Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca6d2aea-b691-33a5-9d73-a6d2d2f1effd.roa
File: ca6d2aea-b691-33a5-9d73-a6d2d2f1effd.roa (raw, json)
Hash identifier: 46F7j7kybG5O/5xUQtKG/IJy+cIK4HU2eYLAkOVGpTU=
Subject key identifier: 0A:FF:D7:9E:54:B9:BF:A2:77:1C:F6:66:1A:5A:B9:5B:E9:72:5E:D5
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827A7016EA7C99811AA750F00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca6d2aea-b691-33a5-9d73-a6d2d2f1effd.roa
Signing time: Tue 10 Dec 2024 00:59:55 +0000
ROA not before: Tue 10 Dec 2024 00:59:55 +0000
ROA not after: Sun 09 Mar 2025 23:59:55 +0000
asID: 13335
IP address blocks: 172.68.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:a7:01:6e:a7:c9:98:11:aa:75:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 00:59:55 2024 GMT
Not After : Mar 9 23:59:55 2025 GMT
Subject: CN=b5a5a8fc-e26b-4dcc-88fb-4066d67a276f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:83:86:59:e6:b1:85:06:4b:5d:c7:f8:a3:5d:
e5:d9:0d:16:79:9c:68:8b:43:10:8f:b8:e0:1a:8e:
9b:2d:82:95:b3:54:cb:1c:3a:94:8b:51:66:49:d9:
91:62:99:00:6d:f9:5e:7d:ff:da:5f:a6:c8:78:b3:
43:be:86:09:f4:c1:ae:82:b7:d6:92:ae:be:b1:c1:
52:6b:46:75:ec:72:07:a3:1f:55:92:b3:45:8d:a7:
7b:ee:d2:cf:05:c3:4f:f5:8e:9d:53:59:8f:81:37:
2a:e9:fe:2b:d6:b2:35:b3:d4:e6:67:02:e9:f6:73:
c0:b6:5b:c7:c7:50:b8:fa:87:e5:6a:94:8f:9a:72:
b7:a9:5c:36:df:84:68:9a:8a:42:50:64:5d:2f:5a:
73:ed:80:47:66:be:1d:ad:5b:f9:45:f7:bd:3f:86:
4d:fb:71:be:6b:cd:71:55:f0:2b:43:5e:ce:da:74:
ac:b7:e8:db:cc:b9:fa:7e:2e:61:bd:ef:21:44:51:
49:54:af:40:28:a6:78:b5:48:d2:79:2b:11:63:bc:
0d:6a:2b:d3:c6:f1:71:a0:2b:d1:2c:0f:79:58:47:
7a:ea:53:e9:88:84:e8:c9:c3:07:e9:83:fb:0e:7a:
0a:f1:ac:b0:b7:66:79:d1:63:a8:51:a7:92:e2:d6:
4b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FF:D7:9E:54:B9:BF:A2:77:1C:F6:66:1A:5A:B9:5B:E9:72:5E:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca6d2aea-b691-33a5-9d73-a6d2d2f1effd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:7b:d8:18:54:48:f8:3b:d6:f7:9d:58:b2:3b:0c:56:47:66:
9a:69:b3:e3:ea:00:bd:21:fd:26:df:5b:f6:57:de:a6:60:31:
32:1d:15:fd:ab:12:e6:49:20:bb:f9:2c:bf:d6:3c:5e:2e:d9:
3f:82:02:73:ce:92:18:be:37:d8:41:d4:1b:39:11:3f:47:12:
d3:fc:d2:4b:07:db:d0:ae:54:39:fa:40:cb:5b:19:80:48:31:
6e:e3:c4:fa:2f:76:cd:ad:fb:82:f0:bd:a4:32:78:d6:7d:2e:
ca:76:04:f0:bb:42:0a:be:93:88:5e:ac:d7:39:e6:bf:79:26:
e0:61:bc:8f:c8:3f:43:71:7b:7c:b9:0b:68:ad:b4:6c:ed:98:
30:0e:7f:12:24:23:93:dc:bf:6c:cb:ac:bc:98:01:ee:49:e4:
6f:a7:8d:16:ed:78:e5:c0:1d:4a:5d:e8:2f:9d:d0:f7:13:1e:
05:86:68:20:5b:67:d8:69:4d:d1:3c:57:02:37:19:61:f0:7c:
21:6f:f7:bf:41:4b:77:be:eb:57:f6:83:94:4b:56:4b:f5:bb:
dd:05:3f:72:a2:03:f2:b2:b1:49:1f:b3:1d:e2:dd:e3:63:1f:
20:39:38:dc:9f:75:46:43:17:b8:f8:fe:a1:7b:aa:f2:47:b7:
c3:48:a3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:55:47 2025 by rpki-client