Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ee57a836-c3c0-37da-8fb0-b007eacbdd85.roa
File: ee57a836-c3c0-37da-8fb0-b007eacbdd85.roa (raw, json)
Hash identifier: KoQ3zhA6aeTJrVcsHKu01y551wW4ZN80+Ja4jnxNslI=
Subject key identifier: B4:BA:7C:EC:98:68:F2:1D:14:03:A6:26:EE:80:8A:89:CD:CE:2F:B1
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A8C8F22D647BF237ABC6380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ee57a836-c3c0-37da-8fb0-b007eacbdd85.roa
Signing time: Wed 11 Dec 2024 01:54:03 +0000
ROA not before: Wed 11 Dec 2024 01:54:03 +0000
ROA not after: Tue 11 Mar 2025 00:54:03 +0000
asID: 13335
IP address blocks: 172.68.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8c:8f:22:d6:47:bf:23:7a:bc:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 01:54:03 2024 GMT
Not After : Mar 11 00:54:03 2025 GMT
Subject: CN=1dd93a46-6d2d-4152-aa96-ea8659a2d82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:15:75:20:60:66:1b:80:eb:06:72:56:0d:a0:
f1:08:ce:5a:73:7b:92:33:a6:31:03:f9:e2:0d:8f:
05:40:de:ae:9d:bb:f6:75:d7:b2:b4:72:0b:46:3a:
d4:9f:0e:7d:86:39:69:8d:8c:d0:87:07:bf:5d:e7:
bc:77:75:5d:07:8a:52:3e:eb:a8:28:1e:5d:72:e5:
7f:76:4f:e7:60:c8:41:fa:67:b7:34:e0:98:9d:2e:
a4:91:f3:a9:6a:60:2e:c7:79:f5:60:3a:a9:eb:0d:
44:e9:46:41:7b:1f:6b:cf:4b:b6:98:60:de:5f:0e:
f7:ae:6e:9d:70:97:7d:25:7c:69:15:4e:de:5b:25:
dd:8a:48:d5:8e:83:0c:3b:6d:5a:95:a0:8d:8d:91:
42:ea:ad:f8:b0:51:ad:ae:84:77:e5:4f:ce:74:f5:
d1:65:1b:3b:4a:b1:4e:6b:12:c0:fe:62:34:30:ea:
d3:99:5a:90:46:4b:31:58:c4:66:ad:ee:df:89:8b:
26:b4:2f:5d:71:da:03:93:34:49:4e:bc:c4:d4:92:
37:cb:db:0a:d7:36:1b:dc:60:6e:2b:10:bb:9a:ac:
00:54:14:00:48:f7:db:0a:33:ec:e7:4d:37:9a:66:
f6:d8:d0:eb:bc:42:1f:fd:b9:94:df:2b:0e:ed:64:
9d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BA:7C:EC:98:68:F2:1D:14:03:A6:26:EE:80:8A:89:CD:CE:2F:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ee57a836-c3c0-37da-8fb0-b007eacbdd85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:91:8e:f7:f0:33:e5:56:96:1a:0d:06:52:b1:59:0a:78:13:
d3:ca:01:64:90:6a:e3:d1:d6:a7:df:26:0d:bc:d0:5f:23:b5:
dc:0e:7f:6a:68:8b:3f:22:1e:80:fd:ad:16:aa:08:2c:9a:4d:
35:6d:0a:47:89:d4:bc:8f:fe:c5:a1:1d:d1:7b:62:36:ce:7e:
40:07:c0:ea:e6:62:48:e1:8c:6c:0e:fb:20:35:e6:af:71:5b:
91:12:d9:af:bf:7f:54:22:59:d7:0d:62:7e:5f:4c:b0:76:7c:
78:e7:78:8c:28:19:62:c5:a0:64:cd:62:27:45:ae:8f:b6:48:
d8:e0:2a:0c:c6:41:02:3e:04:95:44:9b:57:32:3c:93:9d:2a:
98:b0:0c:a0:f8:da:1b:8a:31:ea:e4:d3:2d:17:0a:cc:76:91:
37:28:5a:41:44:f8:47:04:d1:f1:b5:65:05:12:6c:eb:16:3c:
e6:0b:bd:26:99:83:4f:95:a7:37:6c:e4:d6:8c:c5:f8:d6:e2:
fc:52:62:40:42:61:52:6d:2f:d3:b2:d4:49:24:98:60:68:12:
95:8f:50:67:07:ab:0e:ec:e3:88:43:64:da:63:b7:0b:c9:ae:
15:5e:2d:36:79:6a:0a:79:d8:e1:ed:fb:c7:17:0d:f8:e5:bd:
24:79:5d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:03:43 2025 by rpki-client