Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/352fc5c3-2a25-3c5c-929c-3cd926f99080.roa
File: 352fc5c3-2a25-3c5c-929c-3cd926f99080.roa (raw, json)
Hash identifier: 0yXMce3XLgfyNkNuRKBdPBpX+vT0y5EI+WnKQEmng10=
Subject key identifier: 88:34:1F:5F:40:6A:E7:26:71:C8:BC:CE:FF:3D:A0:55:7A:34:5C:07
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490B4C11A131A55DC082853600
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/352fc5c3-2a25-3c5c-929c-3cd926f99080.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.69.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:11:a1:31:a5:5d:c0:82:85:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=bf862a7f-f961-4773-a357-64f236d2b542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:12:69:36:ab:6d:b0:d2:d5:a6:db:44:34:ec:
e7:e6:b3:a9:a3:ad:62:8d:2d:93:13:f0:c0:4f:e7:
3a:bc:47:9c:e6:3e:cd:0a:a5:3b:92:d2:ad:71:f9:
1c:fd:6f:3f:b4:20:5a:fc:58:db:7e:b9:38:04:f7:
59:2d:83:2b:c8:a5:d1:6b:4f:71:03:de:30:cf:46:
61:fa:d9:a8:88:35:d1:0d:41:a7:e1:a4:da:06:8f:
92:f8:de:88:93:a1:8b:11:74:60:75:5d:c8:58:70:
8b:5d:50:74:21:49:f6:2e:4d:58:62:cd:96:b9:1c:
18:6c:fb:f3:a9:d0:73:5d:88:df:f8:8f:aa:09:03:
25:a5:62:6b:cd:34:cf:59:44:99:c7:7a:0d:33:15:
8d:d6:d2:e3:1a:87:13:c0:e3:8c:8b:a1:95:a6:14:
c2:1c:92:13:0c:74:86:30:d8:30:0c:1d:d5:5c:d9:
00:2e:44:7f:50:85:ae:55:bf:cd:63:42:bd:47:c8:
88:99:37:bb:60:b1:28:06:f4:0e:a8:12:b7:55:cd:
65:ef:e5:9d:2d:eb:ce:ca:2e:ab:e4:ac:58:fe:d3:
26:8f:2d:03:14:44:87:83:73:f8:76:c6:61:b4:d5:
ac:fd:08:bc:26:c2:21:0c:61:cd:65:7e:f1:2f:2f:
f7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:34:1F:5F:40:6A:E7:26:71:C8:BC:CE:FF:3D:A0:55:7A:34:5C:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/352fc5c3-2a25-3c5c-929c-3cd926f99080.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:92:0e:8b:67:2e:2b:8e:99:c9:e9:8c:86:70:7f:ec:7f:e2:
bf:80:bc:b2:f5:c9:b1:d1:3c:2b:a0:c0:5d:5d:98:26:89:9d:
df:e7:07:36:35:20:c9:cf:23:e1:f0:c5:63:20:1c:2f:d5:fa:
8a:42:b8:af:21:5f:87:30:71:58:20:ea:4f:ce:8e:a8:79:18:
a0:df:c7:9d:50:09:84:69:fa:2b:7f:71:91:e2:48:40:4b:87:
21:87:31:62:67:5e:ee:97:de:7c:47:a0:77:2c:1a:1c:ba:78:
98:93:af:a2:a9:2a:9d:c2:3b:5b:b1:1a:28:cb:9d:55:82:75:
da:9c:52:9a:f9:cc:93:ee:45:31:46:0e:1c:34:8e:ce:c3:28:
eb:80:6e:0e:32:fd:45:ce:1b:ca:30:ef:33:6a:ec:94:5f:ef:
ae:42:4d:e2:a1:1e:d0:4c:53:5f:b2:f0:72:3a:df:30:10:bd:
6a:dd:bd:dc:1d:78:78:bd:eb:74:c4:81:5c:50:1f:8b:db:7a:
44:89:e7:e3:c3:32:c4:25:19:17:37:20:ca:65:03:7c:88:0d:
74:48:79:c1:12:ae:f1:80:d6:ae:2d:27:bf:65:23:1b:35:1b:
fd:72:c0:66:3e:74:5d:eb:67:0e:78:c2:2c:e9:e3:b4:aa:3c:
3b:7d:54:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:38:13 2025 by rpki-client