Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9881220c-9ede-3293-a734-f3010f86829e.roa
File: 9881220c-9ede-3293-a734-f3010f86829e.roa (raw, json)
Hash identifier: wmf/ysFiyt6+A+tSIzqFmj4mw7H9KjfbHRjfysoXCuU=
Subject key identifier: 71:44:B4:07:CF:15:C6:DD:65:55:7F:16:D0:0C:DF:86:C3:C5:B1:03
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849088193D67F646B88A057FF80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9881220c-9ede-3293-a734-f3010f86829e.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.68.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:93:d6:7f:64:6b:88:a0:57:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=2adde80a-cfc0-494b-af7c-7bf5288da048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:02:5e:55:4a:0a:81:05:87:10:af:71:af:48:
70:84:2b:5d:98:62:09:73:91:26:ad:eb:2f:1d:1b:
7f:5f:2e:6a:41:ef:56:0b:8f:b3:1e:a4:9e:f3:d1:
42:43:28:a3:93:f6:51:61:ce:29:72:4f:bc:66:bc:
4b:39:d3:ab:b1:ae:39:3c:21:31:9e:5e:8f:0d:40:
a3:7f:9b:61:a6:ab:bd:c2:3b:65:f7:5c:57:00:39:
89:8f:22:30:da:f3:c3:cf:f5:39:36:75:0b:6f:d9:
74:af:67:41:a7:11:a4:07:c3:7a:1c:2a:49:86:1e:
86:d1:a4:6b:dd:c1:c3:c7:37:87:d2:e1:4c:2a:91:
7f:99:f7:65:5f:98:60:44:a1:5a:58:d9:50:c8:a0:
2b:56:99:b6:5b:64:ae:78:ce:d2:33:69:37:c2:8e:
2f:bb:5f:f2:9f:74:e5:22:a3:38:53:7f:6a:09:16:
1a:90:c3:c9:27:41:8c:cf:45:06:a2:eb:5b:1f:3c:
0a:c6:ef:42:e8:f5:05:c5:6f:7c:d2:a1:79:cc:d3:
26:08:14:eb:6f:ec:1c:f8:ef:1c:0b:5c:a6:90:7c:
12:6a:ca:27:5f:8e:94:47:71:a0:b7:20:86:6f:26:
38:2e:dd:6a:9f:42:8c:f7:f1:78:dc:e6:b2:28:1d:
75:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:44:B4:07:CF:15:C6:DD:65:55:7F:16:D0:0C:DF:86:C3:C5:B1:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9881220c-9ede-3293-a734-f3010f86829e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:c9:7b:cd:80:72:68:7f:1a:96:f4:f8:8c:71:63:e7:8f:9c:
ef:0b:57:cf:da:47:fb:4e:6b:82:c5:24:0e:f7:fd:b1:a1:55:
a3:4a:d7:40:0a:b8:4b:ca:e0:db:90:6a:2f:4b:8e:f8:3a:14:
c4:78:4b:d0:2b:6d:e5:3a:1a:e2:cb:3e:be:29:10:b8:f1:d3:
d5:20:1e:ed:72:c8:28:70:29:c2:cf:62:30:2f:b3:8b:74:f7:
a8:dd:11:ac:99:f5:a6:e2:a3:f8:e5:d7:b6:8b:61:46:72:3a:
4d:2a:66:98:1e:72:aa:51:1b:bc:90:e5:d8:f5:93:4c:c0:2c:
66:db:00:49:81:15:48:02:c0:db:c9:39:6c:0e:98:1f:bb:4c:
8c:1a:32:a6:38:76:a6:a2:82:21:09:5b:8b:e4:ca:53:19:ea:
09:3f:61:e5:b2:53:68:3f:11:19:0d:a0:77:c9:35:7d:b3:df:
44:35:75:98:46:06:a0:eb:56:35:94:57:61:54:37:99:33:7a:
19:2f:4a:84:13:79:0f:4f:4e:f5:2c:57:94:c1:eb:fa:84:5e:
a0:50:15:a6:e5:ed:d2:2d:e0:97:28:d5:33:b0:9f:4d:3c:6e:
44:62:4e:20:98:8c:af:14:25:a6:89:4c:93:9a:b2:8d:86:88:
d8:62:6d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:59:56 2025 by rpki-client