Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd20c404-cc69-3bb9-b43b-40e5ec125ede.roa
File: cd20c404-cc69-3bb9-b43b-40e5ec125ede.roa (raw, json)
Hash identifier: n65Lm2Cg67+vVF0p35scDgHkYoQulH3XvlELaXc1rNE=
Subject key identifier: 7A:37:94:DA:25:1E:1D:BC:0E:FD:A0:37:79:E1:54:C9:DA:42:AA:38
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A9B6237672D4BD1A57F5680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd20c404-cc69-3bb9-b43b-40e5ec125ede.roa
Signing time: Wed 11 Dec 2024 02:23:55 +0000
ROA not before: Wed 11 Dec 2024 02:23:55 +0000
ROA not after: Tue 11 Mar 2025 01:23:55 +0000
asID: 13335
IP address blocks: 172.69.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:9b:62:37:67:2d:4b:d1:a5:7f:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 02:23:55 2024 GMT
Not After : Mar 11 01:23:55 2025 GMT
Subject: CN=3cf2233a-7948-444b-92bd-d40d2533ab8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5b:48:38:92:52:5f:56:69:f6:25:b9:b5:1f:
7d:5d:59:52:72:f3:ce:2f:b7:81:93:96:84:81:b9:
a8:96:a0:67:99:43:66:d1:d7:0b:c5:d8:ef:18:ea:
80:fe:9d:cf:fd:db:87:ac:4d:b9:9f:57:e9:4a:a7:
fe:76:2c:64:c2:7a:22:4e:6d:0b:c0:7c:68:c3:f4:
17:f0:56:30:80:91:a0:eb:10:02:89:d2:b3:01:0d:
b3:ae:6e:2c:aa:6e:34:1b:01:78:f3:a4:7d:d2:eb:
1a:6f:c8:cd:47:bb:d6:1a:6c:38:79:0e:7a:68:36:
b1:e2:df:9b:da:5b:bb:1a:42:56:18:31:5b:5c:4e:
c8:74:6d:6a:a8:11:1a:67:d1:72:d8:37:6d:e5:f3:
47:ab:25:4e:11:bf:c1:85:c1:da:5e:c4:68:46:6c:
25:35:fb:d5:60:d8:70:92:be:e2:20:ca:c6:e8:44:
5c:00:2b:e2:3b:6b:03:e1:fc:a8:e6:53:28:9d:a9:
6e:d0:9b:b3:d0:2a:c0:b9:4d:77:3f:44:a7:4e:e6:
ec:0b:99:f7:37:57:ab:29:e3:31:63:c4:9f:6b:d0:
28:7a:3e:42:85:d7:0e:a1:db:19:1e:fc:ed:71:8a:
4d:c7:e4:67:9d:6c:db:59:ac:0a:d7:d0:95:32:53:
50:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:37:94:DA:25:1E:1D:BC:0E:FD:A0:37:79:E1:54:C9:DA:42:AA:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd20c404-cc69-3bb9-b43b-40e5ec125ede.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:9f:4c:96:4f:cd:0e:ec:f4:ce:90:0c:4d:ad:f0:02:ef:21:
ef:ec:88:a5:93:bb:bf:67:b8:b4:02:51:8d:7d:27:f1:c6:02:
aa:87:1c:1c:df:38:48:72:15:98:ca:dd:1b:57:f5:74:43:08:
d9:ad:1d:83:7b:a6:59:7a:9a:58:13:72:d9:98:d6:94:0b:1f:
89:6f:e0:07:64:20:0e:df:5f:f6:2c:11:85:06:7c:96:e5:fd:
de:a8:e9:58:0d:d1:6e:a5:18:3c:5e:71:b6:cf:7a:fd:c8:a2:
27:3f:c6:11:b5:99:64:89:ce:08:7f:0a:45:18:1f:4d:5c:0d:
79:3e:f9:ea:30:c6:0c:f1:4a:7c:e0:c3:fb:75:32:74:12:94:
0f:56:9c:b6:e6:2a:40:10:a2:02:92:ec:83:94:dd:25:02:31:
89:85:d5:40:0a:03:3a:97:c5:c6:e1:02:9f:4f:ce:08:96:19:
c0:5d:f6:18:90:46:2a:b1:bf:56:a1:30:af:df:ab:d3:89:a0:
36:a3:5c:34:2b:10:ba:63:9b:04:0c:b3:25:11:68:de:a0:c3:
68:fa:de:a7:26:88:c3:d1:d3:62:95:7e:c0:9e:c0:71:e7:e0:
91:93:f5:10:6f:e7:64:76:d8:71:e0:af:1c:f8:4f:67:59:11:
4d:2c:83:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:39 2025 by rpki-client