Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d38fe17-05e7-3ec1-9112-cca1b2ac1e74.roa
File: 0d38fe17-05e7-3ec1-9112-cca1b2ac1e74.roa (raw, json)
Hash identifier: Gf/EI2FcNu8wKmIXPsckIJKkhr4HopQt8uETNO3AsrM=
Subject key identifier: E4:21:ED:D7:43:66:9F:8F:26:C9:78:16:43:43:01:18:2D:7B:ED:42
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848253FABF6DCDF13DAEC05F480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d38fe17-05e7-3ec1-9112-cca1b2ac1e74.roa
Signing time: Mon 09 Dec 2024 04:20:05 +0000
ROA not before: Mon 09 Dec 2024 04:20:05 +0000
ROA not after: Sun 09 Mar 2025 04:20:05 +0000
asID: 13335
IP address blocks: 172.64.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:3f:ab:f6:dc:df:13:da:ec:05:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 04:20:05 2024 GMT
Not After : Mar 9 04:20:05 2025 GMT
Subject: CN=27add156-c171-4256-8c63-e1158f7c5486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e7:37:cc:7d:7d:6a:e2:6d:f3:32:33:d5:86:
f6:e3:4f:e1:fe:07:56:d0:6d:05:8d:2b:5f:f1:88:
b9:d5:db:b8:66:39:f7:8c:22:0c:d0:8d:88:27:5e:
46:1a:c4:0d:40:cc:f5:1b:71:41:10:05:27:e0:6a:
ae:83:11:6b:f5:b3:86:2e:24:60:ce:b6:ca:6f:1b:
f4:45:a8:31:a8:6c:69:70:ac:77:f4:f2:4f:4d:1e:
9f:26:5a:0c:32:a9:2c:1a:91:a9:77:ab:a7:bd:cd:
ac:97:ba:c4:82:db:69:c8:1a:a7:9a:25:80:33:2a:
f4:35:29:4e:60:23:6f:33:bf:6e:74:68:0d:2b:b9:
ea:54:c7:d1:d6:24:e8:a0:4d:da:42:ab:0e:64:2a:
90:43:66:85:08:5d:6f:8b:2f:43:1d:7e:7a:28:d4:
a2:0d:7d:07:f7:c2:75:89:df:f1:f2:9c:ad:d7:e7:
af:e3:0e:12:f4:23:eb:e2:1e:fd:7f:3d:c7:1d:d3:
7b:41:1c:07:f0:fc:ef:e5:2f:4f:31:2b:91:0b:08:
c1:8c:e0:2c:07:e8:69:ea:fd:67:2d:36:c8:c1:ee:
23:54:47:9c:59:38:0a:f6:8b:1a:90:f5:ad:87:ec:
94:19:8c:c3:9d:0b:5b:d7:8d:40:e8:77:9e:e8:8b:
07:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:21:ED:D7:43:66:9F:8F:26:C9:78:16:43:43:01:18:2D:7B:ED:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d38fe17-05e7-3ec1-9112-cca1b2ac1e74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.64.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:4b:55:33:d8:a6:27:d2:3b:53:80:ee:71:bc:50:76:62:03:
c9:56:d8:7b:67:7f:df:9a:00:05:2e:42:5f:1b:27:61:a0:d1:
34:31:b1:8a:e3:7c:2b:0e:55:40:6a:a3:41:37:62:75:8a:d0:
d2:52:cf:c8:b5:17:11:67:81:d2:4d:0d:7e:a2:0c:1f:23:51:
0e:1c:90:37:2e:94:fd:6b:ff:7a:b5:51:47:4c:f6:ec:2d:87:
5f:7e:cc:55:63:e2:94:2a:bf:e9:4a:a0:73:51:aa:78:5b:60:
a5:d0:b8:20:d1:32:fb:65:0c:65:64:39:95:e5:12:c9:7d:b2:
80:ae:00:80:4f:d3:28:fd:02:17:d1:19:42:0f:f4:17:dc:88:
61:40:6f:b6:00:ee:99:31:ad:20:2f:e4:22:50:fa:a7:19:90:
56:f6:38:4f:b7:e6:21:14:3b:82:62:41:28:ba:8d:99:9d:cd:
31:2f:3f:29:2a:24:d3:ae:a0:5f:3b:07:17:d8:e3:d3:5c:58:
b0:5b:43:82:d1:75:81:dc:fa:a8:ee:0f:ef:14:e3:5b:1d:3f:
73:fa:cc:29:74:dc:a6:b4:8a:e7:31:b0:3f:0d:73:95:cf:00:
85:4d:bb:ce:76:c8:cf:7c:54:de:ee:6f:c6:56:d6:a7:4b:d8:
9c:a4:21:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:42 2025 by rpki-client