Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e2a4117a-3cea-3620-96cb-17d5c0052fb8.roa
File: e2a4117a-3cea-3620-96cb-17d5c0052fb8.roa (raw, json)
Hash identifier: AdBS20D65ww7dgZ+Uo28Jkb4mibaaYdh1UPQ00OG+0A=
Subject key identifier: CA:4F:3B:2D:A4:4A:ED:40:E0:FB:EA:C0:96:9C:57:96:1F:CB:9E:C2
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848283CA09D9E220B8205610F00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e2a4117a-3cea-3620-96cb-17d5c0052fb8.roa
Signing time: Tue 10 Dec 2024 06:01:23 +0000
ROA not before: Tue 10 Dec 2024 06:01:23 +0000
ROA not after: Mon 10 Mar 2025 05:01:23 +0000
asID: 13335
IP address blocks: 172.68.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:3c:a0:9d:9e:22:0b:82:05:61:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 06:01:23 2024 GMT
Not After : Mar 10 05:01:23 2025 GMT
Subject: CN=e4499fa9-d534-4f23-aa9a-8a1916b4891f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8f:a7:25:f8:20:23:eb:53:a0:7e:09:c5:44:
37:8c:84:47:87:da:6d:36:c7:7c:34:de:76:35:38:
c4:d4:47:f2:8b:30:5e:14:fc:64:3d:8e:8a:8f:f4:
1f:59:74:da:e9:cd:1e:e4:bf:50:c2:89:18:2e:72:
fe:d8:5b:6a:b7:d3:40:5e:e1:13:76:e3:f3:15:bc:
35:37:87:34:c9:4e:ee:b6:9f:79:80:bb:15:4b:b3:
66:32:3c:f8:6b:79:ad:75:5c:a3:82:9c:20:d1:36:
bd:9f:98:2d:a3:21:b5:46:63:24:ff:61:f4:bb:73:
c7:98:36:e2:94:fa:e2:0b:a6:07:dd:9d:d8:0d:71:
05:0f:d1:5c:6b:1a:78:f2:e2:7a:6e:db:92:42:10:
30:9a:ae:c0:b1:24:d7:8f:f2:e0:b4:ce:32:c6:ad:
65:57:62:fe:f6:e7:c4:9b:1e:f4:3d:6f:cf:5c:27:
f7:7f:70:cb:02:ca:d8:b4:60:45:86:a6:a0:67:12:
30:53:bf:25:45:c1:19:93:24:ce:77:1e:35:9b:2d:
62:30:c9:5b:a2:cf:da:2b:da:80:82:c0:dc:20:5d:
b7:19:01:33:13:e8:73:62:97:09:f4:42:2a:e4:a4:
08:db:b7:8e:41:13:0c:97:bc:1e:2f:e7:c8:e6:5c:
ca:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4F:3B:2D:A4:4A:ED:40:E0:FB:EA:C0:96:9C:57:96:1F:CB:9E:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e2a4117a-3cea-3620-96cb-17d5c0052fb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:61:c8:ff:67:c0:a9:de:35:63:62:43:c2:7a:33:50:f8:b6:
6b:eb:ad:51:59:08:cd:c9:61:64:d5:4d:7c:ba:1f:2f:ea:e4:
90:39:8b:d5:df:40:de:2f:9a:74:47:1b:68:92:a2:da:a9:81:
0b:de:ec:43:7e:05:4d:25:60:c1:54:9c:1d:12:6d:e3:20:0d:
e1:a0:3f:cd:d7:1b:df:bb:d2:aa:11:24:b9:94:c3:a4:c3:da:
55:39:f8:8a:ad:7d:b9:aa:b5:ad:3d:33:d2:3c:39:b4:92:4e:
bb:1a:fc:2a:47:3b:8b:76:9d:a2:cc:7f:61:85:af:20:4d:5b:
14:4c:ee:c9:ed:f2:08:ee:9d:70:4f:f0:63:81:ec:03:82:bc:
c5:46:7c:3d:2d:30:c8:59:f7:1f:58:bc:a1:bf:88:f2:9f:1c:
6f:51:df:31:69:db:7b:11:10:09:bc:75:1a:0b:8a:0a:93:d5:
62:32:26:9e:aa:77:70:8f:b5:da:a6:ef:8e:98:83:ee:84:41:
17:34:7f:98:3f:97:1c:e3:17:7e:ac:26:42:35:18:50:6d:3c:
aa:c7:7d:72:ef:ca:d9:3d:42:70:2c:b3:f3:04:7a:06:34:5b:
49:80:51:cf:dd:51:81:a5:ab:59:0b:94:dd:00:64:92:42:46:
5e:ea:57:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:05:50 2025 by rpki-client