Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3dfffd41-dd35-35ee-b680-cdf7df938bec.roa
File: 3dfffd41-dd35-35ee-b680-cdf7df938bec.roa (raw, json)
Hash identifier: d02EexnlmqmgstpmYwKs4onSlIwyxd/m3KZ8FiisVs0=
Subject key identifier: 55:4F:1B:58:45:1F:2F:33:90:A8:88:3D:54:84:03:92:CB:86:DE:0E
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490881941A3FF25311E2B9FBC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3dfffd41-dd35-35ee-b680-cdf7df938bec.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.68.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:94:1a:3f:f2:53:11:e2:b9:fb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=129135dd-3bae-40d6-84e3-25df07387aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a6:51:cd:9a:bf:7b:46:aa:38:5b:53:09:e4:
56:be:9f:ab:6e:9d:c5:af:03:c4:50:03:f1:36:9f:
f3:ed:89:2d:b3:de:d2:c5:89:ab:1e:c4:f2:dd:9a:
45:cc:04:00:74:c8:db:e5:d3:6a:1d:bf:35:35:a6:
88:18:ce:f5:e9:c3:d7:26:2a:c8:dd:e4:61:e4:3a:
10:87:56:5b:a3:62:2a:5e:29:28:12:58:ca:9e:8a:
62:5b:35:4a:d1:eb:ac:69:71:c0:b3:f7:f9:4c:bf:
bb:34:56:2a:cb:b6:79:3d:99:59:41:0b:20:ff:95:
0b:82:c0:44:06:52:e2:77:89:9c:f6:00:8f:33:ec:
1a:e1:de:c8:c0:73:2e:4a:f6:09:19:a6:ec:ff:5f:
77:60:4a:9b:83:b7:6f:4f:69:eb:12:4c:5b:99:67:
73:96:3e:4b:6f:8e:0c:c3:e1:56:d4:75:df:b3:2c:
21:48:8c:45:7c:c6:3c:1a:d9:d4:03:17:8b:92:22:
3e:96:77:c1:02:75:31:5e:c7:dc:6f:f6:36:18:eb:
37:26:d2:8a:c3:1c:32:63:22:9e:da:74:7f:db:a5:
0f:10:5a:d8:44:ef:2b:47:f8:86:7f:b7:56:3d:d7:
ea:9a:16:bb:0c:a4:b9:09:f1:48:dc:2d:24:10:2f:
19:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4F:1B:58:45:1F:2F:33:90:A8:88:3D:54:84:03:92:CB:86:DE:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3dfffd41-dd35-35ee-b680-cdf7df938bec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:d5:d8:b1:46:31:da:dc:06:af:ec:50:ff:50:dc:84:b2:95:
15:e8:47:21:f3:cf:bf:ce:ce:c1:e6:15:5e:31:bd:df:a1:c5:
d8:3d:42:73:e5:03:c9:18:04:90:02:74:43:04:16:ea:a7:f1:
07:ba:31:a1:03:ce:dc:5d:65:62:26:eb:ad:7b:34:ca:57:5a:
3d:b2:81:2c:47:ad:7e:d4:61:87:8c:dc:a9:be:2f:07:7a:18:
2d:11:99:f3:e0:5c:14:71:14:3f:ca:cf:de:7f:05:80:14:73:
19:09:1b:03:2b:8c:96:b8:09:07:d8:dc:04:1f:9a:44:5e:b8:
a5:cb:3b:c6:76:e5:1d:20:a5:26:4b:d6:5e:df:99:f3:48:3c:
bb:b4:57:8c:e5:30:67:06:d6:e1:40:8f:10:dd:5e:49:50:f4:
25:05:3f:99:37:43:88:09:f9:24:09:74:48:2a:13:8b:86:9e:
28:4e:d8:fe:4c:30:ae:48:1e:89:bc:db:63:f2:1b:2d:66:c6:
81:66:42:2d:d7:3c:57:5b:a6:03:d7:f1:3d:9b:d6:41:93:55:
7c:60:90:03:58:05:a9:3c:84:5e:44:47:a5:59:ca:17:2d:f9:
e3:5e:87:3c:88:5f:05:3d:55:54:53:7f:a9:08:e2:37:01:e7:
17:06:e3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:49:53 2025 by rpki-client