Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f664b4c5-e87f-3925-8207-48233717f706.roa
File: f664b4c5-e87f-3925-8207-48233717f706.roa (raw, json)
Hash identifier: N6tmEkza3DlCjYCgZ5zF+Uj0myontu5IfqidRVV7Hzw=
Subject key identifier: 78:70:51:13:53:C4:5D:60:AC:E3:3A:49:E9:B4:2B:2E:13:29:0F:6A
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848283E42ADEF825AD06A575D80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f664b4c5-e87f-3925-8207-48233717f706.roa
Signing time: Tue 10 Dec 2024 06:04:40 +0000
ROA not before: Tue 10 Dec 2024 06:04:40 +0000
ROA not after: Mon 10 Mar 2025 05:04:40 +0000
asID: 13335
IP address blocks: 172.68.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:3e:42:ad:ef:82:5a:d0:6a:57:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 06:04:40 2024 GMT
Not After : Mar 10 05:04:40 2025 GMT
Subject: CN=ebbca965-69e3-4c2f-8b85-2db36abf92a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f4:c6:32:f6:0f:58:f0:91:1b:b3:c2:e5:89:
f4:2b:83:9d:a6:50:6f:2f:a4:5b:35:00:57:e6:0f:
48:bc:e0:f0:85:35:27:37:49:f0:2b:ba:67:78:6f:
5d:1d:16:82:e8:02:b2:32:4a:66:3e:31:fe:78:7e:
90:4c:23:4c:d2:8d:46:53:35:f1:d9:38:d7:82:aa:
44:42:d6:8a:d5:ca:76:27:5c:d5:36:28:84:5b:2b:
98:a1:1f:c4:47:d8:8c:3c:db:59:d4:64:d4:fa:4a:
6e:41:64:ae:e5:67:c2:54:33:a5:07:a9:bb:7b:0e:
c3:e0:ad:83:f2:58:ef:52:a9:56:9e:a4:fb:1b:a8:
e3:1f:1a:a5:7b:b8:92:50:0e:db:2f:0c:b2:3c:af:
16:d8:2f:15:2e:d6:1d:4c:5d:3a:f1:1c:34:5f:7a:
65:15:4c:84:d3:25:c1:79:f0:1b:ce:cd:dd:36:b8:
62:97:2e:59:1e:e6:b4:a9:4b:3e:4d:88:86:b8:3a:
3d:28:77:4a:1a:47:b8:7b:d7:3d:ce:1f:a5:73:10:
66:cd:d9:f8:68:43:da:8a:6e:43:4d:ac:03:e2:d8:
f4:44:d1:dd:d6:a0:1e:cd:62:e1:35:74:f3:4f:ba:
db:b3:b8:a0:ee:07:64:aa:25:85:24:b2:19:33:e5:
46:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:70:51:13:53:C4:5D:60:AC:E3:3A:49:E9:B4:2B:2E:13:29:0F:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f664b4c5-e87f-3925-8207-48233717f706.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.75.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:48:f7:30:6c:d0:8f:54:f7:b5:26:25:9e:53:9d:df:a8:cd:
14:a6:cb:33:f0:a1:54:c7:cc:6b:f9:1a:78:db:a7:28:42:87:
8e:83:90:e6:e5:d9:1e:3f:28:97:29:ad:4c:4a:1a:3b:52:f0:
cc:9a:8a:1c:16:70:ed:92:07:2c:da:0a:93:94:27:a4:11:52:
38:8f:70:50:81:16:14:7a:28:e4:a2:d5:be:05:41:88:d4:74:
e4:42:e2:25:f7:c9:99:7c:a6:d2:ae:5c:c9:ab:e6:2c:45:14:
93:ba:38:dc:f8:81:c3:45:9f:e7:bb:bf:0f:52:dc:8c:32:27:
21:34:64:1e:bf:5a:ac:1b:59:d7:c1:18:41:93:a8:e6:bc:37:
29:dd:a0:f3:e4:3f:78:7f:c8:ca:cc:f3:4a:52:d6:68:37:e6:
ab:4b:40:b8:cc:d0:15:88:82:b6:ab:67:04:eb:3d:30:cc:9e:
5f:e3:d9:d4:4d:d0:c6:96:9b:e9:93:ba:61:3d:e1:ac:dc:ea:
28:6a:e7:c0:29:50:fa:66:ea:fc:3f:94:12:2d:c8:ca:d3:29:
c8:9a:0e:05:ea:a2:fb:98:66:4d:b2:d9:68:2e:30:74:df:27:
c0:11:01:db:1e:e3:ac:85:7f:d9:cf:de:17:b9:e6:91:38:f3:
ef:db:5a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:34:36 2025 by rpki-client