Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0abf13f8-cec7-3137-b92e-822c18e6fe3c.roa
File: 0abf13f8-cec7-3137-b92e-822c18e6fe3c.roa (raw, json)
Hash identifier: Qn/c1TogSpLjsQfWs6BoizVfHJ8ZL5Vvys6CiNdw/VQ=
Subject key identifier: D0:02:AD:59:A9:35:BD:5A:CB:0D:60:BC:51:2B:61:9A:16:08:41:4D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071BFD7FE51BD8324B6C0F80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0abf13f8-cec7-3137-b92e-822c18e6fe3c.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 172.69.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:fd:7f:e5:1b:d8:32:4b:6c:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=a94829e5-e6a2-4ab4-a157-718ba02a8d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bb:2e:a8:e1:fc:02:ed:2f:5e:45:b0:7e:94:
b6:10:9b:7c:60:f5:b9:46:5a:10:99:89:6a:41:47:
9a:41:64:44:4c:9b:b3:0d:6d:d1:43:ea:b0:82:ad:
a4:79:f1:07:91:d6:2c:13:2f:d1:cb:9e:d5:10:0d:
26:2d:78:4a:4d:47:2b:84:2b:68:08:c6:ff:57:86:
89:77:36:a1:2f:32:b9:0c:f0:b7:dd:82:1f:45:e3:
5f:da:7a:0f:2d:e8:3e:88:ad:f8:20:83:f3:5f:eb:
aa:56:c1:85:6f:b3:49:68:ef:cc:85:04:ab:8f:25:
e2:9e:ff:f3:5c:e9:a9:40:b9:40:97:89:0a:60:ee:
0e:ae:82:8b:26:6f:1f:c0:32:ca:d3:fc:00:43:d0:
97:73:bb:9e:89:9d:32:60:8a:00:6a:46:f3:27:94:
11:37:d6:69:f4:f7:e8:66:52:5b:4b:00:b3:fc:e1:
93:de:9c:80:ee:81:50:34:8d:15:93:42:51:0f:4f:
fa:00:bc:4c:cf:44:f7:0b:70:f5:b3:c2:49:78:54:
65:35:c8:a3:2b:9a:38:c4:a6:19:01:bd:e7:7c:74:
4f:0c:0d:ee:71:d8:25:2d:31:b9:69:e6:47:11:04:
a3:70:e5:e8:1e:26:eb:00:62:5e:19:36:90:a3:42:
95:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:02:AD:59:A9:35:BD:5A:CB:0D:60:BC:51:2B:61:9A:16:08:41:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0abf13f8-cec7-3137-b92e-822c18e6fe3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:98:24:f2:13:ab:4e:4a:d2:ec:6f:ca:f1:9a:a2:e2:c0:de:
05:67:f9:3a:ab:1c:91:34:65:35:ef:fc:88:f4:84:64:2c:71:
63:46:51:4e:81:87:2f:64:40:9a:87:b8:5c:06:d6:7b:30:04:
b8:4c:26:77:3a:28:08:a3:4c:fc:c2:1a:fd:a3:5a:67:ef:0c:
e5:8d:62:cd:27:7a:3c:d5:b5:10:b5:63:9a:0a:36:d6:9b:e1:
7f:33:c6:71:db:a1:ed:32:dc:bc:e9:ed:fa:ef:3a:40:29:b8:
53:2a:de:ad:d7:80:c1:65:82:b5:14:4e:22:6a:9c:61:0f:03:
ff:02:4d:d4:31:9e:62:cc:aa:18:5c:af:11:df:78:41:9d:0c:
09:df:de:f4:ba:20:d1:d2:45:02:33:e2:5e:9b:e5:d0:30:4e:
a2:06:4e:8c:85:45:1f:77:4e:52:e1:20:6c:55:c9:0c:62:19:
be:8e:b1:44:46:3e:f0:c6:d5:16:a9:14:f5:b7:e6:d4:d1:60:
7b:8d:ce:a1:87:b0:41:28:08:97:9e:53:fc:8c:40:6e:1d:e5:
62:e7:3c:53:91:46:bc:8e:f7:e4:2b:18:4c:30:23:b6:a7:43:
18:da:5f:4f:ef:56:a6:e4:99:d3:f5:df:65:6c:a9:00:d5:ab:
49:55:47:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:59:43 2025 by rpki-client