Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/db3a0f3b-6e5d-36d5-a182-680c2591b176.roa
File: db3a0f3b-6e5d-36d5-a182-680c2591b176.roa (raw, json)
Hash identifier: tcP9QcGawFJ6PJgwJIqiwhwSaIsDnO26/zKuyYIb9KE=
Subject key identifier: 66:67:4B:B6:BD:EF:66:5B:70:8B:D6:DA:8E:4A:5E:AC:79:3B:A8:2F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848281B075874D7E75E51114E80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/db3a0f3b-6e5d-36d5-a182-680c2591b176.roa
Signing time: Tue 10 Dec 2024 04:53:41 +0000
ROA not before: Tue 10 Dec 2024 04:53:41 +0000
ROA not after: Mon 10 Mar 2025 03:53:41 +0000
asID: 13335
IP address blocks: 172.64.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:1b:07:58:74:d7:e7:5e:51:11:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 04:53:41 2024 GMT
Not After : Mar 10 03:53:41 2025 GMT
Subject: CN=0ed4160e-d608-4602-8b64-3ff4353b861b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:29:12:90:94:8f:c8:87:60:6a:8e:ef:6c:66:
92:5d:a1:26:00:6f:ed:3c:5e:5b:31:de:7d:c8:f1:
d1:f8:ab:cb:14:ef:23:cc:e6:c4:dd:48:46:6c:9e:
08:67:60:6e:9d:48:7c:a5:4f:f9:d1:54:ca:b2:0a:
3d:99:5a:a8:1d:a4:88:9d:a0:88:dc:f4:57:8c:c0:
90:5b:64:b2:1d:ba:a2:27:34:6b:c9:37:d1:7f:24:
66:a2:d2:bf:f5:42:c3:d5:52:42:71:42:3c:58:8c:
ed:eb:6c:c1:a4:3c:ac:84:0c:e1:60:e7:df:cf:b6:
77:f3:74:51:a6:7f:e9:f2:79:4e:7b:aa:9a:d1:1d:
24:ea:83:db:00:63:87:0c:33:39:1d:a9:83:24:63:
aa:21:ef:1f:02:9e:4f:53:87:28:17:12:6e:d4:ee:
23:a8:e2:29:ba:da:6c:d5:f1:b2:99:0c:1d:d9:70:
3b:f8:21:2a:1b:cf:ee:89:f6:4f:cf:00:4f:28:a4:
53:24:11:18:61:2d:65:04:6b:33:6f:4e:78:08:ef:
c1:a9:c9:ee:05:19:f8:9c:5d:a7:08:af:48:8d:08:
b9:64:01:9a:86:4a:8d:3e:54:3c:d3:d7:54:09:d8:
d2:fe:1d:ab:bf:e7:cf:e4:eb:6e:e3:40:bb:85:80:
e4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:67:4B:B6:BD:EF:66:5B:70:8B:D6:DA:8E:4A:5E:AC:79:3B:A8:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/db3a0f3b-6e5d-36d5-a182-680c2591b176.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.64.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:28:59:eb:44:8d:73:68:64:1d:b0:e9:23:67:81:b9:42:1a:
8c:7e:62:9d:45:c5:51:4d:fe:14:63:2c:7b:cc:7a:92:f3:9c:
ff:44:16:36:2f:a0:33:72:ea:ce:cd:34:67:e5:66:5c:27:56:
37:77:e7:62:62:f8:e7:8c:75:17:19:71:65:e9:52:15:7e:20:
e4:21:48:bd:34:fb:c3:05:ce:dd:db:f4:32:ae:dc:2c:a7:93:
02:60:e0:2c:c4:ba:74:23:22:3c:8c:9f:ab:fb:83:a9:93:3e:
36:ab:b8:e7:58:4d:28:a1:23:63:40:d0:18:f1:79:ef:2a:3d:
86:b4:34:11:b8:e1:6f:cb:10:ff:90:b4:0b:8e:58:65:66:db:
b0:81:2b:c1:ba:33:6a:10:b0:8b:76:76:4a:4e:0f:93:5f:92:
dc:c9:8d:ed:42:20:90:3a:f5:dc:db:bb:6a:e1:c1:f1:bc:96:
2a:9e:32:ae:29:d2:b5:c7:3c:37:71:16:c6:61:a7:5d:98:81:
02:6c:70:21:e7:b8:68:2d:94:c0:11:eb:20:75:1f:ea:5a:a2:
6d:bd:a4:7e:99:7c:6b:5b:e6:34:4c:47:c5:4a:92:ea:da:dc:
5d:9e:86:cd:a3:cd:11:0d:32:ac:bf:d7:9d:7d:4d:93:04:91:
ed:ce:fd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:49:20 2025 by rpki-client