Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e26c143-1fa5-3e0b-b7fa-f7117d980c08.roa
File: 3e26c143-1fa5-3e0b-b7fa-f7117d980c08.roa (raw, json)
Hash identifier: tSHz84wUSBHYEL3VQnZrnkgUu8bMRgjkiSysrL/Q6+4=
Subject key identifier: 0F:35:43:CE:0D:19:AB:1E:EE:9B:3B:56:11:97:E3:5D:BF:55:40:CC
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849088192A3A2DE2C7F45927488
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e26c143-1fa5-3e0b-b7fa-f7117d980c08.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.68.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:92:a3:a2:de:2c:7f:45:92:74:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=d9d49e9d-b1f7-4653-a2c8-2352526a802c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ca:dd:51:1c:bc:5f:bd:6c:a3:97:54:33:01:
e7:89:80:32:89:df:6c:75:0e:11:7c:16:d7:e5:b0:
c4:39:40:99:f9:33:ff:cd:f3:9e:87:4b:0a:c9:e1:
7c:15:74:04:de:cf:97:01:3c:64:d2:c0:4c:d7:3d:
84:a1:ed:29:3c:d5:18:11:65:81:ae:fa:ce:a9:b6:
f2:7e:f2:e7:26:20:94:e1:97:cc:17:09:a0:78:eb:
4d:72:77:02:7c:8b:e0:85:26:bd:0d:2f:04:32:cc:
b7:cc:bc:69:b9:d2:4e:44:b7:f1:87:86:64:31:3d:
f8:ac:10:35:78:36:ed:7c:69:41:31:10:c6:f6:70:
df:88:31:e2:0d:3a:c5:cb:4d:fa:b1:2d:78:9a:9c:
f1:6a:8b:82:9b:60:b5:f6:68:d7:74:8a:54:e3:48:
52:cc:82:7a:f2:c9:1a:21:ef:f8:6c:f8:01:12:f4:
dd:16:60:b1:6f:be:2a:53:60:cf:5b:4c:ae:21:d2:
6d:db:c1:74:48:51:a8:0e:39:c4:9d:9f:e7:ef:d9:
a9:df:a3:12:91:dd:2b:8e:f0:2d:bd:eb:01:8b:d3:
ea:d2:5a:8d:80:aa:f3:ca:6d:2a:f9:6b:c8:8e:2e:
b2:2f:40:4a:e8:c9:85:46:40:58:ed:50:13:8b:79:
80:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:35:43:CE:0D:19:AB:1E:EE:9B:3B:56:11:97:E3:5D:BF:55:40:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e26c143-1fa5-3e0b-b7fa-f7117d980c08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.74.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:c1:85:0d:17:42:09:fe:0f:e9:10:f4:58:5a:70:7e:7e:e4:
1c:bf:b0:78:c9:94:14:0f:ba:a2:6d:42:3f:15:52:39:32:10:
a9:03:0a:30:f9:7a:4c:9d:e6:7c:67:aa:3b:b4:4d:34:98:18:
f9:2d:10:bf:57:3f:a8:43:14:65:3f:e3:b2:5c:b5:a3:37:ed:
ae:24:42:f3:95:e7:d0:d1:a1:e4:ce:e1:5a:a7:68:67:8c:b1:
6a:5a:7a:17:a4:d6:35:14:99:fe:13:16:fb:fc:bd:d4:be:e4:
1e:47:32:ed:19:2b:85:40:59:e0:51:9f:08:2a:ff:1c:f9:3a:
e8:4a:1a:85:15:d3:f8:70:f3:07:38:0f:54:dd:03:20:82:81:
d2:46:24:aa:a2:fa:2d:1a:40:f8:1d:de:35:f7:bf:d9:6d:e1:
26:4a:35:a4:30:af:15:88:7b:36:21:e4:e0:3d:77:af:51:cb:
49:7a:57:38:8f:84:78:d1:a1:18:fd:4e:62:7a:22:ea:94:d3:
7c:d4:c5:55:f3:26:05:6d:4f:64:41:a4:7b:b8:76:a6:4d:83:
16:cf:56:80:22:55:93:3d:e5:5a:92:3b:fd:93:9e:09:1e:14:
1b:c8:bc:48:92:a8:8c:aa:92:fe:67:39:c7:62:ac:04:4a:92:
18:e3:0a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:49:52 2025 by rpki-client