Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/99908df1-457f-3812-ba42-c5d989b81d93.roa
File: 99908df1-457f-3812-ba42-c5d989b81d93.roa (raw, json)
Hash identifier: tVv6vKgNVvGQVkeuW2bgCYOfpJ0lnbWE/A0nG4rtGr8=
Subject key identifier: 7B:6D:75:A5:8F:65:3B:9B:57:8C:96:3D:3C:34:2C:D1:77:EA:8F:96
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584909E6A83970785093ECCB1D80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/99908df1-457f-3812-ba42-c5d989b81d93.roa
Signing time: Sat 01 Mar 2025 02:00:39 +0000
ROA not before: Sat 01 Mar 2025 02:00:39 +0000
ROA not after: Fri 30 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 172.69.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:e6:a8:39:70:78:50:93:ec:cb:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 1 02:00:39 2025 GMT
Not After : May 30 01:00:39 2025 GMT
Subject: CN=eaf5bb2e-0665-413f-b857-e8d2bafa0868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ff:22:43:49:16:10:c2:bd:61:6e:5e:6b:cd:
0d:62:ab:a9:f5:fa:f1:50:f4:df:7e:9d:fc:4f:1c:
85:4a:82:9f:af:34:86:02:eb:d1:48:44:b9:a8:75:
25:23:df:1d:1c:e3:4b:fb:85:41:e8:aa:8e:61:85:
13:d4:ae:c4:68:70:20:ac:cf:f8:28:2e:45:6a:ee:
2f:78:fd:cd:e9:1c:63:59:5f:4f:b8:7d:08:cc:97:
44:96:b2:79:8b:1d:ad:71:1e:a1:95:d7:72:4d:73:
43:54:8f:e6:8c:2b:01:69:3e:01:a6:92:35:10:44:
c3:fa:57:5b:89:94:36:88:cd:5f:87:5e:aa:6a:34:
81:5f:90:9b:25:a7:21:88:f1:dd:5c:62:b1:5d:e1:
d2:ac:a6:f2:72:46:d4:21:db:b8:fc:75:30:77:a6:
fc:70:40:ef:6c:b0:01:45:90:4c:db:44:e9:6d:77:
34:b4:3c:ce:63:cd:c6:4c:28:01:97:f2:50:3f:df:
e1:ae:89:86:9f:1f:f9:e5:e3:fb:ad:b5:17:00:99:
d2:52:42:d9:5c:ac:95:6f:3c:28:4b:3d:10:1c:bd:
61:74:22:83:07:42:b9:28:59:69:2a:76:ed:16:13:
e9:be:43:d2:e1:61:af:18:99:45:3e:0c:5e:4e:34:
b6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6D:75:A5:8F:65:3B:9B:57:8C:96:3D:3C:34:2C:D1:77:EA:8F:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/99908df1-457f-3812-ba42-c5d989b81d93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:f1:e1:e0:c9:cd:72:cd:4b:b8:fc:b8:f6:02:b2:e7:4f:d3:
a6:c5:03:09:83:74:2f:20:e2:ce:b7:56:a9:70:6b:1f:60:c6:
86:5d:76:83:ae:e6:6c:9e:db:af:0b:3f:47:07:a7:3a:e2:59:
30:ab:66:52:2a:7e:da:56:e7:14:e6:1a:e0:ec:10:7e:78:67:
ea:17:aa:0d:b2:cc:6f:75:8a:43:9b:22:39:ca:e0:f5:e4:ba:
47:88:36:51:5f:a6:39:fb:ca:e3:f8:86:56:66:f0:1d:5a:a9:
08:f7:0c:b0:b2:d1:e1:47:61:e4:bc:af:1b:7e:9a:b4:a5:f4:
5d:ae:60:8e:2e:a5:28:be:d1:ed:23:79:1e:a0:60:72:22:1a:
8f:c1:95:b6:8b:dd:da:68:15:53:0a:51:20:6b:42:d2:d5:1e:
56:7a:b8:52:b4:0b:64:bd:b9:69:6f:e5:3c:84:3a:09:2a:ec:
94:43:ae:e9:eb:0a:d0:a1:01:26:c5:43:81:9e:ca:c3:54:5e:
a1:09:e5:fc:ad:92:d1:17:f6:4d:f0:76:f6:c9:74:9e:9e:f5:
04:e8:a4:69:13:91:a5:3b:50:6f:a0:68:bb:f4:86:55:c7:83:
91:78:15:6e:9c:63:95:af:9e:7f:0f:ba:40:b2:5f:b4:80:f9:
e9:75:0a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:56:49 2025 by rpki-client