Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ffefb04b-439d-329a-b0a7-11b8923ec659.roa
File: ffefb04b-439d-329a-b0a7-11b8923ec659.roa (raw, json)
Hash identifier: s8Hqhk4SHHvri3v1/sKrpXmwshrdzqy/lcI6rAaxybA=
Subject key identifier: AE:1A:8B:37:3E:D9:84:E4:C8:75:55:7D:9E:2E:3A:81:EA:69:61:FF
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490881936C39B395F829EFB080
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ffefb04b-439d-329a-b0a7-11b8923ec659.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.68.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:93:6c:39:b3:95:f8:29:ef:b0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=65f5181b-cd2c-42d1-8bf2-bd19b32ec00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:35:42:02:fe:4d:1e:d6:58:f6:99:ee:10:dc:
20:03:d2:d4:d5:50:6c:6a:b1:58:75:8b:7e:b6:25:
bb:10:f1:ec:46:a9:2c:de:ad:12:e1:a2:ae:ab:ac:
93:b7:79:1a:5c:45:e2:f5:15:19:5a:3c:cd:e3:2a:
60:84:bc:6c:95:5a:f5:dd:bc:f9:73:51:44:21:0d:
1e:67:2f:dc:98:b1:84:8e:1e:ac:fa:51:3b:98:e0:
1c:40:ec:4e:db:7e:da:38:8a:98:92:4e:ab:1f:19:
b6:a8:01:e1:c1:bc:75:69:4d:a9:f7:f4:34:03:b7:
72:b7:a5:3c:a9:41:08:cb:31:aa:a8:d2:c8:e9:d6:
70:61:08:0b:fe:21:51:63:82:75:e3:35:9c:01:67:
96:ae:3a:bc:78:bb:ed:17:73:e6:c3:b1:ca:18:3d:
22:0f:64:95:30:e5:f3:e3:84:bf:e2:72:b4:11:eb:
90:01:cd:22:48:5e:93:21:17:dd:8e:76:5b:a3:c9:
11:63:9a:e9:9a:f3:97:fd:bb:f6:44:20:d8:78:91:
b2:2a:3b:1d:26:a7:ac:81:9b:cb:c0:59:0d:85:4e:
fd:91:e2:40:cd:2b:df:55:ed:8f:ab:26:37:6b:98:
30:c6:28:ac:51:43:40:72:e7:57:1a:09:e8:58:18:
44:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1A:8B:37:3E:D9:84:E4:C8:75:55:7D:9E:2E:3A:81:EA:69:61:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ffefb04b-439d-329a-b0a7-11b8923ec659.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:7a:7a:c7:24:00:57:54:cb:42:3f:46:8a:44:84:12:65:90:
f6:79:8d:76:9b:6c:32:f3:df:ea:1d:96:be:c9:ec:2a:b9:ed:
ff:d9:a4:22:75:90:7c:c1:e3:10:e8:b0:93:2b:48:09:bd:b3:
7a:95:57:ce:ab:05:6c:0e:4e:ac:1f:ed:8c:a9:a7:4e:a4:01:
ca:e4:08:7d:27:02:36:f6:d1:de:05:69:ac:76:7b:7c:e0:3f:
57:1f:07:84:56:a3:3c:89:f4:cc:a3:69:52:f2:2c:bf:2f:cc:
50:95:11:9e:70:67:fa:0a:68:31:5c:75:65:ef:ad:61:71:d0:
23:4b:39:d8:b1:3f:cd:f3:4d:48:73:34:23:77:6c:88:24:cb:
3c:57:56:3b:7f:c1:58:6c:6a:94:c6:61:33:8e:14:af:21:28:
99:f6:94:9a:ba:91:76:f0:1b:b4:48:0b:5a:e6:d4:bc:ab:dc:
1b:3e:28:f7:31:67:d4:d8:9f:f8:7c:26:53:24:de:b5:ad:b4:
3b:9d:49:2d:ab:89:23:4b:f0:c6:a5:83:b4:88:c1:c6:01:a7:
80:57:4f:fd:de:70:2e:f5:38:10:6b:ad:28:e7:d6:aa:5b:2c:
20:7b:a6:04:44:0b:1e:77:9e:8b:a0:d6:0c:9a:e4:60:02:49:
88:06:ee:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:44:10 2025 by rpki-client