Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/75ab6e08-76ba-3923-8171-f1ff0de818f1.roa
File: 75ab6e08-76ba-3923-8171-f1ff0de818f1.roa (raw, json)
Hash identifier: e6Mu9Z/mDXDtj2EELP3flS93zAS4lz6ysNK8Os3O2pA=
Subject key identifier: 29:12:11:5C:8F:95:14:4D:AE:AB:66:B7:5A:60:ED:05:4B:A4:98:08
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490F7BF71945820B0B5AFE1500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/75ab6e08-76ba-3923-8171-f1ff0de818f1.roa
Signing time: Mon 03 Mar 2025 02:00:39 +0000
ROA not before: Mon 03 Mar 2025 02:00:39 +0000
ROA not after: Sun 01 Jun 2025 01:00:39 +0000
asID: 13335
IP address blocks: 172.69.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0f:7b:f7:19:45:82:0b:0b:5a:fe:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 02:00:39 2025 GMT
Not After : Jun 1 01:00:39 2025 GMT
Subject: CN=da1a0143-353d-46ba-8d05-0495e06168fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:86:7b:bd:1e:19:97:0c:5d:0a:5b:ce:1e:36:
94:cc:17:47:ca:9c:0a:39:e4:c7:69:98:bf:b9:7a:
ba:16:a0:c1:c9:e0:e2:8f:61:dc:0d:1c:04:25:33:
fc:4c:d8:d7:9f:93:17:de:fe:9e:8b:e0:ca:d1:5d:
14:19:df:14:f5:7a:d7:9a:ff:ae:9f:c5:24:a8:7e:
59:f1:10:b9:6c:a4:64:4d:47:7b:22:a9:a4:2e:20:
9b:a7:5d:75:cc:a3:3d:33:80:85:0c:a9:ad:17:0e:
44:55:f3:c0:61:89:18:cd:94:48:84:91:e9:fb:53:
8c:c0:2a:23:de:15:55:14:06:d8:c9:10:18:44:3b:
ae:c3:51:83:05:b3:01:03:b8:d2:99:60:dd:ac:76:
49:a3:44:c6:df:21:31:45:34:09:45:ca:99:b4:c0:
b5:6f:84:d4:3e:d2:85:04:f8:c9:7a:1d:0e:29:53:
5c:c5:27:33:5d:02:fe:32:c7:59:8b:38:45:0f:e1:
56:95:18:78:9c:69:87:9b:77:9d:16:21:7f:14:13:
0c:3c:38:46:e6:10:e2:25:cf:d0:80:70:d2:d8:82:
7f:a5:3e:02:72:36:15:07:b0:f4:bd:54:74:47:36:
80:5b:6d:9e:ae:08:df:d1:30:81:e0:2b:da:cf:c2:
e5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:12:11:5C:8F:95:14:4D:AE:AB:66:B7:5A:60:ED:05:4B:A4:98:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/75ab6e08-76ba-3923-8171-f1ff0de818f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:0f:97:b2:02:ec:6e:e2:8e:a6:68:36:94:90:dc:1e:6c:d4:
fa:a9:d8:c5:e5:86:6c:b3:e6:2d:3e:84:b6:5f:5e:88:d7:b0:
c5:d7:f7:2e:d9:a2:64:4c:d3:21:f2:0f:33:3e:39:57:f4:d1:
e3:20:fe:ad:08:e9:44:c2:21:ad:19:c7:72:38:f6:cc:c2:d9:
f9:15:8f:fc:c7:f5:d5:1a:16:9d:36:33:18:3d:39:47:e3:42:
6d:4a:fb:c2:6d:8d:fe:eb:1d:32:72:13:99:e3:f4:f9:42:3c:
c7:aa:fa:77:1b:ae:d5:0f:0d:be:b3:5b:e1:ba:cb:68:26:aa:
d4:b1:cd:5a:81:54:30:a9:40:8c:92:d9:74:be:ba:e1:2d:5e:
d6:fb:60:94:6e:a3:06:4d:01:59:3e:ea:ac:19:5d:e9:5f:39:
92:ff:3a:59:86:51:fd:1a:0f:8c:49:78:f8:55:48:c7:8f:59:
e4:c3:ac:2d:f9:86:9d:fd:db:7c:1d:41:74:a6:76:3a:d9:3e:
4c:88:e4:c8:5f:28:88:66:72:92:90:cc:e1:93:0f:c0:56:f6:
f7:3a:45:26:e2:a1:34:4d:c3:1a:2b:28:ca:69:13:20:67:83:
fb:4d:87:fd:a3:55:fb:75:f9:80:8f:bd:c0:b6:bd:99:0e:d6:
ef:8a:7b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:51:33 2025 by rpki-client