Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f28b0de5-9e72-36f4-bccc-24b8a345bdf4.roa
File: f28b0de5-9e72-36f4-bccc-24b8a345bdf4.roa (raw, json)
Hash identifier: eCZUxdixEf/OzT2y7RixQgIB2p9prdJC4Zvx/x5+HQs=
Subject key identifier: BE:76:67:65:97:BD:EC:73:5B:48:B4:EC:C1:BA:B6:75:C0:E8:3E:97
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827A2B2D0C15D7B296BFE5540
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f28b0de5-9e72-36f4-bccc-24b8a345bdf4.roa
Signing time: Tue 10 Dec 2024 00:51:14 +0000
ROA not before: Tue 10 Dec 2024 00:51:14 +0000
ROA not after: Sun 09 Mar 2025 23:51:14 +0000
asID: 13335
IP address blocks: 172.69.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:a2:b2:d0:c1:5d:7b:29:6b:fe:55:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 00:51:14 2024 GMT
Not After : Mar 9 23:51:14 2025 GMT
Subject: CN=1cdd1d37-6d9b-4c4c-a1cc-2d3b42edbe7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ac:7a:4d:a4:4e:27:81:fb:e9:ee:72:fe:ee:
f5:da:da:be:1f:4e:03:c1:d5:e2:a2:16:ae:4c:8a:
60:09:f5:be:7c:0c:2f:42:28:30:98:4a:0e:ac:f5:
e9:48:c4:90:bc:a9:57:8d:70:f0:1b:be:48:3a:98:
bd:24:f1:ec:bc:9e:e0:cc:96:f8:c0:70:e5:ba:9b:
ec:55:2a:c2:5a:82:e9:2b:14:da:dc:7e:d5:81:e9:
66:2d:a5:d5:28:ae:db:10:d6:a3:c5:17:92:f6:f9:
32:37:d2:89:23:53:21:3d:64:a7:30:3b:3e:67:52:
5b:94:a6:62:a4:23:c6:9d:7c:59:b7:dc:bb:0f:dd:
e1:1b:bb:a2:b9:b4:f8:b8:22:a5:38:9c:60:71:f1:
b5:40:51:1e:e0:5d:c8:14:e9:5b:46:8a:67:b1:51:
1e:f9:bb:f9:4e:54:eb:52:95:ee:61:01:97:a0:02:
33:7f:f9:4a:4b:bb:64:aa:48:5e:cc:5c:a4:5e:cb:
cf:b8:79:bb:32:18:63:18:2c:f5:7d:5f:29:c5:13:
77:fc:41:5e:a1:d3:bf:39:45:e5:29:95:c4:b5:75:
69:94:6d:ae:78:48:45:06:55:bc:59:a3:c5:25:96:
6b:8c:e2:d0:f7:ad:b9:46:04:0a:ed:c8:03:3d:63:
97:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:76:67:65:97:BD:EC:73:5B:48:B4:EC:C1:BA:B6:75:C0:E8:3E:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f28b0de5-9e72-36f4-bccc-24b8a345bdf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:61:be:70:e8:f5:4d:66:55:f2:c5:57:2d:93:f4:62:6c:49:
11:83:20:2e:c4:37:f1:fe:90:2b:6e:ef:a2:a8:a3:0a:6b:d1:
d7:8e:3a:6a:e8:e7:dc:43:20:35:d8:08:5d:9d:ce:37:0a:a7:
d2:3b:8e:1e:77:8d:ab:6e:4e:19:e3:fa:06:17:19:71:12:2b:
39:ae:72:4b:0e:64:8e:a5:58:76:63:bf:98:2c:0c:42:cd:b8:
d1:16:36:3a:98:5a:7c:2e:78:13:88:c6:68:d5:96:a2:02:90:
ea:f4:0f:53:34:8e:fa:92:9c:ad:6e:63:f7:e8:94:10:4e:23:
da:ab:ad:90:48:99:33:a2:f7:5a:9e:07:7a:6b:cc:3b:13:2e:
35:b2:f5:e9:77:3a:41:52:e5:33:04:dc:c6:a8:f2:e2:8e:1d:
cb:c8:f2:f2:55:da:2d:96:d8:87:f1:99:cd:8c:4c:94:4e:bc:
69:e4:30:ea:99:c4:2e:8d:b5:d9:e4:f9:d6:24:71:d5:01:a1:
f2:f3:d7:34:95:ea:d8:c8:14:5e:fa:fd:b2:35:c9:be:9a:6f:
63:e0:9e:e4:fe:60:f6:77:f8:eb:b4:c6:5d:2f:17:e7:44:d9:
b2:71:73:87:48:02:6f:5e:57:d4:de:4c:95:f3:1f:46:a1:72:
d1:f6:b2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:52:52 2025 by rpki-client