Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e2e7374e-5845-3082-9ff8-e500b1975c6c.roa
File: e2e7374e-5845-3082-9ff8-e500b1975c6c.roa (raw, json)
Hash identifier: OFMMXNPJ+I5udZaWSUg2tAOeYFQBbJi7vnlNcmJr03A=
Subject key identifier: E6:DA:69:30:0D:95:36:3C:0E:01:A9:E3:11:29:59:D4:27:20:C4:A9
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849088194355F8F4B7A6FF60C80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e2e7374e-5845-3082-9ff8-e500b1975c6c.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.68.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:94:35:5f:8f:4b:7a:6f:f6:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=8b90a73b-b96f-47be-be42-3bdc01e3dc95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fc:21:e4:98:d9:31:e4:11:ec:14:58:88:22:
fe:26:ca:e7:33:4b:0c:64:8d:00:5a:61:7f:34:4e:
f9:84:35:4e:e9:c1:11:e7:59:7d:79:60:3c:80:8b:
00:63:f8:a2:4b:8b:1c:f8:b5:f0:b8:ac:e9:46:cc:
96:51:8f:34:6d:57:cd:8e:a0:3f:c9:98:6c:d4:6f:
a8:1b:7a:11:03:d2:13:5b:8c:7f:0e:b9:13:f0:ec:
f7:62:f0:dd:f4:1b:56:ae:25:64:f8:de:59:93:5f:
92:3d:2c:61:a0:16:43:d1:e2:a4:18:c5:70:02:38:
a3:22:e2:52:24:45:89:b5:46:5c:07:cc:4e:67:6a:
61:be:22:f5:d7:8b:91:f4:42:ae:36:bf:a4:62:51:
95:46:62:23:d0:24:1e:dd:d1:0c:80:72:0d:1d:d1:
c6:be:e0:85:c6:80:6f:1e:69:45:04:12:f9:5f:1a:
5a:79:4f:36:02:34:2e:14:36:fc:7b:96:8d:61:a7:
b6:99:83:64:8c:4c:1d:f1:e4:5f:1d:df:16:86:8a:
49:40:ca:5b:1e:74:ee:b7:a5:54:32:f4:b3:1c:b6:
9b:e0:ad:56:25:d7:d2:1f:d2:38:63:a5:43:e5:28:
6a:4b:e6:49:61:05:6b:31:97:0b:8d:37:f1:18:9a:
2b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DA:69:30:0D:95:36:3C:0E:01:A9:E3:11:29:59:D4:27:20:C4:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e2e7374e-5845-3082-9ff8-e500b1975c6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:5d:f4:9f:48:c8:33:44:39:34:94:73:c2:dc:ae:cd:73:a8:
1b:66:62:05:04:5b:94:6f:5e:d0:87:cf:bb:c0:39:05:cb:87:
1a:91:e0:69:33:a4:28:16:24:c1:08:f8:d3:b6:65:ca:52:28:
9f:a0:8b:3e:c5:79:dd:0e:2a:bb:a5:9a:a8:6b:8b:b6:3e:3d:
5c:1e:21:f7:ec:80:4b:d8:9c:73:a0:c9:23:05:e1:fe:e4:46:
8f:c0:42:d9:32:f2:43:dc:5b:a3:2d:6a:61:9a:3b:79:0f:18:
10:6c:9f:89:05:57:5e:68:45:ec:df:ac:2c:93:20:6f:bd:8d:
c2:f5:08:ce:f1:29:5d:db:f7:01:f5:88:b7:66:1f:31:f5:53:
1c:ab:02:be:0b:fc:d9:7e:b2:37:9b:42:3d:ad:bd:88:c4:8b:
98:9c:ed:11:ff:6a:d1:da:2a:30:86:6a:80:85:84:31:08:ef:
18:be:d8:f4:94:48:42:4b:4f:bb:ae:3d:e9:b5:01:24:a1:37:
a4:5c:73:89:72:be:7b:23:d4:62:36:3d:c3:42:1e:04:df:d9:
44:f1:bf:91:3a:13:18:c2:60:b1:d7:3a:51:9c:10:de:1c:f9:
0a:60:65:d4:4f:ae:87:de:0b:18:1a:f5:f5:bd:f8:12:db:0a:
9a:cb:98:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:09:36 2025 by rpki-client