Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/db25c874-3597-38cf-af31-32cb1667e1d3.roa
File: db25c874-3597-38cf-af31-32cb1667e1d3.roa (raw, json)
Hash identifier: 9zllraTwbd/NbHPd1wvHic+FtKCdzecaylInjBV++ao=
Subject key identifier: EC:13:FF:FF:D0:64:C4:5B:4B:BC:2C:39:02:7D:ED:61:49:E1:39:65
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584908818A6C50703BA3E4F15580
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/db25c874-3597-38cf-af31-32cb1667e1d3.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.64.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:8a:6c:50:70:3b:a3:e4:f1:55:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=9e02910c-565c-462a-bc18-1393cb50880c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9d:34:55:ee:26:da:e1:f0:0f:99:2b:53:e7:
b5:05:15:7b:39:a7:f3:46:95:3d:61:8f:88:85:e5:
fa:9e:db:9b:35:c8:e5:b9:a4:ce:09:bd:09:c2:08:
3b:da:fa:14:20:a6:bd:29:12:a5:63:c2:b9:99:77:
bf:91:ec:ac:3f:88:da:1a:65:42:cb:ef:10:c8:50:
b1:ad:5b:f1:74:45:44:c7:04:62:f5:28:6c:53:b5:
71:ab:99:43:15:22:00:ee:1f:1d:bb:62:7c:aa:db:
ea:4a:00:ee:e7:de:20:f7:5e:ff:1c:ef:1e:c7:7d:
9e:60:e6:ef:fd:b1:16:64:ca:29:19:8d:fc:30:2b:
59:df:24:67:b3:c8:91:81:ec:52:98:40:c8:a4:a3:
ca:e5:0e:d1:fe:d5:fd:32:cd:2e:bc:f9:ac:13:17:
e6:01:92:a6:93:8d:f0:c7:b0:a3:08:48:00:de:bf:
e5:26:a2:ea:e0:44:d6:0d:8a:ff:71:32:e5:a5:b7:
70:d2:c3:5a:7c:90:02:6a:e0:db:c6:9c:84:83:32:
ab:e6:b8:28:2f:55:1c:75:c4:a6:56:08:0e:76:ef:
26:61:b9:53:ae:b2:cd:cb:65:db:3f:54:71:0a:dd:
24:15:88:28:62:4b:a1:11:32:78:e4:22:57:e6:49:
f3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:13:FF:FF:D0:64:C4:5B:4B:BC:2C:39:02:7D:ED:61:49:E1:39:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/db25c874-3597-38cf-af31-32cb1667e1d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.64.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:7d:a1:6f:f1:11:f6:62:fb:16:43:27:46:d7:9c:bf:b9:b8:
6b:ce:1f:1b:36:82:c4:5b:13:92:e8:89:81:1d:4b:f9:af:8c:
2c:f5:3f:08:29:26:f8:02:7c:9a:d0:3c:c3:54:27:6f:cd:10:
6e:68:b3:7e:2c:c3:0e:1a:02:46:1a:f1:69:3a:3c:b8:bd:98:
88:98:9d:14:2a:ab:98:e0:5f:c6:f2:b2:50:06:d7:8d:bf:fc:
87:da:61:09:f9:1d:b4:0d:c2:b3:88:40:a4:b5:93:16:d4:df:
c7:a6:5e:a2:a1:22:40:fd:80:7e:e7:92:a1:35:f8:55:b4:ba:
1e:57:55:fb:b7:05:f7:96:38:8b:77:6b:c9:da:a6:8a:f9:b4:
fa:0a:4f:6c:a7:26:99:3e:35:c5:dd:11:58:80:c4:a4:9b:53:
9f:e5:57:eb:9f:f3:11:05:b8:d0:e5:58:95:09:f0:4c:a9:07:
d1:8a:1b:87:7b:06:c1:79:ed:c3:43:58:30:b9:f5:a6:50:25:
27:b0:82:b7:dd:09:dc:70:ae:2d:a2:3d:f8:62:e0:5e:8d:0a:
ba:04:b9:3e:60:1e:a1:b1:80:92:b7:6a:39:76:e4:79:98:c1:
68:04:1e:a8:a1:8b:86:73:72:56:07:0b:3c:59:3e:9f:ca:16:
26:87:4d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:11:46 2025 by rpki-client