Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/6d25a8ab-f7d1-351f-8e2e-bd5c6086fe0b.roa
File: 6d25a8ab-f7d1-351f-8e2e-bd5c6086fe0b.roa (raw, json)
Hash identifier: /4BDJgb+cI/ZtGIqonxo6G6TZn+IZFPV3i7ZXPYXq7U=
Subject key identifier: A6:97:DD:70:84:4A:30:AC:9C:06:83:BC:9F:65:D4:6C:CE:16:BF:7A
Certificate issuer: /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12
Certificate serial: 010D0C9F4328584832F02D7B413A9F493CB17E80
Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/6d25a8ab-f7d1-351f-8e2e-bd5c6086fe0b.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 206092
IP address blocks: 172.98.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:2d:7b:41:3a:9f:49:3c:b1:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=bf46fb0e-3b2f-4c05-9e3a-3af01fd57676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:40:62:a9:ef:ec:9a:ec:f0:7f:5b:6d:2a:75:
a1:14:aa:12:ff:ea:47:2d:91:f5:26:d6:72:18:ea:
73:0e:7d:d4:a0:20:6a:87:c3:a4:be:90:b4:95:45:
36:7b:d4:8f:89:23:33:cf:19:d7:f6:09:61:19:d2:
6b:80:ac:f7:98:99:90:b2:fb:84:6b:d8:ed:30:cc:
76:3e:72:92:05:f3:08:53:e7:0a:f2:bf:a4:36:b1:
e1:96:84:b3:17:44:d5:1a:fb:a1:20:33:74:ae:a8:
9c:03:93:05:20:2e:5b:fb:c7:c1:95:5a:29:cc:02:
e4:cc:c7:d9:d0:6b:44:6a:47:d7:23:dd:b0:e2:da:
64:37:25:87:75:93:b9:14:54:7c:af:79:76:3f:1d:
0e:73:18:6b:58:2c:9f:28:58:bf:fd:54:b1:bb:12:
35:b7:d5:ca:8d:07:eb:41:64:0d:b0:85:bb:c8:9d:
a1:22:e1:89:77:7d:4e:94:62:19:a5:6d:b9:84:6a:
2e:81:c4:a5:05:b4:f4:88:d5:d6:28:d0:31:6e:2d:
67:38:83:6e:64:d8:d2:ee:c6:26:20:27:ff:6b:be:
a0:c9:99:59:81:e2:f7:5f:1e:c9:fe:c2:f5:4e:88:
83:38:2e:86:2b:64:bc:55:f5:7d:9f:8b:b5:10:69:
4d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:97:DD:70:84:4A:30:AC:9C:06:83:BC:9F:65:D4:6C:CE:16:BF:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/6d25a8ab-f7d1-351f-8e2e-bd5c6086fe0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl
X509v3 Authority Key Identifier:
keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:51:e3:4c:9c:19:d2:9b:5d:0d:25:04:2c:8c:74:29:a6:26:
52:21:f8:c0:6b:af:b0:ab:9d:0e:2e:fd:cf:78:5c:96:87:ce:
9c:5a:f1:b2:cb:df:33:89:86:c3:5c:71:3b:97:fc:bf:3d:33:
a5:14:cd:31:e8:14:e5:2d:4e:02:c0:fd:35:6c:0b:58:46:bb:
8d:80:aa:6e:ad:24:b2:de:1c:fb:0b:4f:43:cc:5b:0f:3e:91:
bf:17:80:e1:af:1b:26:11:2a:f8:d4:f4:21:5f:2c:a3:86:f8:
fe:c4:e6:fa:ac:fe:b6:35:e9:cc:73:ab:98:06:57:c0:42:d5:
cf:86:c8:95:ff:71:ec:5d:fe:c0:fd:33:3e:12:95:77:db:ea:
26:86:2f:81:90:98:2f:22:70:56:d5:bd:f1:66:08:41:2f:ef:
04:ae:35:0a:5d:d6:6a:7b:e0:a2:6d:90:62:99:a0:cd:fc:ea:
6a:ce:5d:d7:15:6e:51:eb:30:84:03:75:e0:6e:11:f1:0e:a8:
3c:93:24:41:00:6e:15:bd:b0:80:0e:e0:90:43:5e:1e:b9:55:
84:d3:ee:f2:d1:09:c1:1e:b6:ba:06:8d:e2:98:4b:46:69:06:
9d:e4:e1:40:ae:22:71:f7:03:bd:49:40:2b:b8:8f:03:45:2e:
c6:37:27:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:33:38 2025 by rpki-client