Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f4fa7a41-9b07-313d-948b-1f8984fb2e5c.roa
File: f4fa7a41-9b07-313d-948b-1f8984fb2e5c.roa (raw, json)
Hash identifier: CH9rdzwerWjY+YGjejIlIYiCIB9XTcPxmTl4P6PS9B8=
Subject key identifier: 5A:BE:28:91:32:58:A2:E6:78:58:3C:01:7D:11:E3:42:82:AD:96:32
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849088192DC976534CC9C2C0980
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f4fa7a41-9b07-313d-948b-1f8984fb2e5c.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.68.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:92:dc:97:65:34:cc:9c:2c:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=8f661d99-28de-4693-9c18-95ad43005046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:74:39:de:76:33:21:d7:e8:29:29:aa:a9:31:
8b:d6:83:5e:c7:ed:a4:40:d7:90:71:be:54:eb:f1:
19:ab:77:8b:c4:b4:e8:00:90:a8:f6:90:a4:4e:9d:
4d:27:d5:ce:42:22:fa:82:9b:b5:15:25:91:63:97:
8e:02:43:c9:18:5f:d5:32:a4:30:7c:60:4b:ec:bd:
3c:56:98:c1:98:f7:97:4f:35:8e:b8:59:e1:1f:a8:
26:65:c9:5e:1c:4f:df:9e:74:d5:48:47:10:8a:54:
a0:b9:81:62:42:1a:94:b3:96:f0:b3:15:4c:71:c4:
64:9f:3a:5e:5f:aa:a6:75:d6:82:be:c4:82:c1:bd:
39:7e:d1:0d:04:9f:27:5a:c2:65:b2:89:70:3e:7d:
bb:25:1b:03:5b:61:23:3d:46:c0:d4:7d:3a:d5:a2:
91:4c:8c:05:a2:08:e3:c4:16:c8:56:60:ab:2c:c8:
c3:60:59:20:c1:7f:b5:0d:19:8e:19:77:4e:04:b1:
06:50:38:d6:90:2a:31:d2:fe:3b:43:33:ba:1a:f9:
84:4c:e7:38:3d:81:45:8d:7b:07:65:cc:b2:3a:7a:
5d:19:b1:9d:89:06:8d:90:50:63:cc:67:ee:12:32:
d4:c3:eb:91:3d:38:d1:e5:25:cb:7f:8f:ca:ee:c1:
f7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BE:28:91:32:58:A2:E6:78:58:3C:01:7D:11:E3:42:82:AD:96:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f4fa7a41-9b07-313d-948b-1f8984fb2e5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.77.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:78:87:d8:8d:87:34:8d:66:9b:9e:d0:37:31:b7:e5:fb:05:
b0:81:18:0b:1c:bd:c2:72:c9:46:20:09:1c:d0:89:fa:99:b4:
d7:81:a1:ab:a6:cc:4b:14:34:6b:29:4e:b8:94:13:d0:fe:02:
e5:04:5d:3c:68:ff:9d:30:52:cd:e5:a6:3f:13:bf:09:24:2e:
78:bd:db:57:80:41:3c:da:e2:ca:55:98:38:4c:ac:4e:9d:c6:
82:f5:0b:4c:4c:9f:b3:f3:fe:0f:af:4d:42:35:0f:f5:02:bd:
c4:ac:a1:d8:bd:bc:e5:6d:5c:b0:55:91:ac:94:78:cb:11:7f:
d0:4f:f6:6d:dd:b4:62:63:24:18:e2:3b:93:ce:5f:e6:99:df:
4b:03:6c:5f:68:b7:cc:fe:ab:49:a7:ce:a4:30:f3:23:c6:fa:
a2:cc:53:be:1c:24:c1:f6:62:af:c3:64:cd:32:e8:15:20:70:
66:ca:65:ec:41:9b:4f:ed:94:cb:81:b8:6f:71:80:c1:bf:75:
4a:48:4a:47:59:30:da:00:34:80:18:c0:65:73:64:8e:23:47:
05:5a:cd:8b:75:8a:07:3c:2d:6e:40:73:a4:fd:a1:72:b6:64:
15:18:74:b0:78:b2:30:4b:12:2b:85:de:f9:f3:d1:14:7e:7d:
3c:45:71:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:37:08 2025 by rpki-client