Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f5cc9135-e7d0-3032-9f18-6f8ea89813d5.roa
File: f5cc9135-e7d0-3032-9f18-6f8ea89813d5.roa (raw, json)
Hash identifier: IKLUxkiMGIRNViXLIQZtZ7mB2qH5DtfeUn7PMAkos7c=
Subject key identifier: F9:B9:1A:94:DE:CD:BA:BF:6B:51:DF:A3:25:E1:0D:FB:2C:07:A6:7A
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849088183D9A651D17F35C06C80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f5cc9135-e7d0-3032-9f18-6f8ea89813d5.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.68.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:83:d9:a6:51:d1:7f:35:c0:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=758ce252-9e3a-4aba-b013-4a584766deeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:06:98:bb:4b:83:f3:51:c4:10:dc:79:c0:c0:
4a:e7:5e:8c:67:fb:22:d5:73:d0:52:4f:3b:64:dc:
6e:53:6e:d1:28:5f:09:99:d0:40:4b:4a:99:63:bf:
03:9c:a1:ea:72:fb:42:90:83:92:71:19:3c:cd:98:
61:93:da:e6:c8:ce:dc:3d:9b:b3:a2:9c:44:31:b9:
50:d1:05:39:b0:b6:96:fd:00:0d:23:2b:68:fc:4f:
67:84:83:38:b5:b8:9f:88:a9:9f:4a:cb:07:f8:f8:
27:f0:e1:a4:19:c6:01:01:ff:7e:36:24:88:e6:62:
71:60:67:81:54:97:19:da:8f:87:f2:fa:82:1d:16:
30:9d:0f:5d:69:59:83:9b:04:8a:36:e9:2c:05:8a:
db:1c:ce:60:0b:95:f3:59:62:c9:3c:d3:17:9c:6d:
a5:b3:ec:94:8a:3e:46:8b:7c:6e:23:2d:4e:9a:4f:
95:0b:4e:4e:aa:df:d5:79:43:44:15:93:75:a2:a4:
f2:95:c5:92:33:12:0f:e9:bd:70:b3:c6:99:e2:7e:
e3:b3:cb:2e:90:90:fe:d6:8c:62:b2:b4:c0:25:6f:
0a:cb:de:a1:7d:fb:e2:f9:d2:7e:33:67:af:06:b3:
e6:97:55:8c:9b:78:7d:08:c1:a6:17:50:e2:8b:75:
14:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B9:1A:94:DE:CD:BA:BF:6B:51:DF:A3:25:E1:0D:FB:2C:07:A6:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f5cc9135-e7d0-3032-9f18-6f8ea89813d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:72:a0:c6:7d:a6:12:51:24:fe:e2:b2:a2:a0:3d:42:47:e0:
7a:45:27:92:04:0e:1e:ad:09:42:53:09:27:84:e8:6c:af:4f:
8e:65:e0:f5:fd:6a:2f:fa:aa:b7:95:31:1b:b8:22:6f:bf:7b:
bc:57:f8:55:3e:26:fb:32:7d:52:77:1f:c8:f6:ee:a8:4a:80:
cb:78:a5:ef:3e:5f:15:3c:71:d3:14:d0:fb:45:58:ca:dd:8c:
fc:90:cd:d5:83:cb:12:16:8c:81:a0:27:c3:6e:40:b5:f5:01:
2d:c1:92:4c:a1:7d:f3:9a:0f:3c:51:b2:a7:a7:84:51:63:69:
b6:ec:ff:87:ce:09:ac:d5:c0:f3:9e:5d:99:99:d4:9c:04:7c:
02:c8:b9:43:5b:49:12:fb:af:b6:d2:d7:99:25:ca:a8:fe:cf:
44:ff:82:bf:46:46:ab:81:cf:98:eb:14:f4:40:72:96:09:ad:
d3:4d:03:6c:8e:52:e7:b3:ba:cc:4f:44:3a:a7:34:ae:a7:59:
c6:a2:31:8d:24:a8:b9:7e:c7:1c:98:8f:75:12:1e:90:fa:50:
71:c7:2d:ea:72:bf:4a:da:3b:0b:35:dd:1a:e0:7b:59:09:87:
6e:b0:96:02:19:c3:21:bb:02:d5:00:c1:8f:fb:6c:eb:1b:20:
0e:27:94:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:41:05 2025 by rpki-client