Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f4c362f5-4d9b-3ea0-b797-a2199e252ff9.roa
File: f4c362f5-4d9b-3ea0-b797-a2199e252ff9.roa (raw, json)
Hash identifier: RiVm8Fp/DARsfC9gD1XKOJCyy08UifMjXhcTGv85pSE=
Subject key identifier: D7:50:24:ED:31:15:5A:23:CC:07:FB:8B:21:9E:38:D9:E3:FC:D1:12
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584828215BD577655BB80763C640
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f4c362f5-4d9b-3ea0-b797-a2199e252ff9.roa
Signing time: Tue 10 Dec 2024 05:06:26 +0000
ROA not before: Tue 10 Dec 2024 05:06:26 +0000
ROA not after: Mon 10 Mar 2025 04:06:26 +0000
asID: 13335
IP address blocks: 172.68.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:21:5b:d5:77:65:5b:b8:07:63:c6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 05:06:26 2024 GMT
Not After : Mar 10 04:06:26 2025 GMT
Subject: CN=04857e5f-11d1-4e1b-9d38-bf39ac1ba8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e5:04:d2:5d:ec:6b:3c:a8:0b:67:6e:63:8a:
e3:9d:d3:56:74:ae:d4:6d:17:c1:7c:2d:fe:f5:2f:
4b:c4:3e:5e:63:ff:66:ed:03:02:6d:2e:e9:24:96:
ef:6d:f3:2a:96:3a:f3:a6:bb:26:43:83:c5:de:df:
46:03:f2:cf:d2:63:d9:ff:05:c3:12:ea:0a:0d:f6:
22:37:95:50:e9:eb:ef:eb:60:40:e9:64:91:cc:d6:
36:dc:c5:94:20:4d:d6:3b:b8:12:77:c8:0e:53:4f:
d8:70:f9:1c:fa:fb:c6:e0:f9:c0:b4:66:e9:db:ca:
7d:90:e6:62:62:8b:46:e6:de:2a:5b:96:81:7a:da:
a9:7f:f6:3c:2d:72:28:43:82:18:27:2d:6b:11:6b:
36:6d:24:a5:46:a2:90:66:e1:6d:11:d3:77:25:1e:
d8:fe:86:4e:07:b6:aa:da:e2:7a:8a:27:cf:f5:60:
d9:d4:be:7f:5b:b8:57:52:83:ee:d9:94:a0:a1:f5:
fe:4a:dc:19:a8:b6:a5:99:03:c1:e2:fd:26:f7:ae:
06:47:cd:60:b0:8c:4e:03:5c:0a:98:61:b0:78:98:
99:ed:7f:04:05:4e:a7:5c:a6:ab:eb:cf:1b:f1:d9:
c6:0b:70:48:7c:09:96:35:61:11:33:dc:ba:4c:2e:
5b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:50:24:ED:31:15:5A:23:CC:07:FB:8B:21:9E:38:D9:E3:FC:D1:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f4c362f5-4d9b-3ea0-b797-a2199e252ff9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.10.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:58:c0:08:0b:31:7f:d4:f3:da:2e:5e:a9:83:0c:e0:58:47:
9c:ea:94:8c:a8:21:e0:07:3f:6e:58:82:db:7f:57:8d:c1:e9:
ef:41:c1:96:08:f7:2c:c5:54:cb:7f:77:5b:03:fb:b8:67:c4:
8b:97:8b:a5:06:20:21:d3:95:f0:ba:2d:be:2a:5e:aa:c7:68:
56:05:29:15:81:e8:4e:75:30:db:fb:7f:f3:3e:46:d8:0f:0b:
a4:2d:cc:4d:98:bc:f0:1b:a4:30:9f:fb:3f:df:3d:39:6d:d3:
9b:1e:55:8e:b4:47:1d:ea:9e:ce:91:d6:91:f8:af:fd:7e:b5:
10:09:7e:4c:ee:ec:4f:3d:4a:f5:2a:a0:98:19:ab:71:b8:ed:
6d:97:e7:20:1f:60:fc:2b:56:ca:7c:3f:42:64:da:55:6d:9a:
b8:dd:86:7c:9c:28:1d:46:15:7f:09:8a:4a:66:13:1d:d5:a4:
08:cf:2c:cb:45:51:2e:de:2f:3a:a3:0e:e5:16:cc:3b:2b:96:
f1:c0:0b:d2:85:b6:85:02:58:be:a8:55:15:fb:21:0b:a2:21:
5a:90:ef:b4:09:24:a3:f0:52:5c:1d:a4:fa:86:b4:2b:8e:30:
0e:73:de:52:10:a5:b0:ab:07:c3:4b:c3:5e:5e:1e:c9:f7:63:
99:f6:58:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:59:59 2025 by rpki-client