Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fa5cde3e-a60b-3201-b968-498530b397f6.roa
File: fa5cde3e-a60b-3201-b968-498530b397f6.roa (raw, json)
Hash identifier: 7PHwFZwmEFRBUsgqIij7FYGd7Ez+wVCKgEMGcL9c74w=
Subject key identifier: 4A:85:05:EA:71:7B:83:31:BA:1D:9B:66:63:6B:9F:67:9C:00:9D:4D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848283EF0DE15A2F33F8D173900
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fa5cde3e-a60b-3201-b968-498530b397f6.roa
Signing time: Tue 10 Dec 2024 06:06:02 +0000
ROA not before: Tue 10 Dec 2024 06:06:02 +0000
ROA not after: Mon 10 Mar 2025 05:06:02 +0000
asID: 13335
IP address blocks: 172.68.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:3e:f0:de:15:a2:f3:3f:8d:17:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 06:06:02 2024 GMT
Not After : Mar 10 05:06:02 2025 GMT
Subject: CN=d76664b9-0f5e-4274-96de-172f83fb8c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d0:e8:27:53:84:37:00:80:ea:15:ce:3b:f0:
3a:13:63:96:54:c2:5e:f0:8d:a3:54:2f:26:c7:50:
bc:cf:a0:1d:af:6c:55:ef:61:f1:34:cb:22:d7:d2:
9d:cd:ca:70:49:86:de:e5:94:19:bb:f2:92:84:25:
1e:d1:f6:dd:bd:c4:31:ef:af:0f:3c:f4:85:41:d4:
b6:16:a5:ba:fc:fb:ec:9a:b0:92:2e:b3:bb:b6:7f:
12:80:69:2b:6c:ae:be:b4:a8:6c:b6:9b:fc:cf:02:
57:a2:4e:78:11:08:23:43:5e:e9:30:28:2d:39:ae:
72:57:95:33:60:41:26:d0:ab:a2:94:57:64:cf:f7:
5b:c1:51:53:89:0c:b3:2b:4b:fa:54:04:63:28:29:
8f:9e:71:ac:36:6c:cc:37:bb:5e:2a:ac:46:be:6f:
9e:7a:50:4d:df:c8:78:15:7a:0e:df:ea:ad:ec:53:
3e:1f:76:8b:6e:31:99:5b:63:03:28:ee:6e:9b:e9:
17:3a:a2:30:16:0b:27:61:34:c1:e8:f0:fa:2e:85:
6f:6a:55:c9:88:b6:77:34:ec:42:45:d3:39:60:5c:
cc:eb:7f:86:7d:5e:41:82:b4:95:40:74:5c:be:ae:
45:8b:38:d1:fe:a5:c8:2b:5a:18:ee:12:d8:bf:38:
f8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:85:05:EA:71:7B:83:31:BA:1D:9B:66:63:6B:9F:67:9C:00:9D:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fa5cde3e-a60b-3201-b968-498530b397f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:09:3e:fe:f0:32:46:28:db:a0:ae:6a:cb:ef:53:e4:c7:4f:
ab:a1:88:2e:58:ba:34:86:10:2a:35:58:a1:f2:41:61:43:89:
23:32:72:3d:2d:9c:20:be:67:37:60:90:97:f3:14:1d:11:e8:
2c:96:16:f3:82:ae:bf:a5:66:04:b8:2a:e2:02:86:7d:60:02:
01:78:67:d1:de:7e:34:35:3a:66:e4:95:68:4b:00:b6:e2:ad:
3f:41:2e:fa:c5:26:d1:3b:5c:80:ee:0f:30:6b:e7:14:fe:8f:
9a:4e:2c:cb:aa:d2:38:7d:e8:8d:ee:21:f0:aa:e7:fb:df:17:
18:a5:5c:a1:90:80:af:f1:03:5f:6a:ad:1b:93:ae:44:61:2f:
d6:9b:89:42:5f:3d:20:33:c1:e5:c4:86:3b:e3:52:b2:e3:2c:
da:35:0f:12:97:67:f1:60:c5:fd:20:56:d4:02:6d:de:66:df:
0d:0e:7b:fe:0f:88:1e:7a:78:9e:e1:a6:19:3d:c1:46:1c:9f:
7c:b4:b0:8c:5e:77:3e:09:a9:80:98:a2:fa:d8:c5:48:b9:8c:
2e:08:40:aa:4e:73:5c:0a:86:76:c8:4f:3d:98:d2:e4:42:3a:
2b:cc:d5:58:36:ee:d8:5c:db:b3:9c:89:b0:5e:55:44:48:7c:
18:9d:1d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:53:25 2025 by rpki-client