Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f664b4c5-e87f-3925-8207-48233717f706.roa
File: f664b4c5-e87f-3925-8207-48233717f706.roa (raw, json)
Hash identifier: j4GNv5iK6cEV/KayR5ufwbowaz06tEluFJqAJlnOpzo=
Subject key identifier: 3B:98:29:91:E1:03:77:8D:A8:E0:FF:68:AC:25:D6:FA:D2:C3:EF:C7
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849088192AF9C7A0C996670B780
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f664b4c5-e87f-3925-8207-48233717f706.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.68.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:92:af:9c:7a:0c:99:66:70:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=5881859e-ee97-40ad-aa35-a31f04baf6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:24:6b:1f:38:f2:44:a9:92:79:2b:35:8f:37:
76:a0:be:0c:ad:e4:e3:b7:75:5a:1a:6e:24:2d:52:
e6:fd:ff:d2:2f:2a:56:97:d7:ea:ae:2d:41:76:b1:
27:01:42:84:45:ba:d9:5e:05:9c:00:cd:01:c8:46:
a5:eb:23:91:f9:9a:37:aa:17:a8:de:b7:37:b3:8c:
1b:7e:af:35:ac:85:6d:11:21:c7:d6:d9:56:ac:30:
22:a1:8d:38:57:04:1d:47:03:f8:62:bf:e5:88:3a:
b7:1b:61:21:58:06:5d:a0:45:d2:64:37:d7:eb:86:
bd:10:3a:1e:d4:ee:65:2e:15:52:1c:61:4a:1b:d0:
aa:7b:a2:70:47:a5:ab:76:2a:dd:49:79:85:db:2e:
c6:21:b4:c5:5c:eb:86:d4:86:ba:b4:10:56:5e:2b:
2e:66:08:13:35:a7:f5:3a:01:45:5b:8e:b2:25:f7:
01:eb:af:e9:ff:55:f2:19:c2:a6:92:df:49:3d:1a:
99:48:20:92:49:c3:22:92:5a:4d:60:fe:c5:a5:d3:
bd:bd:79:65:70:94:92:71:b2:f4:90:5a:d8:52:bd:
6b:84:c4:e3:cd:53:68:73:b3:fc:3f:b8:02:62:a4:
e6:eb:91:d2:00:24:e6:ea:5f:22:ab:e2:d5:ba:13:
9f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:98:29:91:E1:03:77:8D:A8:E0:FF:68:AC:25:D6:FA:D2:C3:EF:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f664b4c5-e87f-3925-8207-48233717f706.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.75.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:2c:9b:13:a2:b5:c8:7f:58:5f:fd:0a:8a:a7:aa:d7:13:23:
c6:f6:d6:e8:5e:56:ba:e0:e8:f0:20:37:62:bf:83:3d:85:77:
85:41:6b:2b:dc:4b:04:da:0e:02:57:04:25:28:96:9d:c8:88:
a5:f8:f3:82:26:62:1f:7f:81:97:03:61:3e:b2:db:7e:33:34:
f2:8e:15:6b:cf:32:ff:71:fe:ad:c9:a1:02:63:0e:22:92:42:
08:de:c1:56:27:7f:cd:1a:2d:aa:9e:ef:c3:a2:de:ee:52:a2:
cf:14:72:2e:4e:49:3f:60:63:8b:2e:5c:01:e3:f4:5d:6c:31:
d4:da:25:ed:6e:ca:56:8e:5a:a1:6e:50:f1:1e:fa:f6:27:b6:
6b:7c:c0:54:ae:18:f1:47:e5:65:11:a8:d5:41:30:1a:18:6e:
76:8a:c0:3b:6c:db:c8:cc:64:9d:a1:0b:bb:2d:d1:03:c7:66:
84:12:1f:3d:88:ad:40:ed:fc:bd:3d:ba:57:f1:4b:4f:d4:b7:
c7:5f:54:34:ac:1b:02:93:34:af:13:46:cd:7c:f4:a0:37:db:
9b:95:f8:83:9c:c3:ea:2d:aa:20:95:c6:b0:43:fc:db:8f:f1:
39:94:58:40:1b:84:54:e9:a2:46:8e:d9:ff:cc:85:57:af:b6:
2b:27:54:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:13:19 2025 by rpki-client