Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c12abd29-c7c0-3ea7-b667-e02219ead58b.roa
File: c12abd29-c7c0-3ea7-b667-e02219ead58b.roa (raw, json)
Hash identifier: JMl2RoQQG7kiUOyXH3J9EBMPYVNbePBMZcz63Hdmt7s=
Subject key identifier: 9F:3C:82:73:20:CA:48:7A:B6:49:68:65:65:DE:E1:E0:18:F3:BF:48
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584908819002E49C4FD1B143EBA0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c12abd29-c7c0-3ea7-b667-e02219ead58b.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.68.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:90:02:e4:9c:4f:d1:b1:43:eb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=cb3b3009-2fa0-4ee6-b1c4-42abaa3d5700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:76:2e:ef:95:c2:19:eb:79:e0:4d:27:fb:
a3:67:7f:e4:c7:34:29:42:ca:0f:ee:02:ae:fd:c2:
4c:53:09:e0:33:56:0d:e7:01:d8:02:a5:51:1f:25:
dd:26:9d:92:4e:a7:f7:92:e1:6b:1b:9b:3b:b5:24:
8a:ae:34:5d:cc:a8:4e:4c:2c:e4:28:51:82:2b:e5:
10:00:d5:1d:4d:d0:b3:4d:4c:8b:b8:b1:d6:a1:72:
b2:f7:8b:49:a8:3a:56:17:ec:ae:e1:54:b5:10:64:
e9:c0:be:3e:35:94:56:3a:cc:f9:11:d4:55:ce:e2:
8b:5b:73:d6:27:ed:0e:60:90:ec:6f:39:43:84:ad:
b4:bc:5d:f2:cf:26:8f:d8:f6:b2:52:fd:06:ee:d2:
76:51:c7:18:88:9c:c9:36:2b:24:43:10:21:3a:e7:
94:2a:2d:6d:a4:ea:36:1b:10:b7:43:46:fb:76:dd:
49:df:21:fc:74:37:ce:53:5a:af:26:31:f2:17:e9:
fb:d5:af:08:dc:98:5f:7c:56:26:fc:f1:be:ef:af:
e5:ee:10:ba:63:aa:e2:46:2b:a8:a5:74:74:95:75:
7d:bf:98:5e:07:e9:04:33:b5:a6:5d:be:9d:19:23:
4c:45:f5:af:b7:6b:e4:e0:2a:0f:5c:51:c1:48:4b:
64:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3C:82:73:20:CA:48:7A:B6:49:68:65:65:DE:E1:E0:18:F3:BF:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c12abd29-c7c0-3ea7-b667-e02219ead58b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.27.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:75:4f:99:ac:bf:27:40:fe:6a:1a:bb:5e:46:65:e5:05:5c:
d4:13:c4:fa:54:16:7e:9b:8c:d7:3d:cc:07:ec:bc:49:4f:05:
30:84:4b:58:6d:e6:0b:27:66:5b:8f:9f:d7:f2:1c:cd:c4:45:
67:87:b1:67:cf:6b:21:00:35:af:57:af:b4:96:fd:e4:e3:5a:
0a:75:fd:8b:d7:87:cf:e7:04:5b:46:ff:dc:a5:fa:64:f5:7b:
8a:9f:10:98:8e:b9:a4:df:08:35:e0:6d:c6:fa:b5:bc:75:e9:
07:2d:9a:cb:ee:af:a1:34:98:02:4d:85:de:76:ca:dd:1e:56:
00:d2:6c:d1:10:8f:cc:b2:2b:f2:6e:08:da:10:f7:2b:bb:e7:
3a:6a:5f:8d:4f:f7:64:8a:03:88:e4:83:bf:a4:09:81:5d:93:
ae:23:0a:67:1c:96:f6:a5:ed:60:43:69:76:5c:2d:c4:fb:cd:
cc:97:68:33:f0:d1:68:dc:a3:6b:12:70:db:43:17:14:ee:38:
bd:25:31:40:72:1f:72:95:ce:35:cc:d2:ea:4c:39:d2:49:7d:
52:b4:53:30:08:e4:7e:83:f9:2e:cb:b9:5d:e0:10:70:20:f3:
8a:9b:84:2c:b6:af:26:96:ae:de:6e:e8:cf:24:d1:8b:d8:d6:
9e:b3:af:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:52:39 2025 by rpki-client