Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c2a8eafe-075b-3a00-b39b-9c8729eb0653.roa
File: c2a8eafe-075b-3a00-b39b-9c8729eb0653.roa (raw, json)
Hash identifier: OmsVC4hEhAVLwV693TzqD9pJSwbl7IG2bxoUIp4omGk=
Subject key identifier: 15:5F:9A:13:CD:B7:1A:17:09:30:2B:6B:99:74:C8:2C:AE:99:57:AE
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482821160D9977D65B2BF094C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c2a8eafe-075b-3a00-b39b-9c8729eb0653.roa
Signing time: Tue 10 Dec 2024 05:05:53 +0000
ROA not before: Tue 10 Dec 2024 05:05:53 +0000
ROA not after: Mon 10 Mar 2025 04:05:53 +0000
asID: 13335
IP address blocks: 172.68.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:21:16:0d:99:77:d6:5b:2b:f0:94:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 05:05:53 2024 GMT
Not After : Mar 10 04:05:53 2025 GMT
Subject: CN=e7a9d3d3-6ab7-4e57-b4ff-a03a8535b65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9b:4c:8f:04:1b:3a:f1:7d:37:44:8b:42:2f:
87:19:74:1a:8d:fc:b0:e8:c2:e5:fb:96:e7:85:7c:
a3:47:12:e3:68:fd:71:ff:4c:fd:51:76:a2:31:9d:
0f:5a:ed:01:4b:4c:c3:e9:13:ee:b7:13:9c:29:41:
2e:bf:09:f3:7f:59:f3:c1:e9:d0:7b:b4:4a:80:71:
9e:a6:ba:ae:0c:85:bc:59:48:34:6b:fe:36:cb:dd:
54:9a:67:bd:3c:82:be:9a:c3:48:b4:a8:66:ab:b6:
60:77:51:3d:79:93:13:45:0c:1a:e7:9d:7b:c2:21:
f7:e7:05:83:6d:b5:1d:74:bb:95:e4:ac:07:a3:a7:
1c:b2:80:00:a0:28:23:2a:dd:bb:7b:07:ff:93:44:
1b:e3:92:8e:36:99:32:c6:de:8b:e0:e6:ab:94:0b:
28:3e:06:a1:5e:c0:29:cc:86:44:22:46:90:89:be:
95:68:c3:f2:3e:cc:e3:05:05:56:cd:9c:68:f3:53:
c0:bd:96:3b:9c:b0:81:71:6e:ff:0a:5a:d2:6f:db:
fb:ef:40:5f:95:84:0d:82:c9:ec:b9:94:60:dd:4c:
c5:e3:a6:ca:77:b5:d0:a1:1b:12:16:c4:42:95:ff:
dd:b8:dd:9f:21:74:b6:f1:8a:a9:08:64:9f:f0:29:
22:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5F:9A:13:CD:B7:1A:17:09:30:2B:6B:99:74:C8:2C:AE:99:57:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c2a8eafe-075b-3a00-b39b-9c8729eb0653.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.6.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:bb:68:63:96:b7:05:a7:11:91:30:e6:3e:dd:fe:65:08:4a:
db:6d:0f:a8:c7:d2:7e:67:f2:79:97:95:8d:a1:01:2f:b8:92:
91:83:3b:db:30:78:d7:aa:69:c6:83:5c:c5:94:d0:85:5b:40:
fb:d7:82:29:5c:87:d6:ec:82:86:4e:7e:2c:9b:96:8c:f1:e4:
75:9f:93:ef:4a:f2:11:fa:6f:bc:39:61:07:50:40:da:fb:e0:
f7:e2:c8:d2:8a:63:8c:27:66:3b:e6:bc:fd:fd:ab:e2:60:02:
d2:5c:5e:22:da:21:a1:15:81:11:d9:7f:87:5f:d6:c2:f4:dd:
62:a2:8a:f4:11:91:b0:0d:da:bb:65:fa:31:e0:88:f6:89:59:
ad:8d:06:22:4f:82:aa:7b:59:f7:f2:67:20:6d:60:fe:f9:90:
b6:a1:95:52:5e:aa:77:4f:44:55:ab:5d:b0:b4:69:3e:ec:84:
3d:05:1c:bd:70:cf:c3:7c:4a:30:5d:67:06:4c:07:53:2d:0a:
cc:f2:6e:55:f0:2f:58:41:d6:cb:62:18:fe:af:5b:2f:77:ad:
86:cc:c3:a4:74:7b:41:b9:0c:25:ba:ee:b1:e9:be:c3:e9:2f:
d9:34:c3:72:36:e3:eb:65:2e:e1:8a:13:54:48:e7:65:f1:ad:
46:7f:f1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:57:30 2025 by rpki-client