Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8fa47a4-8c16-3e6a-a2da-d0f6abf2da31.roa
File: f8fa47a4-8c16-3e6a-a2da-d0f6abf2da31.roa (raw, json)
Hash identifier: UfnnGQG/fN7sk3D0Pp22DAzHiB4SGG37AcKG7KkCAxc=
Subject key identifier: 4E:B0:3F:91:22:EB:42:E4:0A:D3:34:E0:FB:EE:CA:81:8F:0A:65:B6
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848281D6944B61BED0E650178E0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8fa47a4-8c16-3e6a-a2da-d0f6abf2da31.roa
Signing time: Tue 10 Dec 2024 04:58:29 +0000
ROA not before: Tue 10 Dec 2024 04:58:29 +0000
ROA not after: Mon 10 Mar 2025 03:58:29 +0000
asID: 13335
IP address blocks: 172.65.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:1d:69:44:b6:1b:ed:0e:65:01:78:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 04:58:29 2024 GMT
Not After : Mar 10 03:58:29 2025 GMT
Subject: CN=259918f4-cd31-4e1e-9886-76c7941cc9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:45:6e:e6:77:11:52:ab:ef:59:2d:2b:61:df:
d8:d4:1e:bc:e6:89:fd:55:12:0a:22:f7:d8:e5:0d:
30:bd:dc:ed:51:d6:92:4e:76:6a:56:ce:b4:99:9c:
c5:d4:9f:8b:e4:fb:91:b3:b7:14:9d:c8:45:24:b9:
0b:f2:bd:1e:4e:94:6a:93:25:c6:7c:e2:7d:5a:55:
78:0b:b4:70:09:e2:8b:ca:a4:16:52:69:f0:70:6e:
e7:50:28:f3:65:81:4f:77:44:e7:5f:7f:84:c0:3e:
ff:8d:f6:07:cc:05:99:38:65:be:fd:ce:4a:2d:57:
66:de:ab:02:b7:2f:d1:2d:a0:dd:22:b5:60:2b:45:
4c:92:2d:4b:b5:17:d1:ac:89:e5:48:7c:a0:d8:9e:
20:87:f6:2b:c2:7f:6b:c6:df:86:58:3b:f0:0f:ba:
31:7a:e9:51:07:3f:bb:5c:37:8a:66:2a:db:66:24:
29:c0:99:1e:93:0f:e1:d4:33:3e:6f:7b:fb:72:80:
cd:d7:10:0e:43:8c:39:b2:89:9b:12:c6:7a:32:61:
bc:3c:6b:b5:0e:f6:e3:45:14:c8:6a:58:24:ce:f1:
7e:1f:4b:7d:27:be:c3:cf:4f:8c:b1:08:8d:7b:ea:
3e:b9:88:e6:0b:8b:1a:1a:83:86:6a:32:e5:78:7d:
9c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B0:3F:91:22:EB:42:E4:0A:D3:34:E0:FB:EE:CA:81:8F:0A:65:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8fa47a4-8c16-3e6a-a2da-d0f6abf2da31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.65.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:1b:0c:06:eb:dc:e2:70:84:da:c1:84:62:d4:da:79:4b:70:
c5:43:a2:cc:41:b8:e9:75:c8:b8:e4:5b:7a:1e:b9:e9:36:f0:
35:f9:ff:a8:04:19:b7:19:c5:3d:d2:da:35:93:63:3f:55:9e:
62:5d:a7:e6:76:1a:45:a4:a7:25:f7:ab:7f:04:c3:97:8a:3d:
0f:a9:3f:ad:8b:03:84:49:25:06:fa:10:ef:73:3c:d9:80:75:
0f:db:31:8d:9a:47:71:a9:66:a6:71:2f:bd:0e:df:7b:25:56:
96:aa:ec:31:e2:fc:24:32:64:8b:86:8d:88:2b:a2:eb:aa:b1:
8b:62:52:2d:eb:ac:c8:48:9f:09:e2:6b:de:2e:fb:84:87:46:
0a:cf:55:73:21:79:d9:2d:e2:df:ce:c1:58:ce:26:ae:2a:9c:
68:9e:de:3d:30:74:7c:b9:a5:0c:e2:5a:1c:8a:03:b6:79:3e:
f5:39:46:84:73:4a:10:a5:7a:c3:3c:4c:de:f3:44:27:cf:8c:
05:33:19:a6:70:3c:0b:94:56:ab:74:46:b9:a2:fc:ae:8b:e2:
9b:9e:0b:e6:d5:2b:52:ed:b8:b5:1b:48:97:fb:c4:af:c4:cd:
ad:b6:b4:78:20:7d:9a:2f:e6:f4:16:b5:e5:74:d9:b3:0e:be:
99:da:20:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:56 2025 by rpki-client