
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09e413b2-0a0c-3583-9188-0aeb8def3355.roa
File: 09e413b2-0a0c-3583-9188-0aeb8def3355.roa (raw, json)
Hash identifier: /XhVvLzhQeoJZNxoxmVUoMcZ6lh7Y6hYSd23jMYwSH0=
Subject key identifier: 85:25:56:55:15:D6:DF:F4:5C:18:B3:8D:9D:E7:7E:6E:82:51:D9:74
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858410096F9AC2C45A15551218580
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09e413b2-0a0c-3583-9188-0aeb8def3355.roa
Signing time: Wed 22 Feb 2023 12:00:00 +0000
ROA not before: Wed 22 Feb 2023 12:00:00 +0000
ROA not after: Fri 10 Sep 2027 04:00:00 +0000
asID: 13335
IP address blocks: 172.69.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:00:96:f9:ac:2c:45:a1:55:51:21:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 22 12:00:00 2023 GMT
Not After : Sep 10 04:00:00 2027 GMT
Subject: CN=14e744e7-29d3-41d0-9fc5-314431c0bec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e0:2a:bb:c1:49:fe:31:12:c2:88:14:1f:87:
e7:34:3a:34:45:56:0f:bc:4b:e7:84:e0:ee:d5:29:
b1:73:06:9d:7b:76:a6:f5:22:f8:23:60:c6:ef:72:
26:24:7e:ff:0a:63:a5:ae:00:ae:d0:4e:61:86:8c:
fa:5c:92:84:bb:b1:1c:9a:5a:d9:1e:18:63:6c:51:
4e:8e:c5:74:b4:58:8d:83:36:0e:a3:91:2f:a0:6e:
f5:00:60:2d:ff:bb:de:e3:76:87:2d:52:7b:29:38:
15:d1:a0:16:30:00:3f:6a:e4:3d:0f:bc:b2:46:92:
42:16:06:97:ef:29:1e:64:51:55:8b:b3:28:3f:f9:
ef:e2:86:1a:4a:f0:55:d0:66:f9:ae:47:a0:3d:cf:
78:ef:c1:b1:94:cf:59:0d:94:44:64:f0:fe:ba:20:
73:00:8c:40:82:28:4f:46:2e:ed:ed:00:53:4d:3a:
58:4d:4a:a8:be:94:fe:e7:51:9f:e2:f9:e1:9b:82:
3a:e7:46:73:c4:d7:6c:b3:a0:36:27:2f:15:be:53:
41:54:cc:61:1d:be:69:8e:17:bd:d4:2c:33:95:29:
f0:c2:89:6e:9e:bb:e7:a2:53:6f:1c:12:b6:3b:e7:
7f:c7:dd:2e:3d:50:0b:43:e4:ba:17:f1:0a:df:fc:
2d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:25:56:55:15:D6:DF:F4:5C:18:B3:8D:9D:E7:7E:6E:82:51:D9:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09e413b2-0a0c-3583-9188-0aeb8def3355.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:3a:92:28:32:db:f9:8e:4b:b7:59:04:73:7d:bd:94:d2:71:
95:e7:89:18:9f:7e:4c:bd:08:d7:56:38:cf:fe:fa:79:50:78:
81:5d:68:94:95:59:cf:65:79:c6:27:d6:77:22:ea:47:6c:9a:
cf:7c:41:b4:f3:56:d0:db:46:5d:ff:bd:41:3e:8c:5f:6e:0a:
31:b5:1e:78:c3:0e:9f:73:42:1a:29:b7:12:1d:42:26:9a:89:
e6:3c:80:d8:83:d5:7a:1a:ae:ce:db:f4:76:75:9d:c0:f4:18:
b0:ff:51:a2:ce:82:9c:02:42:5f:f9:63:43:be:20:5e:ad:68:
c8:63:3c:8d:52:9c:28:3c:0a:b2:88:53:33:36:82:29:67:1c:
23:87:9f:ca:c0:51:7d:54:70:d2:10:52:db:da:31:63:ce:d2:
59:ea:23:19:fa:15:5a:2f:bc:29:d4:ee:95:96:28:b7:4d:14:
58:a7:26:6f:96:88:a2:81:d9:89:63:bc:6b:f4:0e:a1:92:18:
50:1f:9c:32:c1:77:d4:04:d6:61:f7:9c:63:cc:4f:77:0e:c3:
b5:14:f8:68:d5:d3:2b:84:b3:37:a7:21:bd:8f:cb:f7:1d:ad:
c8:c9:70:c5:bf:c8:23:92:97:9e:b1:32:f4:af:a7:fb:cc:3e:
ac:b7:89:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:51:28 2025 by rpki-client