Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3df5482-7153-3764-b471-97eee6c6ed41.roa
File: b3df5482-7153-3764-b471-97eee6c6ed41.roa (raw, json)
Hash identifier: 8XYi4eTDq7dNkvUkLuM1wBP3Zt1jHP5+JKzlVCbE7H4=
Subject key identifier: D9:D4:BC:D1:72:97:4F:B0:5F:18:37:2F:92:D0:33:81:5E:31:B6:A1
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490B4C0A48A0CE6A4A7D9ACFC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3df5482-7153-3764-b471-97eee6c6ed41.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.69.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:0a:48:a0:ce:6a:4a:7d:9a:cf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=13b944d0-c775-493b-9635-42ac9bfe0eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5e:7f:9d:a4:19:09:bf:87:c7:b8:f9:2b:fc:
ae:69:93:27:09:e8:23:2a:fa:89:b6:e6:9c:0d:0c:
96:39:4e:9b:39:ad:f3:54:eb:6d:43:05:22:59:1d:
85:9c:07:1e:bd:ae:0a:b8:06:bc:21:a7:9f:77:1b:
3d:3e:37:56:e0:ea:5b:c9:83:6e:e9:79:01:f7:ba:
df:aa:4d:64:01:24:8e:6a:45:f5:51:9a:75:4b:63:
6c:37:bd:3f:b2:29:cf:c4:c8:69:b7:0b:78:d2:cd:
69:58:16:3d:54:46:e5:61:dd:4f:02:f6:53:da:04:
0a:51:60:b4:ba:32:66:a8:26:00:d6:39:e6:8d:46:
47:ba:33:40:83:0e:a8:10:fa:33:56:5b:d3:0a:0b:
eb:28:0f:1d:15:a2:f7:b2:48:54:cf:38:23:4f:18:
15:ed:43:7e:a0:49:a2:23:8c:fd:4e:4d:a1:a7:50:
41:7a:5c:b2:dd:0e:40:b1:27:73:3f:00:07:e0:2a:
a2:72:ca:e7:45:b6:a0:ab:c1:28:d1:77:fc:9c:9b:
29:72:ff:26:f8:b5:7c:30:f3:3f:6f:1b:b4:79:1b:
f7:e6:c3:2c:47:b1:4a:e0:94:a8:7a:f1:8a:b0:86:
f4:3e:70:3c:ec:f6:20:4e:28:6a:5e:bc:c5:08:74:
f3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D4:BC:D1:72:97:4F:B0:5F:18:37:2F:92:D0:33:81:5E:31:B6:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3df5482-7153-3764-b471-97eee6c6ed41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:d5:1e:3c:73:03:dd:a3:84:44:28:71:c8:a3:86:6c:9d:e3:
8e:d8:01:08:47:21:5d:db:00:f8:5d:1c:a6:c3:13:9f:28:60:
c9:f1:a1:06:5f:88:3e:1f:6c:f3:13:dd:cb:3b:9b:79:54:86:
99:44:cd:31:38:93:f1:8a:7b:a3:e3:68:29:a7:c5:d7:f1:e3:
e2:53:10:18:63:d8:b8:ba:76:7a:26:fd:c2:c8:1b:bd:2b:34:
19:e3:b0:53:79:5d:59:57:32:a3:e0:4e:01:2c:6d:5f:1b:5c:
4b:8a:4c:26:cd:67:bd:87:3f:d5:7d:a5:8f:39:c4:a8:9c:9c:
da:eb:d5:6b:eb:71:70:d7:09:8c:8c:77:72:d8:ac:43:4f:75:
f6:8d:9f:f7:4a:08:7d:e0:6e:e4:c2:5d:3d:a1:87:f1:0f:75:
18:f1:9c:e7:14:a7:6a:10:a0:b2:78:e6:d3:f1:43:d2:29:d3:
c9:70:a2:48:b1:d6:17:01:b9:84:1f:d4:ab:37:70:0c:d6:e8:
ec:42:ef:dd:34:06:e9:c1:c1:e4:a7:c6:33:ad:32:b0:a4:5f:
d7:34:ca:05:5c:70:3b:9d:af:68:bb:7e:1b:5b:28:e7:2d:82:
f8:91:a3:ca:ae:71:76:94:37:0c:05:3b:2d:d4:cc:5d:68:9a:
7a:d6:f2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:10:52 2025 by rpki-client