Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c2a701d9-4fcf-3b78-8149-0216b2fb73ba.roa
File: c2a701d9-4fcf-3b78-8149-0216b2fb73ba.roa (raw, json)
Hash identifier: tdZLTTSNr8uHsTA/udfkE0GLJ+5oC2xsu2YOyisiBdI=
Subject key identifier: A3:A9:FB:56:21:B3:74:17:72:52:ED:D2:57:AF:40:35:D5:A1:F3:60
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584909E69DD5E00FE0FF94D75D00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c2a701d9-4fcf-3b78-8149-0216b2fb73ba.roa
Signing time: Sat 01 Mar 2025 02:00:39 +0000
ROA not before: Sat 01 Mar 2025 02:00:39 +0000
ROA not after: Fri 30 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 172.68.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:e6:9d:d5:e0:0f:e0:ff:94:d7:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 1 02:00:39 2025 GMT
Not After : May 30 01:00:39 2025 GMT
Subject: CN=0a47ce90-b91c-441b-861d-84b8789bbca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c3:2d:14:84:0d:9e:0d:42:d4:88:fa:9d:70:
4a:fe:55:78:96:6c:bc:28:e0:8d:de:a0:0f:39:15:
c8:e5:bb:85:63:76:f6:90:ae:b9:63:e5:89:2d:61:
9d:c1:6a:91:46:72:8d:eb:5e:16:a1:60:7f:51:90:
54:99:59:04:66:6c:30:b0:41:f5:1f:a9:8b:16:31:
3e:ec:87:66:0b:38:d1:41:52:f5:2c:64:82:48:e4:
99:eb:10:ce:bc:ce:89:cc:90:ef:94:a2:bd:3a:22:
a8:7f:4f:a9:d2:c8:be:93:e0:d7:cb:41:a6:f6:8b:
91:0a:59:8d:f2:b7:39:b9:03:7f:8c:0b:bd:8a:0a:
86:10:30:1a:61:40:32:03:59:c5:db:3f:e9:94:cb:
98:08:7b:12:e1:95:f1:e0:b1:0a:bf:96:4d:80:06:
f7:10:3d:04:2b:07:12:6a:aa:b7:96:07:2c:a4:8b:
69:51:ae:18:58:c1:67:b3:55:c1:7c:44:11:36:8a:
cb:46:8b:1f:e9:17:8f:85:9c:f5:f0:7e:ed:09:1d:
a2:fc:c4:ff:f2:7d:4c:cd:07:70:c7:c3:c8:f9:5d:
be:7e:cc:b8:9f:7d:34:d0:e7:36:8d:e4:0c:fb:a5:
0f:21:6f:e3:3a:ec:d5:89:6f:a4:04:a5:5a:93:a0:
4c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A9:FB:56:21:B3:74:17:72:52:ED:D2:57:AF:40:35:D5:A1:F3:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c2a701d9-4fcf-3b78-8149-0216b2fb73ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:4e:b4:85:d2:b0:f9:44:7b:5a:b9:87:1d:ed:9b:97:a4:2c:
0c:2c:df:bf:a9:32:c6:20:9a:5c:fb:92:4d:ad:cd:3d:bd:3f:
b9:4c:ef:07:c7:b8:68:45:1a:c0:41:9f:47:2f:37:44:52:26:
94:ed:c2:6f:e5:a3:52:43:7f:1b:70:e6:f5:c5:02:e8:e7:98:
db:ff:e1:09:64:dd:36:10:f3:9a:24:7c:1f:d8:14:a5:56:28:
4b:be:36:14:8d:f8:8c:90:ee:c2:f5:1e:af:a2:da:40:d8:d9:
b2:ae:61:9b:4f:ba:e5:34:0f:97:5a:d0:4e:8c:00:1f:79:36:
94:76:ec:8d:b8:0e:cd:35:ea:1a:79:02:e0:cd:a0:ae:a8:e9:
26:60:71:87:1f:a7:b9:09:b4:a8:36:6b:25:60:bb:69:17:18:
b1:42:72:8d:73:74:48:f9:82:52:12:8f:a4:1c:be:fe:e6:9c:
7d:75:39:2c:29:b8:6b:21:f3:fd:1d:06:e3:cd:c9:98:d1:d3:
5a:d0:8b:98:d1:90:b9:5c:54:1d:70:fd:ec:90:82:ff:5b:db:
8c:d1:47:8c:f4:13:c3:52:46:10:3f:dc:93:66:81:6a:a2:d6:
83:e0:2f:fb:eb:be:0e:58:a1:fc:c0:06:1b:ba:1b:1a:19:62:
55:db:7b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:43:23 2025 by rpki-client