Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8e90bfd-bb16-3280-aa79-c05315465f01.roa
File: a8e90bfd-bb16-3280-aa79-c05315465f01.roa (raw, json)
Hash identifier: ot842lA+/Lp6PyS5Qos/jRXE+v0S/1c5HzBI6vbPO8g=
Subject key identifier: C9:54:4A:E4:C0:58:18:6D:04:F9:6A:9D:E5:4D:D4:DB:83:E2:B4:1A
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482AAA8EFA7575AC7F06B4C480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8e90bfd-bb16-3280-aa79-c05315465f01.roa
Signing time: Wed 11 Dec 2024 02:54:30 +0000
ROA not before: Wed 11 Dec 2024 02:54:30 +0000
ROA not after: Tue 11 Mar 2025 01:54:30 +0000
asID: 13335
IP address blocks: 172.69.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:aa:8e:fa:75:75:ac:7f:06:b4:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 02:54:30 2024 GMT
Not After : Mar 11 01:54:30 2025 GMT
Subject: CN=e817ba95-d75f-40e2-a0fa-2ac2c9853cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:17:31:82:31:6d:05:8a:59:75:05:63:3e:8f:
bb:d3:c6:81:98:7c:86:22:72:0a:1e:49:a1:e2:8d:
9f:ef:ef:52:8e:00:e4:36:84:54:da:f8:a6:76:44:
63:90:6d:46:a7:47:fd:95:cb:e2:35:06:22:a5:3d:
68:b6:d6:a0:7f:02:50:87:f9:9f:ce:df:69:63:e0:
ea:af:67:54:99:7b:e1:1e:11:20:02:f1:3c:7d:e8:
ca:96:89:7c:d4:62:50:73:1c:68:80:d4:ff:22:ae:
2d:d7:5e:ba:0c:51:8a:1d:05:b9:23:b5:af:e7:da:
69:04:42:e2:56:53:94:61:cb:6a:d2:8d:a5:70:71:
0b:db:fe:53:c6:57:d2:38:c9:07:61:fe:e5:f8:e8:
73:b5:0e:a5:24:9f:cd:ac:03:65:e8:13:8c:51:61:
55:9f:80:84:69:a5:9c:c4:2c:70:7b:d4:b7:ed:27:
0f:96:33:c7:fc:87:e5:4c:5d:b4:d5:e8:43:1c:82:
6b:80:05:63:98:70:ad:64:1d:7c:e6:9f:c3:e7:b1:
13:ac:90:05:28:3e:cc:cb:8b:a0:18:d7:40:b6:26:
18:d1:e1:5e:f0:6c:60:79:3b:07:1f:b0:79:c4:35:
2e:ce:c8:0b:4c:28:44:ea:a0:7e:99:d8:34:b6:91:
da:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:54:4A:E4:C0:58:18:6D:04:F9:6A:9D:E5:4D:D4:DB:83:E2:B4:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8e90bfd-bb16-3280-aa79-c05315465f01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.167.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:a6:1b:5b:be:2a:c6:17:24:60:30:de:c4:e2:a3:e9:2d:88:
8a:89:31:7b:73:af:74:45:c7:b2:1b:ec:c6:c5:23:fb:ba:ca:
ff:22:2b:ae:80:34:8f:df:fd:96:a6:ae:7f:3f:06:39:0a:db:
1b:73:e6:ba:e0:08:c2:91:ae:31:ff:7b:dc:38:cb:5f:ea:bb:
7b:57:b8:b2:ba:76:61:57:56:a6:c8:b7:16:e4:42:53:d6:7e:
42:a5:79:2f:52:2c:ea:0e:94:45:fb:3c:ff:b3:32:5a:07:0b:
7d:c0:57:7c:f8:4a:14:17:4c:2e:84:00:91:61:b1:aa:aa:93:
c4:1f:b0:79:e6:86:e9:49:31:14:16:2b:63:a1:37:f8:67:7c:
62:4e:6c:db:c0:8e:ae:a2:1c:51:ce:58:2d:0f:e8:6a:09:79:
db:14:c3:34:e4:6f:ab:7e:7e:9a:da:e7:54:a7:fb:83:53:39:
08:a4:10:40:c4:45:e3:61:a8:ea:74:1a:09:b8:c1:4e:6a:2e:
fb:e2:3b:a9:ae:01:00:31:d5:8b:cf:0d:a4:db:83:6f:ab:ed:
d0:2e:7c:c4:c3:53:2d:cf:b4:4d:4b:23:56:f2:34:f7:17:85:
97:2d:90:15:da:03:43:bb:bb:08:68:ab:d3:64:6f:93:9a:b6:
d9:f1:35:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:56:31 2025 by rpki-client