Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca350f89-da27-3eac-a40d-0e3e377f42ea.roa
File: ca350f89-da27-3eac-a40d-0e3e377f42ea.roa (raw, json)
Hash identifier: ScwP3lbTf2UtQssK4kCeFvE0wD928bJZizoLrIMSuHs=
Subject key identifier: 27:A5:89:ED:6E:45:8F:6A:78:6A:E3:62:A4:13:06:5D:9A:A7:6C:B9
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482820E252A400F5DE0F730B80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca350f89-da27-3eac-a40d-0e3e377f42ea.roa
Signing time: Tue 10 Dec 2024 05:05:29 +0000
ROA not before: Tue 10 Dec 2024 05:05:29 +0000
ROA not after: Mon 10 Mar 2025 04:05:29 +0000
asID: 13335
IP address blocks: 172.68.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:20:e2:52:a4:00:f5:de:0f:73:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 05:05:29 2024 GMT
Not After : Mar 10 04:05:29 2025 GMT
Subject: CN=fd56c007-12ab-4058-bc62-480d0f9fc216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dc:03:f9:95:3f:1b:68:7d:d0:b3:a2:fc:44:
a5:33:ad:75:a3:f7:62:1f:45:f0:b8:7e:d8:9f:71:
47:76:d9:d2:67:f6:b9:42:c7:28:61:80:26:9b:98:
e8:90:c1:05:95:13:fb:44:a1:30:a3:ca:86:ee:16:
43:c1:f7:4b:81:33:0d:d7:36:62:16:0a:e2:47:76:
f2:94:37:32:6e:ab:d4:27:ed:bd:28:67:32:e2:0e:
3d:17:2d:a3:39:69:90:7a:84:f4:06:7c:1f:a3:39:
14:bb:14:fd:1f:7e:f6:3e:31:22:c6:07:df:a0:1e:
4e:7a:f7:1f:24:19:66:fc:a9:18:bc:c2:ed:b3:15:
06:35:ba:08:38:fe:b1:1a:2e:8a:84:4d:12:40:5f:
11:e8:03:f0:f7:c2:de:4b:9d:bb:19:10:0a:08:3e:
f5:c3:14:a8:2b:0c:7e:1d:2a:9e:e4:ee:66:9f:dd:
60:06:84:1e:9f:53:0d:0e:6f:c4:c8:b8:9c:56:c3:
11:ac:13:75:41:34:3c:0a:72:49:df:38:7f:08:3c:
c4:07:2b:8e:b9:ff:7b:a8:da:49:23:39:09:3c:a6:
eb:ca:c7:e1:23:b2:1e:f6:d3:80:13:26:06:fb:54:
fe:4a:2a:a7:82:cb:35:ca:29:b6:14:3e:f8:44:64:
fe:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A5:89:ED:6E:45:8F:6A:78:6A:E3:62:A4:13:06:5D:9A:A7:6C:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca350f89-da27-3eac-a40d-0e3e377f42ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:df:16:d3:db:3b:14:3d:dd:48:04:7d:ca:b6:00:74:97:5b:
ea:34:c6:a7:20:57:ed:84:c7:68:b8:e8:59:52:a7:92:cc:74:
4c:f8:23:fc:49:07:4f:be:c4:67:f9:93:d4:cb:e3:a8:81:21:
a5:ae:92:a3:5d:6d:d9:e1:cd:8d:11:35:70:a7:47:07:af:7c:
f4:a5:5c:05:a4:53:26:8b:ec:18:d9:98:1e:03:d3:84:f2:90:
2b:84:bf:3d:55:9d:4d:98:d2:3b:e3:ca:fc:2f:2e:56:cf:2d:
e6:49:a8:6d:09:13:c1:26:4e:37:22:18:9a:f3:0c:2f:b3:b1:
8c:72:5e:9a:fb:ad:88:80:49:f3:04:e5:01:17:8e:11:48:da:
fe:17:eb:19:ab:60:12:57:bc:67:e0:08:21:20:3e:f2:f6:55:
0a:64:15:99:61:1e:ab:42:81:89:b7:6b:f8:4b:3a:4c:3e:c4:
77:b9:9a:95:91:9c:59:ca:0d:61:b9:31:f9:48:7e:a6:53:2a:
47:c5:0e:64:6d:e1:74:39:2a:ca:b3:59:c7:4b:e3:23:97:4b:
2e:d0:c4:da:05:7c:ff:98:ba:0f:df:2f:99:f9:fb:38:ef:1f:
c0:a2:01:a3:98:be:52:62:bf:f1:e1:5b:f9:b3:1d:21:d1:a9:
2d:74:3c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:56:12 2025 by rpki-client