Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae577d54-2270-3f5c-b015-e15447a7aeab.roa
File: ae577d54-2270-3f5c-b015-e15447a7aeab.roa (raw, json)
Hash identifier: RoR3/uRQopOzlWUsxgkwT4lYQDLm5ZfgEva4s8MpDYU=
Subject key identifier: 32:9B:ED:C1:07:BA:A7:61:9C:9F:DF:5C:5A:42:B3:03:08:FD:3A:5F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848281A57D82D2D2359F8DC83C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae577d54-2270-3f5c-b015-e15447a7aeab.roa
Signing time: Tue 10 Dec 2024 04:52:18 +0000
ROA not before: Tue 10 Dec 2024 04:52:18 +0000
ROA not after: Mon 10 Mar 2025 03:52:18 +0000
asID: 13335
IP address blocks: 172.64.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:1a:57:d8:2d:2d:23:59:f8:dc:83:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 04:52:18 2024 GMT
Not After : Mar 10 03:52:18 2025 GMT
Subject: CN=482d70d1-df30-4196-bfaa-dff494f91f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1e:bf:6d:29:bd:0a:ec:7a:7d:cc:32:e6:9e:
c6:a7:8a:7d:96:bb:d3:b9:56:67:af:7b:5a:80:0e:
0a:87:fe:9f:e7:14:24:93:f4:d9:72:40:8d:b0:9a:
11:7d:f1:b0:20:31:35:a9:72:e4:1d:18:6c:0e:fc:
43:c4:fa:a8:c9:4d:f8:0b:59:c4:16:4b:8d:01:0d:
0a:1e:09:af:d5:c2:ce:c4:ef:1f:e9:93:5d:9e:38:
5f:a6:20:ea:e6:b7:66:dc:a1:57:fe:16:63:3c:c5:
ba:e9:7b:61:bc:7e:b2:aa:22:83:cd:a2:8d:42:f2:
16:15:ee:e2:19:ca:fe:ea:97:42:5b:9a:11:3e:5b:
aa:94:7b:99:33:66:2b:e9:46:48:7a:d0:ce:f9:9b:
0e:93:dd:79:75:27:30:75:a3:9f:31:ff:bf:0a:2e:
a4:96:6b:a3:84:7f:56:32:4a:67:87:a4:c8:21:03:
2a:96:b5:72:ca:83:62:d6:2b:c5:3b:81:f7:c5:54:
2c:b7:6a:bb:5b:a5:0d:af:79:d9:2b:e7:4f:e8:00:
8e:82:04:1f:28:cf:d6:27:d4:79:ba:be:21:03:1d:
74:51:e2:ef:ad:17:f0:6a:e1:62:71:59:e7:79:92:
df:fd:0b:24:99:94:94:a9:00:54:c7:aa:fa:51:53:
07:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9B:ED:C1:07:BA:A7:61:9C:9F:DF:5C:5A:42:B3:03:08:FD:3A:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae577d54-2270-3f5c-b015-e15447a7aeab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.64.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:24:a2:d0:ba:b9:9e:89:fc:23:ad:a2:59:0f:d6:ec:b9:9b:
ae:be:83:00:81:09:37:9e:0a:68:df:9e:f6:c5:46:fb:83:c7:
9d:63:d0:9a:87:d8:12:35:26:10:0a:5f:8c:fd:58:da:0f:e3:
c9:f0:20:ae:78:0c:aa:71:29:15:bf:75:84:6a:ab:4d:43:3a:
8e:07:77:5c:a1:a6:ef:cf:48:9a:9e:df:33:94:69:0c:c6:82:
4e:dd:1c:a9:d5:66:c5:10:77:a7:a5:76:ce:84:c4:33:75:40:
08:e3:84:8a:b3:70:ac:d4:b5:21:1d:a9:61:27:2f:21:a3:42:
9e:d7:e0:d2:fa:c0:39:75:cd:07:e5:be:2a:fa:31:7e:d0:32:
f6:c9:7e:30:13:f9:2d:9c:4d:f4:60:3e:be:3f:61:a3:f8:a2:
ab:80:0b:7d:da:b6:ff:2e:71:21:4a:ce:33:10:0a:2b:02:48:
09:0b:e1:69:38:e4:56:3b:07:62:a3:cf:48:c2:17:8a:d6:a4:
08:c1:56:d9:5a:a9:80:2d:93:50:c5:3b:dd:0a:4e:a6:29:1f:
d3:5a:43:db:76:e5:d0:08:2a:8b:2c:94:41:c5:99:eb:8c:c4:
1a:97:e8:26:f5:b9:24:d1:b6:31:bb:66:33:51:d7:37:f2:94:
64:3b:14:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:14 2025 by rpki-client