Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f1de7960-1381-3f30-9985-24f97a3b12e2.roa
File: f1de7960-1381-3f30-9985-24f97a3b12e2.roa (raw, json)
Hash identifier: o7n0n3snLh/ZPpFNq/hCJJdn2fevY6Xg3dStGD2AZpI=
Subject key identifier: 32:CC:B1:12:31:1F:6C:35:F8:BE:53:4B:75:79:F5:11:42:02:2E:66
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584909E69D3A47CE7EF2C1C33820
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f1de7960-1381-3f30-9985-24f97a3b12e2.roa
Signing time: Sat 01 Mar 2025 02:00:39 +0000
ROA not before: Sat 01 Mar 2025 02:00:39 +0000
ROA not after: Fri 30 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 172.68.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:e6:9d:3a:47:ce:7e:f2:c1:c3:38:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 1 02:00:39 2025 GMT
Not After : May 30 01:00:39 2025 GMT
Subject: CN=b3de4419-0801-49e4-9761-5d0f66c0a210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:70:b0:c0:7e:56:0b:35:a4:a6:e0:c5:67:63:
af:45:c7:30:9c:2f:4d:e6:e0:e0:ac:29:be:06:4e:
b6:71:c2:90:78:7f:28:66:09:0d:04:31:d6:c6:d2:
a4:e5:cf:95:9b:a0:bd:93:6d:4b:e5:cd:d0:e7:4b:
a9:d0:41:62:8e:43:5f:c7:c8:75:e4:b8:08:c5:6c:
a9:b2:8a:3f:0e:fa:ea:3e:2e:e0:05:97:ab:db:a3:
fc:9c:5b:de:39:e3:9e:cd:61:65:d9:77:85:c9:36:
22:ce:70:81:0b:fc:99:ae:6f:e6:15:75:c2:1b:79:
9c:46:62:67:d7:8e:92:8b:4a:cf:78:b0:b0:04:a6:
3f:60:78:7d:c7:6e:bf:9d:93:b2:5f:09:f7:2c:07:
a8:43:31:41:bb:33:ce:5b:38:f1:ae:8d:5e:f1:38:
36:7d:18:40:c3:b4:8c:1f:75:18:59:4f:1c:b8:86:
69:8f:fb:9d:60:a6:ed:f9:27:ca:41:aa:76:75:60:
60:1c:b4:21:b8:2a:33:a6:9f:9c:30:20:38:35:fd:
45:64:51:4a:c9:45:b3:df:68:64:52:e0:b1:7d:6a:
f9:1d:de:70:26:4d:87:c6:6b:c7:92:58:05:f7:c1:
9a:a0:4f:50:17:49:ef:87:a9:bb:7d:52:a3:d6:47:
ac:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CC:B1:12:31:1F:6C:35:F8:BE:53:4B:75:79:F5:11:42:02:2E:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f1de7960-1381-3f30-9985-24f97a3b12e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:7a:08:c4:ef:f7:00:fd:d8:16:65:5a:6a:1b:05:f9:bd:4e:
f3:10:7b:0f:75:9d:56:49:79:49:09:5a:07:34:70:d2:e5:6a:
73:a1:b0:99:48:92:7a:2d:b6:77:46:08:31:fc:16:25:b3:55:
c1:dd:4c:20:8b:5f:ad:19:7e:18:cd:04:6e:28:7e:cb:4c:5a:
d7:9c:9e:e5:cd:8c:52:41:8d:ad:54:8c:73:28:67:c8:fe:a9:
da:b5:ba:33:43:76:f0:b0:f7:33:14:59:f8:15:93:ba:95:3b:
1c:b2:7b:4d:10:86:f5:76:28:d1:b8:e0:05:78:22:cb:de:d7:
c0:bf:d0:a4:20:da:04:7b:44:0a:72:e3:f5:c2:36:c8:c3:44:
dc:1e:fe:c9:b8:5e:d4:05:5b:ff:e1:24:87:07:f4:70:9a:91:
34:37:32:81:5d:9d:58:a1:9d:71:49:51:da:11:79:63:58:bb:
f1:34:33:7f:ad:0f:b2:92:54:c3:57:15:55:5d:e0:0e:02:3c:
67:d0:6f:a7:2f:ad:9c:d1:c5:b8:6f:ac:80:d7:3b:df:5c:3f:
0a:29:23:d5:dc:d0:5f:24:6e:cf:2a:ce:95:8a:cb:7f:19:40:
93:35:c5:0c:54:a6:47:20:d4:37:8e:21:30:a4:29:34:1a:07:
7e:a0:e0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:43:30 2025 by rpki-client