Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eef9491d-b47b-3ed4-a258-10dc7d2a2850.roa
File: eef9491d-b47b-3ed4-a258-10dc7d2a2850.roa (raw, json)
Hash identifier: ksYnGPZCCmkGuin/YFqyysOOfqez7PwiPkp0FxlWeXM=
Subject key identifier: B5:E6:04:4C:5F:6A:1A:3F:AE:85:F8:4D:1D:89:82:56:42:12:9D:BB
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827A799504B059C97D24AAA00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eef9491d-b47b-3ed4-a258-10dc7d2a2850.roa
Signing time: Tue 10 Dec 2024 01:01:06 +0000
ROA not before: Tue 10 Dec 2024 01:01:06 +0000
ROA not after: Mon 10 Mar 2025 00:01:06 +0000
asID: 13335
IP address blocks: 172.68.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:a7:99:50:4b:05:9c:97:d2:4a:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:01:06 2024 GMT
Not After : Mar 10 00:01:06 2025 GMT
Subject: CN=1363b1ec-2acc-437d-8859-a2e95fb8a0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:44:78:43:04:67:d6:bd:58:94:0f:06:f1:12:
ef:a6:3b:91:91:d3:6e:a6:9f:49:8f:64:9b:63:4b:
11:42:d7:10:38:d6:1a:f2:f1:c5:5c:a4:bf:ab:a1:
de:a0:10:15:71:78:74:c4:10:63:f8:aa:07:a4:89:
9d:31:7b:f8:31:bb:b0:c1:fb:08:58:12:a0:9b:c1:
07:2f:61:49:92:9e:b8:c9:ce:df:b8:af:07:03:be:
4e:fe:ee:fe:a6:75:78:13:0b:aa:25:99:80:d3:91:
0e:c9:f2:4c:39:00:c6:0e:92:ac:47:51:d2:7a:80:
46:03:47:00:e2:d4:68:ae:37:cf:fc:bb:95:68:5b:
48:24:f9:c7:69:97:33:cd:6d:e5:a0:99:d8:a2:7d:
2b:63:e7:12:8c:ae:6b:36:49:07:44:e3:e4:da:48:
6d:f5:28:b1:7a:c5:25:b4:50:ec:c1:f8:d0:12:b7:
3e:7d:9b:97:32:a2:75:0d:f4:91:ed:42:5c:ce:e3:
4e:5f:b5:42:a2:39:5d:02:a6:2e:ac:b2:6a:20:8f:
84:4c:bd:43:2b:4a:2f:80:50:92:8b:6c:d7:a1:08:
88:e2:f2:f0:3b:cb:94:0b:4f:1c:fd:1e:64:1b:7b:
05:2f:1b:a2:26:8f:9d:e9:fd:e4:33:f3:42:50:8e:
0a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E6:04:4C:5F:6A:1A:3F:AE:85:F8:4D:1D:89:82:56:42:12:9D:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eef9491d-b47b-3ed4-a258-10dc7d2a2850.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:82:8a:18:a4:ec:8f:00:2d:33:a3:f3:ad:fa:ed:e0:57:19:
18:6b:91:35:97:d8:d9:43:d4:1c:bc:ee:46:92:38:6e:b7:2f:
9c:91:24:89:7f:2f:65:29:50:03:07:8e:ec:04:19:89:ee:8b:
61:8a:61:64:86:9f:78:5b:4e:1c:57:bd:50:43:f9:74:02:6f:
99:ad:b6:d1:7d:82:a1:db:42:ca:50:98:a1:a8:dd:fc:a5:5b:
2f:92:75:23:a2:a8:c2:a1:61:ce:a5:ec:e9:c6:ec:c8:96:4d:
51:3d:85:76:69:07:7f:4b:f5:26:6b:56:78:14:85:14:7d:1f:
f4:20:b3:93:cc:9f:2d:b9:40:bb:80:87:ba:b3:7a:e6:81:f2:
4c:e1:f9:4b:29:a5:21:78:3e:e9:79:09:81:d5:77:90:73:e4:
78:a7:de:10:c6:c9:aa:d8:d0:7c:d8:6e:04:18:87:17:0c:26:
d1:50:6c:9f:cc:24:e2:51:22:19:af:c8:30:c0:96:45:e8:69:
c0:af:db:16:93:23:29:54:08:68:0e:ea:31:8c:57:73:e6:bd:
08:df:88:d1:28:12:cd:39:c9:7b:11:dc:d1:10:f6:e4:2b:b0:
1d:18:5f:51:89:4f:4d:82:81:8b:16:66:29:06:67:94:9d:3a:
9a:18:e5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:23:06 2025 by rpki-client