Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de4f5e49-5e33-33a2-81ea-b797f2f7bcff.roa
File: de4f5e49-5e33-33a2-81ea-b797f2f7bcff.roa (raw, json)
Hash identifier: TkigzEO60slPU3/KHp8n7KzonN2VmKLsB//9YtvNZ2k=
Subject key identifier: 44:9E:C2:C2:A0:F9:33:B6:EC:98:47:F3:F5:E8:39:DC:64:6F:A6:4C
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490F7BF55641FC1643915D3900
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de4f5e49-5e33-33a2-81ea-b797f2f7bcff.roa
Signing time: Mon 03 Mar 2025 02:00:39 +0000
ROA not before: Mon 03 Mar 2025 02:00:39 +0000
ROA not after: Sun 01 Jun 2025 01:00:39 +0000
asID: 13335
IP address blocks: 172.69.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0f:7b:f5:56:41:fc:16:43:91:5d:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 02:00:39 2025 GMT
Not After : Jun 1 01:00:39 2025 GMT
Subject: CN=39201363-d122-497d-b4c4-9e56ae02b9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5b:03:cf:37:3b:5c:2f:3e:71:21:5c:71:f0:
06:e6:59:6d:d5:59:17:89:3f:b8:5d:7a:f9:28:ad:
f4:61:6b:62:39:5b:3a:4c:60:cc:77:7e:40:93:7c:
d9:30:98:6c:58:cc:82:d8:cc:3d:f6:a6:78:bf:ff:
24:ef:6e:f6:cf:61:ac:69:06:06:74:de:8f:dc:1b:
5e:4b:70:d7:5c:59:8d:21:71:fd:4d:da:20:74:29:
c7:c1:35:2d:23:61:e6:67:d5:a1:15:3a:93:be:9d:
9a:a0:d0:5c:8d:04:0c:70:e1:7f:34:c3:82:06:36:
24:76:d9:e4:49:37:af:45:1d:ee:30:f8:ca:45:02:
bb:7c:e8:07:05:92:dc:94:16:f2:4a:24:56:e6:af:
92:39:a5:e9:17:0c:72:d3:84:ab:5e:81:45:fd:08:
89:6d:dd:b4:90:10:36:ac:0d:2b:e3:77:d3:fe:ef:
06:8a:3b:25:b6:da:20:59:6a:12:e5:1c:14:ed:f4:
a5:12:ff:5c:cf:59:1e:cb:76:e0:31:9b:62:ea:61:
a8:06:03:ad:60:23:80:90:79:f3:00:e0:c1:74:59:
1c:55:bb:77:09:c2:9f:34:19:26:99:c9:20:23:fa:
5b:e7:12:98:24:1a:62:e3:38:88:27:ea:2d:4f:16:
af:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9E:C2:C2:A0:F9:33:B6:EC:98:47:F3:F5:E8:39:DC:64:6F:A6:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de4f5e49-5e33-33a2-81ea-b797f2f7bcff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:14:01:ee:02:fb:94:0b:6d:3c:d9:b7:20:53:d1:02:6d:45:
d3:e3:82:9b:c0:bc:98:4d:68:55:08:d1:70:af:2e:14:47:ef:
c1:4e:af:69:c2:07:61:3d:e9:c6:82:9e:69:4e:41:02:0a:c5:
4f:b6:0b:1e:26:2f:ce:f5:96:14:98:ea:6c:d4:5c:93:3f:0b:
36:b5:eb:d3:b4:63:9c:18:62:f0:ba:d8:00:00:fe:20:15:47:
83:0a:9c:9a:cc:b5:31:2c:37:d4:6d:43:9d:2b:ca:36:60:f1:
1d:1d:1b:f5:3f:13:ad:33:03:4b:0d:e3:dc:43:82:8a:93:46:
f6:65:1f:22:9d:e6:68:dc:b4:5c:00:3b:35:76:15:95:a5:a1:
9b:ee:a3:f7:bf:d7:a4:24:b7:13:93:3c:3e:10:4d:7a:c3:56:
24:1a:7d:80:0c:f2:da:3f:b7:f1:ab:81:8f:96:2b:4a:b7:e5:
6d:19:59:d6:70:49:59:cb:af:39:49:eb:ae:c3:1e:f8:bb:61:
d1:8e:c1:f3:6a:49:fc:17:53:9d:54:63:5b:eb:e8:aa:84:f8:
70:d9:0a:de:6c:23:70:22:2a:15:0b:a6:e0:51:bc:37:81:cd:
1d:ca:15:6b:53:1c:14:f5:42:95:cd:85:56:29:c9:d6:6d:48:
5a:a9:56:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:10:47 2025 by rpki-client