Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/144ffcfe-f508-3c6c-a0af-51b2cdf9406e.roa
File: 144ffcfe-f508-3c6c-a0af-51b2cdf9406e.roa (raw, json)
Hash identifier: e0MxcYmMgN+LixCayykNP9OFfVu1rx6NITSyciqGkxg=
Subject key identifier: 4A:5C:A0:9F:DC:BB:98:D3:59:AC:43:AC:B3:97:48:6C:D6:15:E3:51
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584908818ECE738B890840C73280
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/144ffcfe-f508-3c6c-a0af-51b2cdf9406e.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.68.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:8e:ce:73:8b:89:08:40:c7:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=54e90f1f-c6c8-49e2-a8b9-432d2b486a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2f:8a:86:03:c8:bd:c1:ef:81:48:3c:9a:d1:
f0:7f:60:6e:2e:51:0c:34:32:ab:1a:90:5a:49:fe:
83:a2:d6:85:41:99:55:3b:7b:7f:35:53:14:03:ec:
d1:96:e7:5f:bc:82:ab:54:72:f8:90:b3:f1:c5:48:
c1:60:8d:36:c5:e4:57:8b:26:9d:2d:17:c7:5a:fc:
f5:f7:2a:9c:e9:ee:a3:99:fa:32:95:b1:fb:0a:78:
5b:93:59:b9:aa:74:f7:91:cb:77:05:93:f1:95:d5:
42:80:f1:7f:47:92:de:c6:93:1e:cc:5c:c5:78:84:
89:c4:fb:47:b7:b2:01:84:43:b5:f7:b3:ca:5d:5b:
dd:a9:aa:0f:4b:47:27:7d:9b:fc:5e:a1:3d:ce:2f:
8f:e5:34:f3:8c:02:af:c9:7e:df:a2:a7:11:26:69:
ca:d3:23:c5:1e:ae:9f:18:9d:d4:48:fa:82:0c:f1:
f2:69:a1:ff:64:bc:dc:94:f8:1e:0e:9a:ea:09:66:
46:75:72:aa:fe:32:47:84:bb:30:71:a5:d5:63:28:
08:11:3e:38:a1:06:2d:67:ab:aa:a8:96:b5:6f:59:
e2:07:47:3f:33:c4:f5:b7:71:0f:9c:a6:58:ce:09:
f0:af:94:36:f0:0f:07:6b:48:c5:8e:7c:a2:8d:d1:
14:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5C:A0:9F:DC:BB:98:D3:59:AC:43:AC:B3:97:48:6C:D6:15:E3:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/144ffcfe-f508-3c6c-a0af-51b2cdf9406e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:39:7b:ef:f0:91:f3:a3:3b:8e:60:4a:10:ac:d4:f3:5c:21:
0f:b3:d4:03:87:aa:ed:50:41:f4:ff:94:30:07:cb:9e:85:f4:
41:33:72:b2:d5:c9:f5:8c:86:21:46:b7:93:ba:10:f5:af:bb:
9e:ea:74:8b:ad:07:0a:7b:bb:85:c6:72:2c:4f:0f:4f:a4:9b:
f9:1b:a9:90:24:95:c1:bd:cd:63:ca:27:f4:d1:42:aa:eb:d1:
6f:b3:2e:17:02:61:1d:46:f7:ec:0c:8f:18:01:a5:40:2b:cc:
62:eb:57:0f:57:6f:6f:f1:07:3e:03:45:45:a5:f4:e0:3e:30:
d5:45:e4:53:08:3b:b1:45:cd:da:f1:96:7a:d2:f0:8f:de:cf:
62:69:19:1b:1e:12:4d:32:7e:af:b1:57:1c:32:95:00:84:3c:
16:db:6a:e2:d7:e7:fc:00:a1:85:d3:33:f4:da:c9:69:5e:b4:
d8:4b:df:05:da:03:63:b9:ce:3d:ec:c2:25:bd:d5:99:c0:d8:
3d:06:9c:0b:39:b7:d4:3e:a2:6f:6b:a7:fb:8b:81:9f:04:ca:
83:6c:17:9d:46:27:82:c7:a8:ee:06:40:ea:59:f1:72:b8:c2:
dd:4c:40:92:05:88:2b:02:81:13:6c:0d:0c:e3:86:0c:5f:62:
fa:5c:f8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:41 2025 by rpki-client