Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d807cbb-a42b-3c3d-bd5d-88a0ec4c81a7.roa
File: 0d807cbb-a42b-3c3d-bd5d-88a0ec4c81a7.roa (raw, json)
Hash identifier: JNCFVKNIatico+1cppteDrOKPdNatBxAk84BYBxlIV8=
Subject key identifier: BC:62:1E:64:C0:80:AB:B2:E0:C8:A7:A6:CD:89:73:6E:EB:B8:4F:A1
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584909E69AF6420BE1CA3BD6FF00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d807cbb-a42b-3c3d-bd5d-88a0ec4c81a7.roa
Signing time: Sat 01 Mar 2025 02:00:39 +0000
ROA not before: Sat 01 Mar 2025 02:00:39 +0000
ROA not after: Fri 30 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 172.68.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:e6:9a:f6:42:0b:e1:ca:3b:d6:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 1 02:00:39 2025 GMT
Not After : May 30 01:00:39 2025 GMT
Subject: CN=13f2e12c-2756-4ff3-8c93-93b1431c44f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5f:27:3d:f6:f3:ca:ce:67:a3:4d:4e:3e:79:
29:85:29:61:6c:8e:05:04:f8:6a:36:e1:0d:2d:5a:
ab:d6:26:9f:66:be:40:f8:ac:72:11:37:be:42:51:
5c:a1:c4:74:83:23:cf:ff:75:c6:98:b3:cd:2b:83:
34:d2:a6:ff:bb:2a:ea:e8:1e:6b:70:bf:6c:6c:6d:
dc:a6:f2:08:24:68:31:12:12:80:08:85:d9:81:76:
59:c4:21:f4:b7:b3:92:92:53:0f:b6:89:19:6c:c3:
c9:4d:36:d2:9b:8d:ad:a4:32:a3:39:fc:88:e6:60:
80:a1:c5:22:53:3c:73:02:a4:f7:86:a3:d1:7e:61:
46:2b:d4:f4:6d:a7:91:65:a6:3d:2c:3d:0c:5b:7d:
da:f6:d0:3c:42:71:68:97:27:38:4a:4e:f9:be:64:
53:b3:a6:cb:e8:e4:7d:10:2a:07:ac:91:67:8a:33:
63:fb:a4:fc:d4:1d:3a:32:4c:3d:5d:90:c4:cd:b0:
6d:23:e1:da:17:b0:88:74:0b:22:86:d6:a5:33:32:
fa:10:42:38:46:d5:16:30:54:03:68:ce:e0:81:07:
0b:a9:b5:00:22:15:60:ea:15:53:92:f2:47:64:55:
45:f5:45:2d:c2:ba:97:f1:22:7e:c7:96:1a:85:c3:
e1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:62:1E:64:C0:80:AB:B2:E0:C8:A7:A6:CD:89:73:6E:EB:B8:4F:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d807cbb-a42b-3c3d-bd5d-88a0ec4c81a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:2c:84:58:1d:1f:84:63:18:05:5b:49:10:c9:95:f2:be:89:
98:cd:6d:bc:ff:c4:0b:f5:f8:0f:96:86:c4:d7:ee:f1:e5:a3:
30:95:95:a2:d5:ac:37:63:ec:09:0f:23:d6:fe:6e:19:cb:6f:
1a:98:25:8c:81:35:18:f9:68:e2:11:58:0f:e1:43:e4:81:33:
34:de:f0:47:36:c4:9b:2b:da:8e:ac:0b:c5:e1:10:e7:90:0b:
34:f5:5e:29:2c:da:e0:99:ea:d9:f9:66:88:0e:60:03:db:b7:
73:59:0b:b6:a5:e1:86:2b:92:a9:4b:b6:53:3c:8c:aa:57:22:
b1:94:be:13:55:83:74:36:52:3c:a0:f6:f9:b0:50:f7:e0:1b:
38:10:4c:d4:9f:85:73:23:1e:c5:ca:8a:9e:66:20:f5:de:74:
d8:45:c2:f0:59:13:78:4a:c4:93:2a:26:45:7d:8b:ce:4b:24:
1f:90:a9:7e:44:eb:bc:40:f0:b1:2b:3c:83:24:cb:48:e5:55:
e5:36:45:1b:bb:19:d1:ad:12:a8:bb:0e:f5:71:f6:9b:52:03:
28:0c:3c:aa:99:79:4f:f5:9c:d6:07:ed:10:3b:02:32:b6:d5:
3a:ac:96:9a:8e:6b:ce:39:8b:de:41:40:97:04:f5:24:93:1f:
74:52:fe:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:36:32 2025 by rpki-client