Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f49b0436-1f80-3802-9fb5-3e8d48835807.roa
File: f49b0436-1f80-3802-9fb5-3e8d48835807.roa (raw, json)
Hash identifier: cjw0euLxMCn8iVtsHyhy7WqnWaywi3/Rl+WK6qnNv80=
Subject key identifier: C2:CA:9E:A8:B3:88:1C:8F:4B:BC:FA:3C:07:16:D8:1E:9E:CA:17:E8
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482AACE02E58B745F2C9899C00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f49b0436-1f80-3802-9fb5-3e8d48835807.roa
Signing time: Wed 11 Dec 2024 02:59:10 +0000
ROA not before: Wed 11 Dec 2024 02:59:10 +0000
ROA not after: Tue 11 Mar 2025 01:59:10 +0000
asID: 13335
IP address blocks: 172.69.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:ac:e0:2e:58:b7:45:f2:c9:89:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 02:59:10 2024 GMT
Not After : Mar 11 01:59:10 2025 GMT
Subject: CN=d2982ac3-266a-48aa-86f2-d77818dd443b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:72:a2:cc:4f:61:9a:08:a3:ac:da:a7:54:38:
c9:8f:1c:91:87:d7:c9:5e:05:10:8c:5d:9e:0b:43:
99:8d:8e:23:80:e8:4c:60:1e:5e:5f:24:b3:74:99:
71:1b:73:fc:fc:5f:3d:8d:94:2e:35:6d:af:35:68:
db:82:31:d5:03:4d:21:60:96:13:c2:d6:16:b4:e1:
b7:9f:93:0e:13:ec:3c:c8:20:21:47:92:c1:41:f9:
83:48:0c:6c:a4:7b:41:c8:1e:15:cf:12:d9:a9:f9:
07:ad:b6:55:5d:ed:0f:70:af:03:b1:bb:21:ae:5a:
9d:d9:59:95:9b:49:10:b8:c6:04:e5:50:90:76:4e:
26:7d:5b:23:6c:14:71:c3:54:12:00:01:0d:6a:66:
f8:e4:08:d3:36:61:c4:6e:84:dc:84:d4:bb:8d:2f:
0e:a9:fc:a3:df:64:ce:81:68:b0:3a:15:8f:69:ef:
7c:a3:bd:d2:ea:11:9b:de:d7:54:07:78:75:93:bb:
08:8b:e6:29:bc:2a:b4:74:35:f9:8b:05:80:f2:e6:
c6:83:b7:86:d2:15:ea:04:cc:73:d9:9a:dc:af:ca:
83:7a:32:e5:49:71:d4:99:ed:d0:7a:33:aa:9c:2a:
97:cb:69:0f:d4:29:8a:bf:06:c9:e6:0f:a0:b6:48:
79:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CA:9E:A8:B3:88:1C:8F:4B:BC:FA:3C:07:16:D8:1E:9E:CA:17:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f49b0436-1f80-3802-9fb5-3e8d48835807.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:c2:ac:1e:89:e3:ee:4a:53:20:f1:b0:4c:ae:f7:ca:6b:e2:
3a:4b:7d:88:49:6d:bc:14:52:04:df:10:3c:fc:f1:ad:86:81:
ee:31:65:57:4d:b2:36:ab:6d:78:f1:59:33:7a:8f:73:6f:f9:
58:22:fc:bb:0b:4d:37:e4:2a:13:3f:41:6c:96:f6:4f:67:fd:
54:44:ae:90:92:0a:21:73:d2:41:ca:42:0b:77:f4:a1:e1:07:
0f:5d:4a:99:79:da:65:05:eb:39:b2:e2:c9:16:ab:04:5c:e3:
0d:e9:9c:9d:1e:0b:e6:10:bf:27:63:e6:0f:0d:e2:34:f0:a4:
14:08:ca:10:d5:17:73:e7:cf:33:a3:2b:29:12:2d:67:e9:11:
c5:5e:6f:5a:51:68:7a:b8:ea:a5:fa:ef:bc:dd:03:41:5d:f8:
b5:a4:89:85:78:20:33:de:4e:77:d9:8c:aa:ad:ab:78:8d:d8:
65:63:dc:43:65:5e:f4:41:58:89:2c:70:f0:2b:ce:13:53:f3:
49:c1:d4:59:d3:6d:64:23:bd:a0:a1:12:f9:42:0f:a5:4c:8f:
fd:76:ac:80:d1:69:93:29:a8:fa:99:ac:c6:9e:d4:61:55:b7:
0b:26:1a:0d:30:81:71:a3:64:79:e1:5f:e7:84:63:dc:43:f3:
6e:67:e4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:53:32 2025 by rpki-client