Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d07a4467-d12d-326c-b29c-7b0c1f89bec0.roa
File: d07a4467-d12d-326c-b29c-7b0c1f89bec0.roa (raw, json)
Hash identifier: OPhe6w6DdHuEnug28ptMm+UyRhAkcIsCpT4/WrH90PQ=
Subject key identifier: 82:AC:10:F1:D2:3F:4A:1B:EB:56:7F:EB:ED:92:9C:7C:39:36:EA:73
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A9AED82031F7025A9725940
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d07a4467-d12d-326c-b29c-7b0c1f89bec0.roa
Signing time: Wed 11 Dec 2024 02:23:00 +0000
ROA not before: Wed 11 Dec 2024 02:23:00 +0000
ROA not after: Tue 11 Mar 2025 01:23:00 +0000
asID: 13335
IP address blocks: 172.69.36.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:9a:ed:82:03:1f:70:25:a9:72:59:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 02:23:00 2024 GMT
Not After : Mar 11 01:23:00 2025 GMT
Subject: CN=d3a5bb8e-250d-4061-be15-6e5a8a51a82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5b:cf:99:7a:d9:9e:2d:a0:3b:77:a1:8d:48:
6a:9a:e4:b0:9c:54:82:8f:0a:2a:73:0c:70:40:fd:
a3:d0:a5:54:5f:97:b7:34:c0:26:4d:0f:0c:91:bd:
80:23:bb:a9:25:8d:c7:43:72:f7:74:81:f2:ea:66:
dc:74:6a:75:b7:4e:7d:bd:7c:f2:19:34:01:b8:a0:
55:28:48:c0:87:c1:e0:04:70:5c:6f:ea:18:c2:dd:
bd:d9:da:83:7b:b8:95:c5:b1:e7:a9:3a:88:97:78:
ee:e4:47:7d:b1:66:34:2a:b1:2b:ea:39:d9:15:48:
72:08:26:90:96:be:13:4e:ac:d5:70:0f:51:46:6c:
08:85:39:6c:b7:b9:6d:2d:f3:8d:ab:45:d9:79:e3:
60:1c:9d:0d:49:86:e7:18:53:1a:47:35:0b:b3:a9:
58:2c:1f:4c:28:94:f6:12:1d:cf:5d:e7:4c:9b:a0:
d5:c2:81:42:f7:06:e3:2e:dd:7b:ae:65:f0:3c:e7:
3f:b2:75:48:83:74:a2:86:6d:2d:45:2e:a4:24:29:
40:95:5f:da:87:1f:9c:3e:0e:5c:83:cc:f7:b8:72:
5c:d6:e4:8a:7f:47:44:0a:e5:55:29:1e:ae:91:b0:
53:6e:a9:a6:03:f9:62:94:c2:91:db:10:bc:ee:32:
1c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AC:10:F1:D2:3F:4A:1B:EB:56:7F:EB:ED:92:9C:7C:39:36:EA:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d07a4467-d12d-326c-b29c-7b0c1f89bec0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.36.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:11:43:5e:e2:e4:c6:ab:d9:a1:a4:91:7a:6b:81:dd:41:37:
10:f5:d1:04:fe:3d:22:46:03:02:17:55:e8:5c:41:c3:f4:5f:
a1:21:64:cf:e7:6c:e9:34:f5:ea:d0:cb:85:06:b2:34:d0:c7:
97:28:16:77:e0:fc:94:95:7e:50:fd:a3:10:bb:0d:65:91:e2:
ce:9f:c5:04:35:67:d9:eb:5a:20:2c:99:d1:70:93:09:90:6c:
22:b1:29:44:ec:47:da:97:48:76:60:c2:27:a2:51:e4:ff:ee:
bf:27:0a:bc:a3:2c:af:d5:de:a1:55:30:38:10:89:b2:a3:cb:
94:2b:c1:ab:05:9c:7d:81:2d:a0:bf:20:86:1b:c5:ca:95:c8:
5c:69:1c:99:3a:17:2a:dc:f8:e3:d8:61:b9:f6:75:f4:79:61:
f7:d5:7c:82:14:6d:0c:7f:4a:6c:e9:67:cb:12:81:94:58:a4:
4e:6f:2d:cf:4b:ba:ff:09:a2:95:42:39:b2:7f:d3:44:42:57:
27:1a:3c:0e:0a:35:c7:83:bd:78:6e:6b:3e:92:1e:ae:02:a4:
f7:01:a6:a7:60:0b:48:cc:5d:c6:72:46:0d:49:d4:3e:06:98:
1e:c1:ea:37:c1:11:49:e9:83:64:d3:eb:d2:2a:a9:ce:de:c6:
79:ca:49:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:51 2025 by rpki-client