Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d73012e-d6ab-397f-9a31-92d416e3c1aa.roa
File: 5d73012e-d6ab-397f-9a31-92d416e3c1aa.roa (raw, json)
Hash identifier: azbbf6sTh7xANyzJ6LYnqjy7jUc2iNqOqBx7Vwgd/2E=
Subject key identifier: CA:1E:98:A2:AC:D8:B1:3B:54:9E:FD:25:8F:0C:26:CC:EC:E4:84:47
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490B4C068211095F3491CC9480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d73012e-d6ab-397f-9a31-92d416e3c1aa.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.68.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:06:82:11:09:5f:34:91:cc:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=197aa113-4f00-4b64-933e-08ebd0b841ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0a:4f:c9:ea:d7:c1:78:91:93:25:de:c1:16:
3a:66:5a:b8:0b:bb:6c:f7:84:32:e0:eb:2f:f1:03:
a4:25:3f:c3:64:df:9f:a6:a6:42:8f:ac:e4:3c:3b:
bb:8d:8e:96:20:c3:95:ff:49:da:4a:68:86:95:74:
cc:f5:dd:b2:d4:c2:9a:9e:50:e5:fd:a6:e6:7b:9e:
50:98:e8:9a:a5:1e:8f:cd:6f:18:30:70:ee:fa:d6:
9a:cc:19:02:a9:8b:97:16:94:13:67:04:5c:b8:55:
ba:ce:77:80:f9:9b:4e:32:cf:68:4e:70:41:29:c1:
04:cc:e3:79:e0:93:a4:ad:c6:9d:20:0a:a0:64:a3:
e9:26:b5:8e:8b:c4:86:d7:28:8a:5d:78:b9:2c:90:
fb:59:8d:43:e6:ba:39:6b:8c:2e:b7:76:3e:f3:f0:
e7:15:17:25:14:25:00:be:c1:8a:74:4a:40:c0:3a:
87:50:56:94:e5:1a:38:5b:28:6a:24:d3:37:3c:7f:
92:f5:74:ff:b4:02:99:b8:63:01:49:e0:fe:11:5b:
2a:68:11:26:95:c8:b1:25:22:ef:bb:9f:c0:f5:41:
6d:39:35:2b:16:94:96:02:2b:a8:25:e3:bc:ef:b2:
7c:1a:f5:2e:b5:ef:86:57:38:52:c7:4d:59:92:88:
72:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1E:98:A2:AC:D8:B1:3B:54:9E:FD:25:8F:0C:26:CC:EC:E4:84:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d73012e-d6ab-397f-9a31-92d416e3c1aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:cc:79:07:37:25:00:36:87:d4:bd:ef:95:75:0f:89:be:da:
5d:51:83:6e:61:f7:dd:65:49:62:a5:56:11:01:01:c3:af:81:
10:24:24:05:f6:6e:5b:a0:0b:60:9a:de:7a:17:55:0a:2c:a0:
20:ff:f5:4e:c7:dc:28:c8:1b:37:9c:e6:a1:23:ac:13:a5:02:
30:4d:e6:3b:12:9f:e1:ad:75:c6:aa:16:60:27:a0:e7:8b:18:
1c:00:7e:5f:3e:98:4e:28:45:fc:f0:80:4c:63:2e:ac:c2:9e:
8d:cd:ec:74:6c:96:83:ae:21:66:0c:fd:73:35:10:0c:4c:21:
57:1b:7c:68:9a:7e:2f:69:ea:1b:ad:c9:04:bb:53:0d:fd:4e:
09:e5:a9:b5:2b:bd:a5:4c:5b:81:94:24:5b:14:2d:37:90:c9:
99:7d:2d:7c:33:6c:40:c9:31:d5:a6:4f:ed:c7:43:c9:cd:85:
0f:71:8b:03:b5:16:81:ae:eb:87:bd:49:bd:08:ba:73:25:60:
8a:fe:8f:4b:50:c9:3d:ad:57:9b:09:74:91:b4:b1:46:a4:94:
6d:09:82:95:17:32:97:ca:cf:90:b6:43:e4:71:1e:ef:d8:c2:
b6:c1:b4:14:08:a7:04:5e:21:e9:f4:4d:13:2a:0c:0c:6a:c8:
80:d0:1b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:46:35 2025 by rpki-client