Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f65ff72b-110e-37c0-b4a1-1e3ebfdf4c24.roa
File: f65ff72b-110e-37c0-b4a1-1e3ebfdf4c24.roa (raw, json)
Hash identifier: X2RUH7U9osv2RAugm/MnVI9q4NW/oxiEb9qLWcLHMjc=
Subject key identifier: D7:27:61:7F:33:75:6D:27:28:18:9C:66:C4:D7:8E:7C:B4:ED:23:A5
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482821B2CFBFA479F7C59B4680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f65ff72b-110e-37c0-b4a1-1e3ebfdf4c24.roa
Signing time: Tue 10 Dec 2024 05:07:07 +0000
ROA not before: Tue 10 Dec 2024 05:07:07 +0000
ROA not after: Mon 10 Mar 2025 04:07:07 +0000
asID: 13335
IP address blocks: 172.68.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:21:b2:cf:bf:a4:79:f7:c5:9b:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 05:07:07 2024 GMT
Not After : Mar 10 04:07:07 2025 GMT
Subject: CN=89b5c76e-0e60-47d7-8024-07c77feccc75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c3:83:50:30:36:0b:30:5b:6d:bc:4a:25:b7:
89:8c:b7:a8:b0:7a:2c:4e:9c:2b:94:ae:f7:cc:77:
4a:bd:98:9a:67:52:08:e9:98:bc:40:da:40:2a:49:
94:64:69:4c:57:0c:92:2a:cd:2c:9d:84:ac:61:61:
0f:f3:cc:b8:94:3e:29:d9:ce:f8:db:ef:72:bb:45:
a1:8f:f4:b4:57:8b:d1:de:b2:e3:ab:99:75:84:c6:
0d:22:f1:94:03:45:27:ab:ea:8f:b8:65:8d:cc:0e:
4e:d6:29:3e:49:d0:45:6b:4a:1e:8c:af:75:63:c9:
c1:57:0d:87:df:81:63:dc:be:af:4f:ac:57:2b:49:
a2:ad:d9:7f:9d:57:07:cc:99:d8:97:13:1b:24:f2:
ca:cf:d3:21:19:14:e6:5e:a1:7c:fd:1d:94:9d:7c:
29:8e:95:c5:d0:54:f8:9b:d4:21:e0:13:25:a4:a5:
32:72:07:3a:bd:44:fb:6e:ca:28:d4:c4:2f:1d:16:
45:df:68:d1:08:65:27:e5:08:ab:9d:c6:55:77:e9:
e3:05:23:60:4b:cf:9e:ca:a7:07:11:ac:33:1a:72:
b0:61:62:8f:be:fb:5a:90:e9:ba:2e:96:dd:90:14:
9a:08:d9:a5:cd:e0:00:3b:bb:bf:01:8d:1b:d9:d1:
44:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:27:61:7F:33:75:6D:27:28:18:9C:66:C4:D7:8E:7C:B4:ED:23:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f65ff72b-110e-37c0-b4a1-1e3ebfdf4c24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:ea:db:f2:2a:08:b3:c0:30:46:39:ee:29:61:96:32:9b:3e:
10:be:e0:47:c9:66:ba:46:4a:85:0b:7e:66:28:22:70:fe:ce:
b1:57:f9:ea:2c:0a:56:96:3a:3a:8c:ba:63:26:36:67:73:a6:
70:1a:39:2a:52:68:2a:e6:b3:5f:ef:b5:e0:b9:05:42:35:7d:
98:26:e2:37:6b:6c:b1:97:23:ce:89:44:48:9e:a3:66:42:66:
7f:80:84:06:4e:c5:08:ba:ac:75:f3:c3:aa:39:78:fc:18:dc:
71:45:99:6f:82:1b:25:be:9f:d4:5c:e6:b3:b3:3c:f6:cc:0f:
53:06:14:f5:8b:f6:4a:e2:98:4b:36:4b:fa:6e:9e:77:62:0c:
40:6c:52:07:47:44:06:56:f1:f0:9c:ef:16:35:25:10:66:99:
2d:09:11:7b:58:e7:bb:07:c8:8e:1a:6f:bb:67:20:d2:9a:11:
7a:b5:82:32:de:28:5a:66:01:80:13:20:30:d5:97:bf:78:69:
b6:94:07:9a:92:52:a9:21:4f:ad:c2:a9:af:08:fe:a8:57:be:
fa:85:2d:62:9f:46:68:e1:11:53:e9:19:78:0c:cb:3c:e2:b7:
8e:c6:3a:7c:5c:c2:3d:ba:78:2e:ce:bd:a4:d4:af:f3:d4:ff:
ff:2b:f0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:59:49 2025 by rpki-client