Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ffefb04b-439d-329a-b0a7-11b8923ec659.roa
File: ffefb04b-439d-329a-b0a7-11b8923ec659.roa (raw, json)
Hash identifier: Nh5WkcUl1idFEcEZMPzwgLg0pb6lUR4yM3SfAkKofQk=
Subject key identifier: 40:3B:4D:36:FD:8C:77:99:4D:4D:5D:02:52:71:A3:4A:DE:7B:35:31
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848283F25083141527706A76800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ffefb04b-439d-329a-b0a7-11b8923ec659.roa
Signing time: Tue 10 Dec 2024 06:06:27 +0000
ROA not before: Tue 10 Dec 2024 06:06:27 +0000
ROA not after: Mon 10 Mar 2025 05:06:27 +0000
asID: 13335
IP address blocks: 172.68.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:3f:25:08:31:41:52:77:06:a7:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 06:06:27 2024 GMT
Not After : Mar 10 05:06:27 2025 GMT
Subject: CN=97993600-35a5-4321-8f14-aeb75be9a14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b8:9c:e1:db:4c:40:ee:fb:af:69:15:4d:f8:
88:28:c8:b7:ce:06:97:ac:b3:da:35:74:ec:c0:1e:
37:68:9e:5c:51:07:6f:24:5d:4c:83:78:ff:43:34:
02:68:ef:8c:64:75:4b:df:28:3f:81:af:4c:0c:d7:
04:09:83:94:3e:6b:bf:d8:a8:16:25:06:d6:82:7c:
73:8d:92:38:bb:18:3b:4d:68:4a:22:92:d8:3a:69:
b0:58:c6:d6:fb:ab:70:a6:0d:09:05:32:ed:a1:d5:
bc:1d:5b:98:08:f1:1e:4c:28:db:27:8b:08:c3:48:
ae:2e:e5:85:15:b1:97:58:99:e6:20:3a:d6:05:b9:
53:5f:ce:f1:82:7f:fb:be:51:43:b0:1f:12:a2:58:
43:ef:d8:9c:e5:d4:ab:5e:2d:48:55:c2:cb:2e:da:
94:7e:c1:4a:06:a7:c9:e4:e5:0a:e0:c2:21:7d:fd:
d2:1f:97:47:08:ed:34:a7:71:8b:42:b2:a4:70:36:
24:d7:e2:17:9c:a9:4d:e5:ba:eb:24:82:ce:11:38:
06:d1:55:f6:af:89:66:f3:7e:32:05:ac:ea:51:0b:
52:4b:60:23:00:c6:5e:f7:16:65:c9:c6:8c:8c:dc:
f3:63:c4:34:67:cd:41:d6:f9:e8:fe:3c:a4:36:0d:
48:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3B:4D:36:FD:8C:77:99:4D:4D:5D:02:52:71:A3:4A:DE:7B:35:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ffefb04b-439d-329a-b0a7-11b8923ec659.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:36:b8:26:f2:31:9c:d4:1e:11:04:1b:2c:d8:09:5c:93:75:
6b:25:6b:a6:54:70:e1:29:ff:7f:76:a2:f2:56:9f:a1:dd:44:
e4:39:a9:c9:f4:27:8f:94:14:4a:d4:56:0d:0d:99:4f:1c:13:
cc:62:c4:1b:96:95:43:30:fb:5a:3f:a4:23:03:1e:b1:9e:18:
c4:15:41:4f:90:99:3b:16:f4:98:8f:17:c3:c6:8e:b2:84:31:
fd:cb:fd:a6:45:1b:c4:50:aa:3b:30:d3:ca:5e:21:13:89:e4:
47:c3:76:40:54:e8:79:ed:1f:d7:99:49:a1:7a:be:59:9b:07:
e3:55:5b:2d:0b:c4:9c:41:1e:c2:d5:20:5d:05:5f:7d:8d:2c:
39:ae:f5:95:31:22:c5:e6:57:35:31:de:6b:6c:89:f6:df:09:
fa:e5:a1:6e:8a:26:0e:15:c7:8c:2b:69:89:98:d3:40:2f:d9:
cb:ed:55:e1:4c:ed:15:e6:ac:70:36:8b:2e:ef:92:22:47:7e:
5d:16:ac:86:96:94:04:2d:48:b3:e8:d2:6f:d9:5c:e6:c3:b0:
47:b8:c5:2d:09:97:85:ed:51:c8:8b:01:20:e3:49:b3:b9:23:
3f:ee:4b:eb:39:00:db:8f:7f:8e:45:3d:46:13:db:4d:fe:d6:
64:71:77:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:06:32 2025 by rpki-client