c:ff:7e:c8:c4:59:a7:29:be:e0:af:
76:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:60:25:02:B1:BC:EC:0E:DC:1D:CD:A0:96:5E:8E:A5:3E:1C:88:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a7f284f9-b5dd-303e-a9d9-97bce4720082.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.66.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:4c:c5:e2:fc:e0:af:a1:6f:54:9f:11:80:8c:8b:b8:8a:90:
61:83:24:99:a7:0b:21:d5:40:a9:40:4b:a0:bb:f7:6c:43:48:
77:28:a4:1b:c1:75:4b:61:7d:39:30:5c:1d:80:ac:e3:6c:be:
dc:48:7b:cc:72:0b:17:fc:2e:61:40:de:82:c6:35:c1:c2:0b:
e0:cc:d1:0b:c4:d6:e9:d6:30:3c:4f:ee:1e:32:9d:cb:24:f8:
aa:a8:d4:88:a3:99:50:8a:82:8e:8f:0c:50:d8:23:14:c8:b4:
c2:85:5e:bc:d7:b9:f2:de:f4:23:77:d8:c4:eb:27:09:66:52:
42:4a:39:bf:93:6f:bc:97:3e:2b:5a:e0:7c:df:a8:f2:89:9d:
ec:b7:d4:b0:0a:2d:56:57:57:c1:cd:49:85:2f:d4:31:4b:a1:
8f:92:97:64:2e:69:fc:72:d9:7a:f6:26:2e:f2:9d:0d:06:a4:
8e:68:05:f4:7a:8f:94:5b:8e:12:1f:1c:bc:e3:36:73:cd:88:
ec:db:17:99:84:37:06:a3:00:a3:87:1c:2c:bb:27:a2:18:7c:
9d:64:f7:1b:3c:08:76:dd:7f:30:bd:42:2e:ec:a5:08:f3:26:
81:71:b5:23:ba:28:16:95:08:88:f9:f4:d4:38:98:15:6d:93:
19:85:ac:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:28:59 2025 by rpki-client