Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aec0193e-814b-3e6b-b99b-76fc52393561.roa
File: aec0193e-814b-3e6b-b99b-76fc52393561.roa (raw, json)
Hash identifier: nkJoCS85O/jMPwdPX95D3S+bDyFVvtYMiAaDbChe8dU=
Subject key identifier: BB:D2:3A:00:11:EC:BD:BA:31:25:44:AE:13:5C:B0:47:3F:EA:D8:63
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848283C8F3E3A34B940B5B71D00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aec0193e-814b-3e6b-b99b-76fc52393561.roa
Signing time: Tue 10 Dec 2024 06:01:14 +0000
ROA not before: Tue 10 Dec 2024 06:01:14 +0000
ROA not after: Mon 10 Mar 2025 05:01:14 +0000
asID: 13335
IP address blocks: 172.68.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:3c:8f:3e:3a:34:b9:40:b5:b7:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 06:01:14 2024 GMT
Not After : Mar 10 05:01:14 2025 GMT
Subject: CN=c1754a7a-db81-4249-80e3-2f109f82a132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4b:fd:29:bc:cd:e2:e5:3e:00:3c:b0:c4:4a:
47:4f:4e:05:f6:50:f8:00:cf:61:33:d5:ce:1c:39:
a4:9a:cd:12:b7:4b:f4:08:2d:b8:2e:64:ca:44:4c:
eb:24:c4:48:a9:2f:6d:d8:d3:f8:0d:f2:d8:60:65:
fc:6b:01:6a:49:c6:cf:4f:fc:ec:ce:8a:8e:68:44:
ef:7a:55:91:a2:64:f7:4c:4d:b2:9c:67:6d:2b:e2:
c2:df:c7:89:d2:9c:9f:60:0f:19:b1:84:29:c1:f8:
a8:00:86:8c:ee:41:e1:cb:0b:88:9a:e2:da:42:8f:
15:d7:c5:ff:c6:86:2a:0c:3f:cf:b1:c2:36:1c:d6:
c0:ef:56:7b:25:b0:ac:e0:5b:c0:29:52:e5:66:73:
07:c2:81:57:65:1c:e3:de:46:a0:e4:73:90:e3:13:
cc:b1:f5:4b:ca:57:b4:08:76:6f:a8:23:9a:ea:9c:
c8:51:cb:6d:b3:d4:ef:81:fa:78:92:c7:b1:64:bc:
39:37:47:20:1e:68:e3:42:0f:a4:b5:32:87:5b:da:
45:14:16:4c:13:32:91:1b:cb:0f:dc:8e:3b:a0:31:
e2:38:fe:17:9a:c5:51:6e:a8:3b:ef:f4:ce:6a:6b:
d4:37:84:e7:cb:99:ea:ae:67:fa:c0:c0:43:01:c7:
39:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D2:3A:00:11:EC:BD:BA:31:25:44:AE:13:5C:B0:47:3F:EA:D8:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aec0193e-814b-3e6b-b99b-76fc52393561.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:87:70:d6:a1:30:96:e3:29:24:2e:4c:7d:f3:6e:4e:20:11:
4e:b6:6d:07:61:40:96:96:f5:2a:4d:0d:19:73:8b:cd:d0:ca:
3d:20:3a:a8:d1:d6:2f:50:22:aa:5a:cb:d6:58:c5:4a:2a:a6:
e2:bd:86:66:e1:db:c9:0f:37:21:46:20:3d:cf:14:ce:7f:65:
1d:cf:d3:56:ef:07:85:85:cf:f0:c9:b3:20:9d:c9:34:70:f7:
cc:3d:26:26:45:2c:b0:0a:b5:77:bc:3b:a9:d6:0a:21:46:74:
4d:3d:f8:42:18:d4:9d:e2:14:1b:fa:f7:8f:d1:da:d8:5b:7f:
97:47:c4:8b:fa:ca:d5:a6:b3:32:8b:c6:5b:f2:2c:18:0b:42:
82:d5:68:ab:d7:c5:ad:b0:7e:a5:de:ec:51:59:11:77:a0:c2:
25:17:eb:00:2a:34:b9:66:48:2e:b6:d9:31:84:39:3b:75:09:
bd:fa:e1:68:9d:0e:fe:09:04:47:75:fc:06:d1:ea:ea:ec:3b:
42:71:00:d7:ec:7a:20:27:1a:c5:84:26:fa:a8:b3:6f:f5:8a:
dd:f5:6d:45:47:d7:ad:28:01:cc:1a:0e:8d:b1:40:db:2a:70:
26:24:36:e9:67:4a:2b:cb:ff:a9:4c:e1:56:3b:b2:e6:7f:ef:
c7:58:53:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:03:30 2025 by rpki-client