Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a6ef38b-7055-3d68-88d4-dd134de9d7c2.roa
File: 2a6ef38b-7055-3d68-88d4-dd134de9d7c2.roa (raw, json)
Hash identifier: pO9wLcCzGZ0QdFOGV/zYvAYKqj4EH9N0Rtuj4piomL0=
Subject key identifier: 7C:BB:0C:8D:8C:70:A8:AA:B8:09:3A:AC:74:62:37:53:F6:57:EB:C0
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490F7BF7638BA7EABB62D04200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a6ef38b-7055-3d68-88d4-dd134de9d7c2.roa
Signing time: Mon 03 Mar 2025 02:00:39 +0000
ROA not before: Mon 03 Mar 2025 02:00:39 +0000
ROA not after: Sun 01 Jun 2025 01:00:39 +0000
asID: 13335
IP address blocks: 172.69.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0f:7b:f7:63:8b:a7:ea:bb:62:d0:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 02:00:39 2025 GMT
Not After : Jun 1 01:00:39 2025 GMT
Subject: CN=33d17fc3-7433-42da-814c-bcd907322604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b7:5b:5f:0f:39:92:70:63:d5:e4:8e:2f:e3:
60:66:14:fa:30:bd:8a:99:57:c4:fe:c8:5e:10:e0:
78:7c:55:17:d6:dc:8f:57:f8:8c:73:59:81:cd:45:
6b:71:a1:51:57:30:e5:1b:2b:d8:f9:8d:d2:9a:1d:
fc:a3:91:72:20:c4:b2:29:ef:d5:3e:e3:08:e4:59:
45:c3:c2:ce:81:30:cc:23:96:c6:92:7f:ad:eb:e1:
c3:f6:8d:50:6f:62:61:dd:41:60:48:97:cc:ac:19:
52:14:53:2a:e1:8b:88:d8:5e:ff:bd:d4:51:51:81:
01:a8:01:ad:b2:1c:2e:70:8a:5e:d4:22:f8:0f:5a:
9f:4d:ea:7d:4f:dc:ce:02:fa:c7:4c:cc:49:38:fb:
bf:e4:99:f4:03:00:28:0d:53:df:e8:91:2e:3e:af:
72:8a:c2:ac:26:d2:b8:9a:b1:2c:5b:4e:ac:84:15:
2e:cf:30:24:29:92:7e:70:7f:29:5d:fb:a2:8f:6d:
23:2b:52:a8:72:68:eb:c2:b1:b8:8c:c3:b7:2b:de:
e7:01:da:4b:ea:53:aa:c3:b7:eb:e6:78:c5:45:01:
96:b7:e3:85:90:d5:24:df:56:ca:5e:2b:1d:cf:16:
cf:6c:bc:c6:ab:ff:37:03:72:9d:f8:fd:1c:55:50:
f6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BB:0C:8D:8C:70:A8:AA:B8:09:3A:AC:74:62:37:53:F6:57:EB:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a6ef38b-7055-3d68-88d4-dd134de9d7c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:a9:d4:4d:dd:d6:72:09:49:75:96:e7:ab:a7:bd:61:7f:c1:
e8:41:c8:0b:5a:b2:e3:3c:8d:7b:a9:94:17:fc:43:0d:e8:ef:
98:25:a2:0f:9b:67:19:8b:ad:1c:b5:0d:5a:d0:73:d0:dc:39:
4b:db:32:2f:a1:8f:6e:ef:06:ea:44:71:96:33:bb:78:55:a6:
2d:26:6a:f3:1f:9d:e1:1a:d2:2c:36:42:05:62:d0:02:8d:31:
47:f5:d9:00:c2:63:f6:cb:b9:45:7e:02:52:42:f3:c0:44:36:
d3:bd:06:7c:63:6d:be:72:a8:6f:5c:0f:dd:c3:3f:58:1e:a1:
a6:83:59:89:16:2c:aa:d8:cb:c5:dd:83:ea:b1:81:d2:66:38:
26:e0:bc:fc:b4:03:b2:00:37:6b:d0:0e:4d:a9:30:a3:8d:6f:
f3:cd:1c:4e:0e:b9:f7:d0:89:f3:14:5d:69:ac:83:b5:d3:86:
5e:82:14:c3:b9:d7:05:97:48:aa:f0:0f:c2:31:20:d4:e8:49:
e6:2e:e7:a4:69:6a:bc:5d:6b:b1:8e:3f:65:1a:b1:b6:79:6b:
7d:05:a7:85:60:f0:8d:f5:3c:5a:53:10:be:e5:ae:a1:4e:1f:
a7:13:0d:87:f9:3e:cb:63:3b:ae:b5:82:82:75:28:36:1f:62:
3d:fa:9c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:12:01 2025 by rpki-client