Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b1eec918-4b64-3e32-92e6-60cf50d4e8b2.roa
File: b1eec918-4b64-3e32-92e6-60cf50d4e8b2.roa (raw, json)
Hash identifier: z1AsHsS3ZklSJK9YGkrjczAUccCzCmOjMScqDHETius=
Subject key identifier: 0A:36:89:F2:E3:42:A6:B3:60:83:8D:6A:FC:60:1F:61:69:AA:19:A9
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490F7BF65023D003C40ECC8C40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b1eec918-4b64-3e32-92e6-60cf50d4e8b2.roa
Signing time: Mon 03 Mar 2025 02:00:39 +0000
ROA not before: Mon 03 Mar 2025 02:00:39 +0000
ROA not after: Sun 01 Jun 2025 01:00:39 +0000
asID: 13335
IP address blocks: 172.69.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0f:7b:f6:50:23:d0:03:c4:0e:cc:8c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 02:00:39 2025 GMT
Not After : Jun 1 01:00:39 2025 GMT
Subject: CN=f64a5ba4-51c9-425d-afbb-72912f174b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:26:85:fe:ca:ef:a1:85:b0:9d:00:ab:b1:c7:
34:df:9e:cd:d4:ce:da:d2:10:04:f9:3b:f8:5d:42:
25:cf:12:3d:d7:c9:35:f2:bc:7a:a8:73:94:1a:f3:
b1:89:b6:aa:b2:22:b2:57:23:94:cd:e9:f7:38:79:
6c:73:f3:e5:4d:9f:81:3c:0d:67:8a:ea:35:a0:eb:
b8:fa:48:eb:03:ac:78:f0:70:dc:90:39:5c:92:ea:
35:ab:c8:2f:d1:04:60:08:ff:0c:49:b8:4a:e7:c9:
ec:8f:8b:e9:e3:cb:21:c8:ad:bf:67:30:b0:fc:74:
9b:56:31:2b:76:60:d2:e2:6b:e2:a0:f5:4d:af:85:
50:1e:29:3e:a8:7b:3a:23:5f:26:71:91:55:eb:8b:
75:c0:2f:eb:8f:41:57:9a:73:6f:e0:36:cc:6b:07:
82:8b:f2:d1:e5:36:9b:78:62:86:30:88:74:e7:25:
3c:4e:8a:08:e6:8c:98:47:12:2a:42:b4:33:91:23:
06:11:6d:2f:40:bc:04:7e:57:92:23:02:ae:23:55:
b8:d2:95:4f:e5:92:82:10:66:0e:f1:8c:73:cf:d3:
93:fd:79:86:a2:91:9f:31:92:72:0f:55:b0:fc:6e:
0e:d2:b2:4f:a3:ea:0b:ad:25:69:cf:bb:06:d6:a8:
66:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:36:89:F2:E3:42:A6:B3:60:83:8D:6A:FC:60:1F:61:69:AA:19:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b1eec918-4b64-3e32-92e6-60cf50d4e8b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:30:2c:db:b0:21:f8:8b:85:63:aa:0f:5d:19:a8:15:e3:09:
a3:2c:1b:a2:b3:d2:40:41:4c:8d:03:aa:fc:38:75:d5:2a:d9:
b2:d4:b3:47:45:cc:04:91:35:f2:a2:db:08:08:e0:44:bf:75:
59:7c:2a:72:e8:67:00:0a:ea:eb:66:1b:c1:45:0a:fe:aa:29:
af:6a:bf:c9:97:3b:b8:5f:60:d3:0d:11:de:13:ca:f6:49:fe:
77:49:ff:e4:44:33:dc:88:b9:8d:58:4f:8a:2e:ad:7d:bc:ce:
28:41:73:7a:fe:48:12:d9:22:65:98:a0:bb:a1:1a:c6:ba:a8:
3a:bb:c7:41:6f:c9:ef:9b:13:98:5e:29:b3:f7:2e:79:fe:55:
f8:fc:c0:0f:61:11:15:de:40:3d:d3:9b:1c:ad:7c:13:61:e8:
bf:db:b1:57:c4:4b:cf:e4:32:2d:01:52:39:7d:bc:8c:a7:62:
d3:6d:6a:28:57:21:d4:27:14:a7:ec:06:7e:7b:68:bf:97:59:
97:43:10:4c:5f:67:9b:64:ad:11:4b:15:03:cf:35:c3:a3:e4:
bc:5b:2c:cf:c1:e3:36:c7:10:9e:a8:3f:bc:f3:96:7c:5c:2f:
25:2f:12:42:06:f2:e3:7b:75:e6:f6:a5:f8:43:b7:5c:f1:19:
c3:d3:2c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:03 2025 by rpki-client