Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7115ad1f-29c3-3885-ac49-5938bbf8ed3c.roa
File: 7115ad1f-29c3-3885-ac49-5938bbf8ed3c.roa (raw, json)
Hash identifier: e+pmY/21sWRfGVVFbzJ8jn4wW9yY5wDwSOXaBefDhrs=
Subject key identifier: 34:E3:73:AE:CE:98:13:58:1A:E1:BC:BD:45:D1:81:EC:27:32:F6:9D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849088190D17A42CD991946BB80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7115ad1f-29c3-3885-ac49-5938bbf8ed3c.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.68.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:90:d1:7a:42:cd:99:19:46:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=216e1202-6903-4528-a9d1-7be077d57439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:36:07:a4:c5:04:a1:81:b7:23:5a:95:c7:5e:
b1:0d:4f:f4:3e:55:48:22:c2:8e:c3:34:9a:67:a3:
60:a8:1a:d5:98:ce:1c:e2:c1:1a:6b:4e:62:e5:a0:
44:cf:3f:45:19:50:19:58:a0:82:6f:77:8e:82:49:
fc:3d:f7:1b:ff:75:bd:0a:39:64:d7:9c:29:ba:f9:
c7:4e:34:ee:66:af:88:fe:8f:04:d1:ad:73:a5:4d:
a2:bb:d3:1d:1a:4c:d0:66:05:2d:11:74:45:69:34:
f3:c9:f8:df:15:31:b8:c0:04:49:ff:c3:34:c3:11:
32:24:77:54:f1:9c:23:67:80:6e:61:8c:8b:ab:e7:
f3:24:e2:01:4e:1b:ea:62:ff:65:6a:e5:df:0c:c8:
10:55:63:e3:f5:15:ee:ad:4d:0b:be:70:a0:ad:5b:
e7:ea:cb:50:c7:19:5f:5f:ca:60:e3:79:3c:57:fc:
ca:4d:64:6d:6d:af:38:10:37:82:b6:c0:2d:79:e4:
38:ab:7c:6b:1a:69:da:9b:88:fb:81:a2:c9:0c:47:
94:ca:c9:dd:c4:c7:93:7e:a1:24:f3:30:a8:42:5b:
8b:72:fb:07:4b:2f:0c:7c:47:50:77:41:94:60:7d:
30:62:5b:17:84:50:65:4b:8a:fa:6f:00:a4:5c:83:
6e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E3:73:AE:CE:98:13:58:1A:E1:BC:BD:45:D1:81:EC:27:32:F6:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7115ad1f-29c3-3885-ac49-5938bbf8ed3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.41.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:25:3c:b9:9b:db:6b:93:a8:5b:f6:fd:9c:86:5d:85:b8:13:
2e:12:5f:14:bb:8a:84:5b:06:42:56:88:65:56:07:b1:67:7b:
50:ca:85:7a:08:b6:aa:ac:c7:91:ba:6b:6a:fa:a2:28:1b:93:
58:e3:9d:84:a3:fc:9e:34:a5:ec:1e:12:7a:5c:9d:94:8a:57:
e3:89:d9:07:45:62:5c:87:b8:30:7a:ff:90:82:6d:8a:4f:bd:
ee:0b:a2:3b:2d:76:cc:96:13:29:24:3a:50:48:6e:85:06:52:
99:1c:de:2b:79:80:8d:f4:80:fd:88:97:5b:bd:63:d4:f5:8b:
6d:d4:d6:49:a2:ee:8f:86:35:75:62:79:45:c4:e6:89:8b:cd:
df:60:71:9c:08:00:22:fe:54:90:42:8f:b2:1a:0d:33:16:93:
8a:92:dc:66:41:6f:eb:9a:a9:d0:07:eb:20:05:c4:2f:38:b9:
4b:dd:70:ad:2f:65:49:b2:d0:04:1a:d2:59:58:ac:d2:7c:9f:
3b:c8:fa:ef:47:89:d8:d0:dc:0d:dc:ee:c2:94:13:48:3e:f0:
c7:0c:d3:3c:a3:b0:1c:c2:5b:6b:ca:71:cf:8c:32:4a:be:d3:
b1:c5:7c:f8:c2:8c:16:d5:86:7d:06:63:f9:51:60:63:07:77:
f0:38:65:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:54:55 2025 by rpki-client