Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea2ecc68-3952-3483-9d3d-1b2cd52a0ab4.roa
File: ea2ecc68-3952-3483-9d3d-1b2cd52a0ab4.roa (raw, json)
Hash identifier: 0YCzSW0+4iOwIi8VpKmX06DriYCdtHA153zUoqWGe/k=
Subject key identifier: F5:87:1E:29:47:A7:CB:86:7A:B1:13:BE:D1:D9:C3:57:1A:13:A6:3F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490881924C66250192890E7000
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea2ecc68-3952-3483-9d3d-1b2cd52a0ab4.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.69.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:92:4c:66:25:01:92:89:0e:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=ecfaca39-ca9e-4120-ab9d-add6ecfb8347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:61:96:46:0a:18:a6:be:8b:5b:c7:a4:a3:
4b:a1:d5:bc:d6:2d:da:75:1d:0b:99:b3:2e:70:a1:
25:9f:d2:0d:a8:eb:34:4d:8f:6e:47:aa:cd:dc:0d:
1b:b4:48:14:39:8d:00:0b:b1:a4:53:de:0d:94:12:
e1:1f:cb:58:ea:27:dd:53:65:c0:8c:e5:e5:30:de:
65:d4:70:c8:db:e5:ab:ae:e2:33:b9:44:d9:4f:95:
d3:f4:3c:72:a3:ab:96:2b:5f:ee:85:54:82:99:a9:
86:e1:03:5d:09:3d:de:b5:8b:ab:ae:74:08:07:9d:
d2:d1:28:58:5a:42:9f:4b:d8:f9:ae:3d:f6:06:8d:
78:90:33:a6:79:76:03:ac:b8:6f:ce:e1:b1:e4:04:
91:0f:e1:d7:07:77:bb:02:c1:2c:45:ec:6d:9d:3a:
63:93:c0:b5:e4:77:c8:9d:e0:49:61:80:c7:44:af:
8c:7a:b0:53:0a:f8:6a:2d:7a:00:8a:2c:6e:ee:f2:
af:11:cb:3f:f1:e6:4d:3d:76:50:91:2d:61:fa:51:
41:40:e0:72:47:a7:34:94:3d:14:19:3d:3e:96:ca:
92:f1:9a:d9:60:37:21:18:95:8b:43:ed:1b:e1:42:
57:19:b0:4a:b0:a2:53:0c:5b:22:8c:c7:aa:64:aa:
70:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:87:1E:29:47:A7:CB:86:7A:B1:13:BE:D1:D9:C3:57:1A:13:A6:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea2ecc68-3952-3483-9d3d-1b2cd52a0ab4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.62.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:53:95:cd:4f:53:db:cb:d6:01:d8:7c:35:21:06:cd:4d:47:
4b:8c:ba:ad:fb:13:ba:9d:e6:f0:6e:37:6f:8c:10:1b:8d:81:
9a:49:31:d4:34:b1:a9:ec:47:95:11:ce:c3:75:9a:c0:af:b3:
7f:b6:59:c6:d0:c6:42:01:f0:89:16:75:9a:6d:03:2f:cb:3e:
a1:8f:4c:8f:65:9e:f1:c9:04:10:76:32:32:f0:0d:5c:d9:f6:
8f:6d:3d:45:34:b8:12:b6:fa:d4:27:15:63:49:c4:03:c1:b3:
55:3b:ba:a3:42:c9:46:f7:d5:7d:d0:16:0b:cf:e4:49:d9:1d:
59:a8:d5:9a:a9:7c:2b:eb:ab:0b:9d:b9:1f:9e:b9:c5:c9:e1:
5b:04:0c:e4:cc:aa:34:ab:d5:65:56:04:b6:bc:79:d2:03:87:
ab:6e:fa:b3:bb:02:64:e2:5a:d3:d1:f1:65:1a:17:ba:68:96:
b8:88:d1:4b:74:bb:d6:17:ed:41:46:ed:44:33:6d:ae:bc:39:
fb:72:1c:0a:ae:8b:64:ab:85:e9:68:47:3e:25:d1:07:c4:be:
19:32:97:32:8c:c5:81:fb:43:6a:2a:9d:aa:14:27:2a:d1:16:
51:c5:09:94:18:b9:f0:47:db:f6:d2:d2:d4:f5:07:ab:64:f2:
c7:5c:fa:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:02:06 2025 by rpki-client