Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f921c4e7-d789-3ab0-94ef-4eec694aefb1.roa
File: f921c4e7-d789-3ab0-94ef-4eec694aefb1.roa (raw, json)
Hash identifier: zV/FVp6iXZckkGQ2DD1rjTV45w4+fFPMtuYKllQEQqQ=
Subject key identifier: 18:5C:4A:D8:A9:AD:6D:D8:26:3E:2B:F7:28:66:27:27:EE:3E:CE:D2
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584908818D25FBCD021D8A81A480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f921c4e7-d789-3ab0-94ef-4eec694aefb1.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.65.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:8d:25:fb:cd:02:1d:8a:81:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=8bd4aa92-6039-4eea-9dc7-c093486e5d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d8:73:9a:02:82:01:d6:bd:bf:0d:81:a8:1b:
ba:6d:35:d4:69:b8:71:cc:b8:d3:d7:25:b1:6b:2c:
e7:14:8d:b8:89:d3:ec:78:59:d4:7a:f0:64:a9:e6:
0b:42:fe:35:01:f1:4f:73:f4:59:df:9b:cf:bf:65:
09:c2:d0:63:33:83:4d:84:df:81:75:13:d9:90:32:
5b:49:48:23:65:18:1a:de:f7:7d:16:a8:d9:e4:b1:
66:6d:02:c8:8b:05:50:e1:5c:a1:b5:01:1a:a3:6d:
44:25:17:fe:37:9b:8b:1b:b0:37:b6:2b:22:9a:1e:
5c:70:1f:8e:12:38:12:0c:50:bd:82:66:4b:5c:18:
6f:41:7f:e1:91:60:3c:1c:8a:ce:92:a6:82:a6:40:
f6:64:4b:d7:e6:76:05:0e:05:8f:a9:99:25:90:44:
f5:58:30:ed:cc:b9:2a:fe:a9:72:7b:28:8f:bc:fc:
84:f5:d8:30:69:32:26:7e:d7:9d:e3:32:e2:ad:d1:
ed:a3:8d:71:2f:0b:b8:b7:0b:78:be:52:9d:ff:58:
33:f9:81:b5:b3:5c:df:a8:d8:31:9a:4b:95:6f:c2:
dc:69:e2:0c:b5:3e:17:a9:66:67:33:86:b7:37:fc:
f6:5e:40:22:84:a2:b2:c8:da:db:37:42:c4:c1:c2:
20:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5C:4A:D8:A9:AD:6D:D8:26:3E:2B:F7:28:66:27:27:EE:3E:CE:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f921c4e7-d789-3ab0-94ef-4eec694aefb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.65.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:b4:77:40:a4:8c:11:e5:c9:2a:ea:71:8e:a7:01:ca:fe:d4:
d2:2d:cb:c7:49:da:a8:21:4d:0b:a9:87:66:5f:e4:33:54:5d:
8c:5c:87:16:49:af:87:72:72:e0:23:55:3a:6e:46:32:49:34:
30:ef:a9:22:a6:08:db:93:16:01:f5:c7:6e:3d:a5:1a:ec:6d:
b5:fe:df:d2:4b:5c:bf:bb:f3:d2:08:fa:f3:26:fc:e8:ca:78:
00:d3:f4:70:2a:17:a6:17:66:86:bd:94:06:e8:97:f4:e8:39:
b5:5a:81:87:af:17:b5:b8:5c:6c:0f:f1:22:90:8f:92:6c:2a:
a0:8b:88:8d:8a:41:96:3e:34:b5:f4:e0:22:63:61:bf:bc:c6:
b0:ad:b9:36:d4:c3:3f:ac:ec:e9:5a:4c:b7:93:fd:7e:da:e9:
50:f9:40:4f:17:e7:69:09:53:b6:99:f9:5a:9d:7d:5e:aa:2e:
87:42:92:76:3c:7c:1e:1b:c1:b4:fd:73:42:70:b5:ed:52:d7:
2e:da:cf:ec:25:2b:63:60:a3:0c:0c:c5:99:bc:a2:5b:f5:f2:
19:f9:14:f0:30:ff:ca:e4:db:55:8b:2f:57:0e:76:36:82:90:
f8:de:d1:16:75:00:d8:70:df:ef:e4:fd:93:80:da:fe:b2:d8:
2b:c9:1b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:55:01 2025 by rpki-client