Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d8671393-394e-3846-b473-dd02157d2c89.roa
File: d8671393-394e-3846-b473-dd02157d2c89.roa (raw, json)
Hash identifier: j27fWiiLqUZLxZVo259pZNFGeSfbRGPtRjHyK9Bj6PI=
Subject key identifier: CC:86:5D:E4:80:94:64:E8:CD:77:AE:95:4D:F7:82:94:61:AB:2C:62
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071BFEBD053CBC167EA5B780
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d8671393-394e-3846-b473-dd02157d2c89.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 172.69.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:fe:bd:05:3c:bc:16:7e:a5:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=a8af636d-4072-4ede-a35b-580dbeff3e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:52:4b:c1:0f:86:b1:2c:7c:52:31:63:c8:93:
76:cd:3d:ae:5e:da:89:47:ab:23:c8:02:9d:9f:0a:
b3:c4:47:6b:18:fb:96:40:5e:31:6b:c4:02:81:b3:
c3:2d:02:03:e2:26:a1:95:73:3e:7c:cf:d8:b0:de:
e6:ac:9b:e3:e2:43:2a:a3:ae:f1:19:9f:cf:e8:bb:
9b:f6:10:bc:4f:e5:5b:81:5f:89:73:b0:c7:53:3f:
19:eb:e4:eb:fc:b1:b8:a8:50:fe:92:c3:ba:1b:cb:
ff:00:89:19:8a:37:2c:77:25:a4:8e:2f:3f:92:bc:
57:b6:db:7e:5c:c0:0c:6d:22:d9:e2:1d:90:2f:11:
f2:50:16:25:6f:01:5d:66:35:77:d9:af:d2:7c:66:
f0:bd:24:29:58:1c:1d:e2:ff:93:b5:0b:fa:a7:25:
3a:63:e2:6c:10:cb:fd:ff:6b:74:bc:e8:6c:eb:ad:
61:aa:0d:31:7d:ce:5b:3f:cb:aa:fa:0a:52:f6:4f:
ff:62:c4:69:50:ab:58:4f:57:2b:be:6b:b3:34:fa:
ef:41:4f:cc:14:36:de:04:2c:94:51:a2:fb:91:55:
9c:a0:9a:1e:e5:83:42:08:36:c1:ad:55:cc:71:0e:
dd:71:95:d1:68:97:44:78:dd:52:41:5f:87:25:c0:
c2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:86:5D:E4:80:94:64:E8:CD:77:AE:95:4D:F7:82:94:61:AB:2C:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d8671393-394e-3846-b473-dd02157d2c89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:5a:d0:7a:bb:f0:16:09:b8:17:e3:18:86:0f:bc:9b:bf:69:
52:b4:12:d3:31:67:de:b9:06:8b:fe:b6:90:87:4f:fd:44:6c:
47:ab:37:56:35:4f:e1:31:bc:94:5a:a9:fe:aa:90:c2:8d:ca:
c6:01:70:50:46:10:1e:1e:84:f8:6e:51:fa:3e:3d:86:2a:a2:
58:a2:47:51:b2:d4:db:4f:b8:7a:b8:49:26:81:5e:e8:72:71:
75:9b:c9:ea:db:93:54:1c:4e:1a:b1:9a:d6:70:db:d8:cf:56:
42:51:c2:cf:82:d4:c3:e0:55:b0:84:00:56:a6:cc:78:e4:02:
99:41:84:c4:5e:f6:cc:35:29:2b:69:f5:1b:d5:b5:0d:74:2c:
ed:11:a5:b1:bf:a4:9b:86:4a:54:65:0f:5a:b4:84:82:1b:e6:
a9:e7:9f:54:d8:ca:c1:fd:df:c4:de:88:87:92:b0:7e:dd:11:
3a:49:36:1d:4b:1a:fa:7c:2a:71:30:e9:75:5c:81:64:6a:31:
bd:49:89:57:89:1a:50:d7:eb:eb:3c:4d:82:f8:c7:62:d3:a6:
e4:e4:b2:4e:1a:9b:b8:75:b6:e4:8b:bc:58:44:63:41:32:a8:
1a:49:8b:de:ff:93:24:2b:b6:37:29:f1:ce:b8:56:eb:2f:5e:
67:0b:8c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:09:31 2025 by rpki-client