Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d0c91acd-0fed-3eb9-bc0f-714dae796e0a.roa
File: d0c91acd-0fed-3eb9-bc0f-714dae796e0a.roa (raw, json)
Hash identifier: t+PgUU4hbBWUXfifQFw8Zx1IoCfdSRTlNwG1PHWaKwE=
Subject key identifier: 47:BF:6C:E0:81:A7:32:86:A0:91:A1:6C:DC:73:38:6B:74:07:E9:53
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848301E1C4FFFBC348467061240
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d0c91acd-0fed-3eb9-bc0f-714dae796e0a.roa
Signing time: Fri 13 Dec 2024 01:46:21 +0000
ROA not before: Fri 13 Dec 2024 01:46:21 +0000
ROA not after: Thu 13 Mar 2025 00:46:21 +0000
asID: 13335
IP address blocks: 172.69.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:1e:1c:4f:ff:bc:34:84:67:06:12:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 01:46:21 2024 GMT
Not After : Mar 13 00:46:21 2025 GMT
Subject: CN=53a50edf-b62b-4c99-8d0d-98caeeeb4b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:41:fa:f8:44:29:fc:d2:bd:96:fc:62:76:f1:
23:4f:0d:f7:76:de:96:3d:8c:3c:c7:dd:dd:93:56:
71:9d:42:e0:ed:70:f3:dc:db:b5:95:5d:c4:50:b8:
f2:8d:46:f3:29:10:5f:f0:d0:ce:d2:a5:b6:58:62:
10:34:bb:24:2a:7d:8b:64:79:3b:b6:9f:82:7c:54:
8c:1b:ad:7b:ad:41:5e:07:21:e2:27:8a:e6:07:24:
73:ed:ed:7c:32:b2:c6:ff:68:06:ea:ee:6e:0f:72:
82:71:f7:ee:e4:39:31:9d:74:20:4e:e2:6e:10:6d:
81:8f:46:d1:e3:84:69:28:bd:14:7f:ea:c0:29:51:
ee:35:7c:66:26:e4:9f:38:13:5d:c5:3b:5c:34:70:
c9:83:ba:ca:86:98:07:d3:b6:df:a8:f9:08:cd:53:
3a:98:ae:68:d1:c4:02:da:4a:f9:38:28:e4:e0:ee:
89:86:85:c6:18:cb:06:e8:91:ae:a7:2e:3a:77:12:
e3:98:aa:3f:91:da:ae:ad:53:ad:0e:e9:d2:df:0c:
d0:1b:35:48:51:33:46:fc:c3:38:77:1b:4e:88:d0:
f6:ce:03:de:e3:02:e5:32:7c:61:ea:3b:bf:0b:32:
58:21:e5:08:cd:83:ef:d7:b7:25:5c:58:d9:cd:5d:
6f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BF:6C:E0:81:A7:32:86:A0:91:A1:6C:DC:73:38:6B:74:07:E9:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d0c91acd-0fed-3eb9-bc0f-714dae796e0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:a7:b5:07:3c:4c:00:15:be:e2:8d:54:a8:e5:5c:39:ed:48:
68:5d:a2:c7:fd:3f:90:61:c4:c3:3e:ef:3b:8b:c1:2f:95:c2:
bb:00:7f:a1:64:b5:29:c1:46:9c:f1:95:43:81:25:99:1d:31:
87:8e:1a:e6:44:41:89:54:bc:c3:c6:ec:5d:05:bc:03:e1:e2:
10:17:a2:42:60:b5:f2:12:ef:48:cf:70:b8:e0:79:3d:9f:2f:
60:61:4f:eb:ea:53:6f:62:b6:14:d8:74:ef:49:02:89:06:c1:
43:f3:4b:d5:bf:90:9e:43:d8:c9:a4:8a:9b:be:15:f6:52:ef:
0f:28:14:91:7f:6b:7e:35:88:ba:f1:c0:06:c1:6b:e5:65:63:
b0:73:54:3c:30:6a:c2:4c:64:7d:20:4a:75:81:9d:64:f1:a2:
5f:68:7b:a3:72:e0:90:2f:cc:5a:df:1c:e7:d5:3a:89:ee:5d:
0b:34:af:24:80:7f:ab:87:cd:ce:2f:19:a8:d9:52:24:f7:a8:
89:cd:67:c0:9b:fc:a9:0c:68:c2:06:41:7b:79:2a:5f:54:ce:
fd:8a:eb:2c:e6:ad:ee:61:bf:0b:0d:5a:a8:a1:df:1b:2e:4e:
64:89:e4:32:f5:bc:90:21:75:63:a5:11:8a:15:97:4c:2b:d7:
67:65:42:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:49:09 2025 by rpki-client