Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ace8792c-7d07-3492-9e33-dc0893f21678.roa
File: ace8792c-7d07-3492-9e33-dc0893f21678.roa (raw, json)
Hash identifier: q52Tgh+ruT3yQNJRmIYjODXl1RSH6SU1XeRzVAVVghM=
Subject key identifier: 85:F7:1E:37:4A:14:51:16:C0:81:EB:24:74:75:72:45:49:23:2A:14
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490B4C0D6E2EAB60FA5CC92E40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ace8792c-7d07-3492-9e33-dc0893f21678.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.69.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:0d:6e:2e:ab:60:fa:5c:c9:2e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=9052a8bb-6446-43f0-b711-f18a654b575c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cd:c5:c6:20:4c:13:20:22:b2:6f:64:3c:04:
0d:97:af:f7:92:6c:95:1b:a5:4d:de:36:e3:7a:87:
4d:ee:aa:69:4d:36:98:d9:3c:53:92:90:ad:03:06:
a5:61:81:20:55:4b:53:a7:86:d5:8e:22:90:8e:d8:
db:c4:b1:e0:3a:9f:53:e9:f6:a4:d6:f3:7f:26:11:
1e:91:bd:71:33:36:c3:4a:46:3a:fa:89:eb:12:49:
ac:a7:97:ce:86:26:8a:2e:1c:7b:9b:26:88:a1:40:
2a:2f:bc:d1:13:91:b3:5c:50:9a:83:ff:60:50:a8:
9d:6c:0c:b4:d9:c8:04:8d:61:46:19:45:2b:9a:7e:
fe:e5:ad:83:bb:8f:28:8f:bf:98:e4:e5:f4:d5:22:
23:ee:3d:9a:a0:3f:7c:c1:bc:0d:f1:15:30:f5:3d:
c4:af:b9:c6:23:9a:17:02:d7:8c:09:f0:a3:a0:20:
58:8e:f3:20:93:03:10:37:69:b5:19:0f:9a:45:31:
3f:b7:f8:2d:72:bd:e9:ce:15:04:89:b9:c5:2c:de:
1d:d8:2c:11:cf:cd:52:be:60:cd:d0:6b:cc:3f:d5:
ca:c5:0a:e8:2a:2a:08:c8:51:5c:a2:8b:bc:4d:cb:
d9:74:ad:db:85:d0:a3:b7:9d:f5:8a:14:45:8b:21:
11:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F7:1E:37:4A:14:51:16:C0:81:EB:24:74:75:72:45:49:23:2A:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ace8792c-7d07-3492-9e33-dc0893f21678.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:00:31:b5:61:7f:e2:86:b5:2e:ef:ba:04:20:4e:4c:88:37:
0b:34:4b:f5:d5:23:5e:11:7e:a6:05:51:61:30:d9:32:51:10:
84:01:06:e0:b0:33:f0:d4:65:8c:9f:ea:db:29:02:ec:8e:96:
ea:29:a9:92:57:ff:66:e4:dd:d9:d9:94:31:40:1f:69:6a:c0:
8b:ca:93:1b:85:6e:1f:e2:e9:58:e4:72:7f:09:63:13:52:a7:
97:d7:20:db:38:90:72:2f:23:ae:0d:d4:5f:df:0d:91:46:f5:
c7:ba:96:4f:25:47:82:84:39:ce:4f:5d:46:03:52:4f:9f:8b:
63:a8:76:32:9d:bf:e0:f8:5a:2c:63:3d:72:ec:95:78:dd:71:
12:bd:ba:dc:f5:c8:13:1d:95:c9:a8:84:d7:43:08:17:8c:c3:
3f:f5:82:11:ad:ba:bd:38:4a:d9:18:0e:d7:bc:96:b7:93:92:
7c:52:e0:6f:ca:c9:83:81:46:3d:ef:e7:1b:7d:99:df:0c:3d:
3c:04:21:44:26:b0:9f:06:7a:29:f1:ad:65:26:e1:13:04:b9:
b8:a9:60:5d:b7:7c:7d:38:37:40:35:48:fc:c0:c2:61:03:3c:
d7:6b:46:ad:81:a7:98:e6:dd:49:ef:6a:7a:4c:e9:4b:e3:6c:
f7:d9:02:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:56:57 2025 by rpki-client