Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e1c5c807-e854-3915-a98c-104d21f2c2ff.roa
File: e1c5c807-e854-3915-a98c-104d21f2c2ff.roa (raw, json)
Hash identifier: zQl1T4zce4ZVwSTGUCeIr0TNLs6if3l7AYVg9kio4LI=
Subject key identifier: D4:7D:2B:72:B5:54:13:C9:BF:60:6A:B7:7E:DA:DA:4E:92:BB:0E:64
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848283D2CF92C231E758DAFEC80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e1c5c807-e854-3915-a98c-104d21f2c2ff.roa
Signing time: Tue 10 Dec 2024 06:02:29 +0000
ROA not before: Tue 10 Dec 2024 06:02:29 +0000
ROA not after: Mon 10 Mar 2025 05:02:29 +0000
asID: 13335
IP address blocks: 172.68.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:3d:2c:f9:2c:23:1e:75:8d:af:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 06:02:29 2024 GMT
Not After : Mar 10 05:02:29 2025 GMT
Subject: CN=4111bf52-a13c-4d93-a4aa-bb590cd4d44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f9:c2:d2:3a:18:69:ac:9a:b6:a8:20:c0:28:
86:89:a4:54:d0:57:16:ad:72:c2:b9:0b:55:f0:a1:
20:48:4b:a9:0e:33:80:d8:f6:1f:a1:ad:7a:2d:14:
6b:4e:b6:ab:7d:4f:35:68:b7:6d:ee:ec:c8:b9:5c:
7e:a6:44:fb:2a:ed:ce:d3:88:1e:be:4b:30:58:b4:
82:21:a6:28:c1:9d:36:80:e8:bd:de:4b:e6:e2:87:
73:ab:82:9b:e1:54:87:97:9b:f1:92:a5:d7:66:b6:
8c:b6:e1:0e:ab:23:e4:2f:0b:1f:65:3a:8d:d6:60:
ed:3d:96:25:1c:2e:9a:5c:d8:e5:a4:7d:1b:72:74:
0c:a7:12:85:a6:c3:63:57:34:d2:91:e6:68:ab:4b:
6c:3f:10:1a:f6:02:28:e4:80:7b:04:09:56:63:e7:
ac:88:e3:81:e4:a2:a7:3f:ce:75:c4:82:cf:be:1a:
40:d4:03:dd:88:ed:7c:91:d1:97:6e:81:c0:81:06:
40:e7:5e:72:99:fa:8d:44:8d:d3:54:36:e7:02:20:
f2:62:d8:90:0a:71:f2:de:30:e3:75:13:c8:0a:d8:
bb:bb:18:e9:e4:b7:95:41:3f:8c:ff:29:20:0f:45:
0d:ad:0d:6d:82:ef:5b:26:c5:5d:87:95:82:08:ec:
64:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7D:2B:72:B5:54:13:C9:BF:60:6A:B7:7E:DA:DA:4E:92:BB:0E:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e1c5c807-e854-3915-a98c-104d21f2c2ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:c9:18:33:33:d6:62:a8:e2:86:09:f1:af:f1:5d:ba:78:2d:
bd:6b:3b:d8:df:9c:6b:a7:2b:25:ad:a7:62:cd:a8:1a:b5:3e:
6f:17:1a:61:32:e9:9d:1c:5f:01:b8:bd:e1:2c:b4:88:b3:f0:
a9:72:a2:93:77:b4:a0:3d:74:f4:d1:df:7e:ed:80:fe:12:2a:
60:58:c3:59:90:d0:08:78:43:d1:61:c4:13:0e:f8:db:c2:bc:
ef:9a:07:ec:26:bc:35:e9:c1:a5:91:49:15:77:ea:ea:dd:3e:
68:fc:d4:db:13:73:85:6b:bf:32:a1:21:97:b6:49:ca:32:33:
0b:4a:85:0f:51:00:e7:66:40:6d:af:a5:e2:f3:f0:d2:e2:e1:
73:ca:fb:92:6c:29:a8:b9:5c:73:1c:fd:f7:8e:53:17:b7:21:
5c:2b:74:d3:d7:fa:68:33:ba:16:b1:f1:95:21:00:32:df:cf:
31:69:de:b6:66:30:ef:6e:8c:81:ad:1f:fb:33:62:b2:cb:3b:
05:f6:5e:04:61:76:9e:08:c2:3e:b5:c6:c7:f9:6e:f8:90:c0:
f6:a1:d8:cf:68:66:30:ff:9d:9d:f0:74:5f:8d:d6:f9:22:ca:
a4:c8:d8:29:0c:4c:f5:a1:2f:b5:8d:fb:30:db:8f:74:d1:09:
5d:18:c4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:55:54 2025 by rpki-client