Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efd0da62-170f-3a0e-b80d-9db169fdb224.roa
File: efd0da62-170f-3a0e-b80d-9db169fdb224.roa (raw, json)
Hash identifier: DzdABJix/yMypXnFzI0fDcKHXPNiIfm7bhzucZTXUMI=
Subject key identifier: 4A:F3:DA:53:E9:1C:37:39:DD:A1:77:51:B3:55:29:69:14:15:51:CE
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A92A86208D6187D0D39ECC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efd0da62-170f-3a0e-b80d-9db169fdb224.roa
Signing time: Wed 11 Dec 2024 02:06:20 +0000
ROA not before: Wed 11 Dec 2024 02:06:20 +0000
ROA not after: Tue 11 Mar 2025 01:06:20 +0000
asID: 13335
IP address blocks: 172.68.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:92:a8:62:08:d6:18:7d:0d:39:ec:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 02:06:20 2024 GMT
Not After : Mar 11 01:06:20 2025 GMT
Subject: CN=c20ef554-77aa-4716-8c0e-7d9cd339195e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b2:d7:5a:21:03:24:61:66:fa:24:29:8e:dc:
7e:12:b2:fb:54:3e:10:a4:22:e9:0d:20:1e:b8:64:
c2:cd:78:1b:1c:a3:e8:99:56:f2:34:ce:47:e8:c6:
bd:85:3e:89:78:bd:41:28:8b:44:af:61:89:bf:dd:
7f:87:62:0f:40:38:97:6a:bf:de:5d:73:62:04:7a:
6a:70:d5:f1:24:1e:3f:e2:8c:bb:49:d5:c9:7b:0f:
3a:b1:27:a4:72:fd:5f:33:75:79:e8:6e:a7:be:d9:
7c:fe:34:df:b6:6d:82:84:ca:41:7a:66:21:07:99:
be:d5:7e:fe:8f:72:5c:a1:59:88:a6:31:65:51:10:
9c:02:fd:72:3a:95:20:69:25:22:bc:e9:b7:2d:19:
93:bf:a8:ec:a6:f1:21:89:26:f7:30:8c:bb:17:9b:
9a:df:0c:3d:2f:7a:17:ca:54:ba:ac:27:a6:5e:22:
b3:0e:28:91:3c:a2:a1:6e:6a:5e:e8:ad:7e:68:17:
25:00:84:a6:62:00:ea:3c:e3:a5:a1:8e:e8:6c:49:
b8:bf:da:f3:50:a4:e2:a5:d5:46:10:43:d2:4a:c9:
34:a8:f3:b8:94:55:9a:3c:98:34:d5:60:d8:9e:8b:
31:63:f7:0c:f4:df:c5:b7:36:04:a1:64:19:27:06:
a4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F3:DA:53:E9:1C:37:39:DD:A1:77:51:B3:55:29:69:14:15:51:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efd0da62-170f-3a0e-b80d-9db169fdb224.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:1d:40:ef:f1:c5:60:f7:04:e7:0e:7d:f8:c1:33:8b:8b:9e:
d1:42:99:a9:42:42:ee:7c:25:b4:37:cb:1e:27:78:36:3e:69:
ae:2b:a0:a2:c7:87:27:65:02:84:9b:1d:3d:be:99:cc:8b:f0:
da:34:86:f4:c2:77:fc:09:4b:8c:eb:b1:e7:7e:ab:6f:c3:5d:
36:0c:11:f0:be:01:56:42:7b:c2:f1:cb:03:dc:09:48:5b:63:
ff:fb:15:e3:d7:be:15:1b:65:6a:a2:6a:c3:a4:71:f4:c9:67:
e2:e8:c1:af:b7:1e:ce:89:fb:cc:02:ac:6b:db:d4:13:60:f2:
eb:70:d0:87:ac:a3:dc:b3:27:ad:88:6b:a1:b6:03:aa:6a:6c:
c4:e6:49:32:20:d0:73:d0:6e:8f:f6:9d:fe:73:05:1e:d2:78:
2f:b3:72:bf:65:93:b8:28:49:7a:31:1e:02:29:26:fd:ca:78:
f2:4c:0b:93:fb:d0:b1:f3:0a:df:0b:c5:f3:9a:ac:94:2d:86:
dd:bd:1d:6e:67:16:3a:6b:be:1a:e5:4d:8c:fa:f3:8c:0b:df:
35:09:46:d9:2c:66:18:36:41:c7:40:ec:aa:9e:43:32:c9:1d:
21:05:74:ad:78:6c:04:cf:78:35:2d:b9:6b:d3:63:7f:7e:c1:
9d:a6:e1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:17 2025 by rpki-client