Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef9a051b-46da-3f87-ba2d-2803e8af972c.roa
File: ef9a051b-46da-3f87-ba2d-2803e8af972c.roa (raw, json)
Hash identifier: f0wL0IO+ft47sSVjSCXgSvrFCICmnS3p9Gs/G0CR/d8=
Subject key identifier: CC:74:69:DF:44:3E:91:05:D7:AE:93:DF:8D:D2:E8:76:1C:3E:A6:5F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A9117EEF01A87610F2F3B00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef9a051b-46da-3f87-ba2d-2803e8af972c.roa
Signing time: Wed 11 Dec 2024 02:03:11 +0000
ROA not before: Wed 11 Dec 2024 02:03:11 +0000
ROA not after: Tue 11 Mar 2025 01:03:11 +0000
asID: 13335
IP address blocks: 172.68.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:91:17:ee:f0:1a:87:61:0f:2f:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 02:03:11 2024 GMT
Not After : Mar 11 01:03:11 2025 GMT
Subject: CN=75d632ec-815e-4165-a03c-1dafa9fd9f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:28:df:6b:5e:06:43:1a:22:e8:8a:1d:58:ea:
84:61:8a:6c:9b:29:81:27:1c:23:7f:e4:5f:fa:8d:
b1:c4:3e:09:53:e9:36:8a:a2:12:c4:d0:90:1f:72:
83:2d:32:1a:74:f8:06:1f:c1:9e:a0:ea:9a:2a:fd:
3d:8f:07:b8:a1:48:04:48:88:dc:e3:92:f4:7d:e1:
e1:53:8d:2b:1c:74:de:f3:7d:f6:e3:ee:36:24:31:
9b:e7:25:45:17:83:d0:40:14:cc:35:68:5f:01:61:
78:de:ee:8b:43:8b:3c:64:2f:6c:3c:8a:0f:34:f4:
76:0a:0b:ad:f8:dc:45:9f:85:70:b8:f9:bf:f9:e2:
41:7a:10:f6:7b:49:d4:db:6b:30:dc:33:61:12:f1:
5d:ae:65:c2:f1:36:80:e6:ad:7c:2d:2e:f2:58:83:
f9:31:d5:04:2d:0a:33:75:a8:e3:55:90:2d:04:79:
f3:42:a3:8a:ec:bb:a4:46:08:22:fd:e6:12:cb:62:
69:6e:38:b4:01:bc:29:e8:46:36:c6:01:31:64:f3:
15:fb:5f:6b:ae:5a:0d:26:4b:48:51:cb:33:9f:99:
25:4c:20:70:b3:d3:7e:9b:07:9e:df:7b:4b:9f:7f:
0f:ac:b8:98:6b:70:d6:4a:eb:e2:0e:c5:b9:d5:b5:
25:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:74:69:DF:44:3E:91:05:D7:AE:93:DF:8D:D2:E8:76:1C:3E:A6:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef9a051b-46da-3f87-ba2d-2803e8af972c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:a2:ff:79:44:8d:3e:60:cf:d6:28:e0:2e:86:ce:a0:85:c0:
34:67:c4:ef:3e:70:97:f3:91:ab:b2:af:4b:97:f4:4c:13:4b:
d3:e7:f9:f4:68:dc:32:22:04:1a:8f:1e:e6:80:3f:86:39:37:
65:7f:08:09:e3:14:c1:a4:f8:ab:a3:62:14:ae:8f:26:e7:97:
86:6e:ae:de:96:81:11:64:2f:b6:ec:c7:57:84:16:c2:0c:9a:
e8:ef:a5:35:d1:8f:1a:76:5c:c3:20:98:57:01:bb:54:42:d7:
6d:b5:cf:67:ce:73:28:94:0e:f0:9a:6c:3b:cf:52:66:10:fd:
dd:c7:92:17:ac:45:56:2e:e9:e8:54:3b:8d:d2:e1:9f:29:56:
10:5a:ec:92:89:3d:2e:c2:b3:ec:41:d7:6f:7d:67:ca:e9:2b:
99:61:e9:63:47:18:ac:cb:d2:ac:55:15:b9:d4:de:26:10:05:
12:48:35:20:2a:14:3a:fb:9a:2a:ef:b7:2d:cd:12:af:25:1d:
5f:a1:25:50:ff:8b:72:8c:ca:6d:86:8f:c0:be:bf:79:fb:d7:
d2:ee:f3:c7:12:57:e0:b9:55:9e:2c:f3:72:cc:fa:c3:3e:d3:
ae:cf:3e:4e:db:b7:99:f4:4b:38:45:bc:90:f0:51:24:5c:8b:
db:26:ac:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:06:49 2025 by rpki-client