Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a1fb01c3-f365-32f7-9bd0-e79cc4cced3e.roa
File: a1fb01c3-f365-32f7-9bd0-e79cc4cced3e.roa (raw, json)
Hash identifier: ERUJIyZQt90iiCf7M8iBum3kN8xUCoRVNlLdba8Gp00=
Subject key identifier: D7:75:80:3B:89:9F:DF:22:A2:CC:E6:A8:B8:3A:24:DB:E5:0E:01:FF
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584909E69DC377F25CB835370380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a1fb01c3-f365-32f7-9bd0-e79cc4cced3e.roa
Signing time: Sat 01 Mar 2025 02:00:39 +0000
ROA not before: Sat 01 Mar 2025 02:00:39 +0000
ROA not after: Fri 30 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 172.68.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:e6:9d:c3:77:f2:5c:b8:35:37:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 1 02:00:39 2025 GMT
Not After : May 30 01:00:39 2025 GMT
Subject: CN=0d672eef-d73e-4469-8fa2-a5c229992d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:67:3a:f8:48:a3:4d:ae:1b:5e:4f:49:f9:
15:ca:24:fb:e4:fa:b2:f6:e4:7d:62:be:c4:64:29:
3f:41:18:dd:3a:22:2a:2f:3d:e6:28:2d:da:a2:23:
9a:e5:c8:23:40:b1:57:b5:b9:de:13:02:fa:6f:23:
37:94:72:2a:04:88:b9:e7:73:7d:8c:09:90:89:4c:
f4:bb:c6:fc:15:8b:cb:67:a7:6b:77:f0:cc:5f:c0:
7c:76:e6:ed:0c:21:de:b8:9c:ff:a2:d8:47:85:46:
4e:58:a4:15:ea:8d:b4:14:75:2a:53:a4:5a:91:bf:
02:65:50:80:e9:12:ae:8c:0b:54:65:8c:d0:83:db:
d4:fc:db:64:f5:c2:8e:41:d5:17:92:1d:d2:0f:67:
cc:00:47:e6:07:66:5a:19:66:28:bf:5d:73:0a:d9:
45:f8:5b:bd:a5:e9:5a:c5:e6:7c:7b:d6:c1:0f:c0:
e4:62:ad:55:3f:67:e4:c1:c6:d1:69:35:c9:cc:bc:
c6:8f:f0:d6:de:a7:82:66:4a:43:f9:ea:14:c4:9e:
d6:5d:fe:c6:3a:c2:43:e9:42:c0:de:0b:a1:32:60:
bb:34:ce:6c:ad:44:42:a6:7c:ba:f6:0b:f5:9d:9c:
44:95:75:ee:32:77:1f:1b:07:e7:52:c2:5d:0a:06:
c7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:75:80:3B:89:9F:DF:22:A2:CC:E6:A8:B8:3A:24:DB:E5:0E:01:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a1fb01c3-f365-32f7-9bd0-e79cc4cced3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:c2:2e:ff:09:bd:1d:b6:d4:2b:ce:97:42:68:99:a1:d3:67:
79:f4:31:29:1d:13:f9:f8:4f:be:34:b1:8e:51:97:48:34:2b:
b5:1d:c4:37:7e:be:a0:01:fa:02:c6:c2:b9:45:34:4b:4c:f9:
fc:93:f7:1e:04:6e:1e:c9:91:13:1e:9a:62:4a:52:dc:87:d3:
4f:02:d1:ca:14:de:ae:44:4b:c6:8d:61:9f:72:6f:ac:0a:19:
58:8b:44:33:67:69:e5:d7:98:26:c0:29:75:96:63:81:af:1b:
b4:10:45:fc:a1:7a:2a:a1:ec:33:9e:1d:dd:c8:7b:ee:58:63:
7b:bb:1b:95:28:eb:42:99:b2:f7:0a:d1:82:68:d1:c8:fd:90:
c0:76:b6:58:04:04:92:a6:1b:65:d3:97:4d:ea:b0:c3:22:a2:
80:30:99:44:77:37:8d:cd:06:52:d2:5b:67:21:d4:70:c0:56:
5e:86:e6:26:92:5c:80:a7:25:d4:fc:eb:c1:52:e1:6f:17:f9:
8a:3e:eb:e5:22:04:fa:71:50:40:63:a1:c7:28:93:5e:b8:ad:
59:c0:9a:a9:1c:d4:ca:38:3f:cd:88:aa:7c:25:58:32:c7:62:
dd:5c:98:2e:b3:1f:cc:d4:4b:b8:db:ee:1f:6c:c7:32:7a:11:
26:fc:dc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:51:40 2025 by rpki-client