Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5e5cf601-dd4a-3483-b580-0ba6786cf229.roa
File: 5e5cf601-dd4a-3483-b580-0ba6786cf229.roa (raw, json)
Hash identifier: t08rqNBigZvjRfeTnO2es1IhvknW8RfWyWNEmnqAcSY=
Subject key identifier: 42:EF:87:A9:3A:AC:B7:E7:C9:0A:42:7C:3A:AF:AF:E5:4C:A0:97:BE
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849088193F33EDA882AFDC9F580
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5e5cf601-dd4a-3483-b580-0ba6786cf229.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.68.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:93:f3:3e:da:88:2a:fd:c9:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=8495ae8c-f8f8-461b-9289-5389e392082f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:06:0f:d4:b4:30:ce:7f:55:9b:90:63:ae:b6:
a0:a1:c0:29:1e:ac:8b:7c:70:e5:cd:f0:3f:eb:f8:
83:57:99:a1:24:df:4d:2e:0b:f5:08:fd:43:e9:be:
e2:e6:9c:26:5e:9f:76:c4:2d:b8:fc:5b:61:f2:c7:
48:9c:33:64:5b:21:66:36:49:f7:e8:3b:91:a3:1b:
15:1c:50:e0:29:08:29:51:9d:83:62:03:fc:be:8d:
65:0e:1e:90:af:25:e6:59:10:10:d4:dd:35:f2:84:
98:57:01:07:a8:33:85:13:ac:1b:27:5d:eb:50:2e:
f6:39:d6:18:3b:18:d2:58:d3:80:d9:e4:9b:c9:8d:
81:f6:20:3a:83:6d:94:bb:1b:e1:f4:38:2b:51:15:
1e:31:ed:73:98:9a:5f:f4:fb:8a:4a:c4:d3:b2:c8:
d4:10:b7:12:7a:9d:60:a2:7f:ad:69:19:39:e7:ce:
ce:5c:d5:92:9b:9c:4d:04:89:ea:1e:2d:d6:39:74:
ff:b5:88:0a:55:e0:d4:7e:8a:de:fd:5b:46:7e:1a:
08:7a:8f:a8:4e:4a:db:67:2b:34:45:2b:cf:b3:57:
ed:a9:7d:4f:21:72:b8:ad:b2:9e:36:b5:f7:eb:d5:
d5:66:ac:64:85:13:03:aa:d7:1d:d8:3f:a7:c5:e2:
a8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EF:87:A9:3A:AC:B7:E7:C9:0A:42:7C:3A:AF:AF:E5:4C:A0:97:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5e5cf601-dd4a-3483-b580-0ba6786cf229.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:c3:55:36:80:43:18:26:08:36:11:07:7d:bd:27:13:6b:d7:
89:8e:a2:cb:60:a3:9c:12:04:e6:7a:bc:b6:ce:65:f0:d1:ed:
e2:d0:0a:3c:d8:0f:6a:7c:7d:a3:a1:09:2e:60:1f:f2:2b:47:
8d:b1:9e:43:95:a1:59:ad:a0:17:23:92:41:d2:b9:2b:aa:2f:
4a:35:fd:1f:d2:9f:ee:e3:a2:fd:76:b1:40:8b:8a:f9:ef:1f:
b6:4b:9e:ee:92:69:eb:f1:a6:a1:48:63:58:8e:ae:9d:c3:72:
b2:96:7c:ae:7a:99:fe:08:de:aa:fe:b5:6b:fa:3d:80:2c:9a:
9a:6c:ef:6c:33:9c:9a:d5:13:13:e2:fe:ae:3f:e1:0c:17:f6:
4a:0d:c7:30:39:96:64:47:33:27:71:bd:e0:09:c0:b0:1c:74:
74:7b:d9:1c:20:1f:2e:3f:c0:eb:eb:b8:39:c6:d4:86:df:60:
1d:bf:2c:5e:7b:f2:7b:ee:bb:f4:b1:ad:15:7d:e7:1e:90:f5:
7a:45:32:d1:78:3d:cc:2a:35:0a:b3:7d:a4:5b:d6:fd:1e:bb:
94:05:8c:61:b8:04:5b:99:70:ee:a7:ec:92:82:ad:f6:f7:ce:
a8:69:9b:35:5a:b4:30:e0:91:60:b4:01:fb:6a:43:0c:1a:a5:
86:ea:d9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:28:01 2025 by rpki-client