Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/11395984-80f0-3cf1-a18d-81394db2b106.roa
File: 11395984-80f0-3cf1-a18d-81394db2b106.roa (raw, json)
Hash identifier: Lfl1KXeN+XRKc5fFBkq75ugS6TfPx6CX4mb5xqpAq0c=
Subject key identifier: E7:00:30:75:0A:15:4C:2D:FF:3E:88:03:07:73:C1:49:63:97:04:EC
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482AA86EC86EB290F84716C740
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/11395984-80f0-3cf1-a18d-81394db2b106.roa
Signing time: Wed 11 Dec 2024 02:50:13 +0000
ROA not before: Wed 11 Dec 2024 02:50:13 +0000
ROA not after: Tue 11 Mar 2025 01:50:13 +0000
asID: 13335
IP address blocks: 172.69.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:a8:6e:c8:6e:b2:90:f8:47:16:c7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 02:50:13 2024 GMT
Not After : Mar 11 01:50:13 2025 GMT
Subject: CN=f5f19533-18cf-4edd-a20b-ef6beb665989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:56:46:a3:b2:77:9b:6d:50:f7:07:31:39:ae:
18:79:2a:e3:b1:0e:40:f6:c2:7f:41:2d:69:ce:a6:
46:89:a6:6c:9b:f4:bc:c6:1e:77:d6:93:03:cc:d0:
07:0d:be:f8:c0:a2:58:6e:ef:43:61:4a:14:b5:cd:
0c:51:ac:da:97:07:59:e4:3a:b4:5b:67:9b:2e:9a:
bb:e0:b7:87:7f:47:5a:36:72:ec:8a:99:19:d3:f9:
dc:41:bb:c5:10:d3:e4:68:94:a8:67:f7:45:9c:36:
b4:74:04:ba:3e:36:bc:bc:2a:96:aa:52:dc:c8:48:
25:91:a1:2f:c9:ef:ba:e3:26:90:da:6e:11:75:5a:
05:a1:d4:ed:0c:82:2a:0a:e3:95:1f:94:be:bd:25:
22:4d:4d:1c:9a:f6:04:2d:aa:fd:62:92:9f:2f:40:
d8:30:31:2c:92:cb:1f:b1:51:a4:ed:6c:2e:24:23:
26:6f:22:f0:6f:d2:3b:ea:e0:0c:ae:67:e3:77:b9:
19:3c:72:eb:0a:ab:04:30:a9:2c:6d:0f:36:f6:36:
c5:22:91:0e:b7:18:92:8a:9e:4e:cd:e6:2d:44:bf:
f1:03:22:e7:ad:1e:72:6c:af:03:26:dd:de:58:df:
2c:a9:97:92:7f:49:98:f9:7a:4a:0a:1e:28:33:dd:
64:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:00:30:75:0A:15:4C:2D:FF:3E:88:03:07:73:C1:49:63:97:04:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/11395984-80f0-3cf1-a18d-81394db2b106.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:33:a8:80:4d:4d:e7:c0:26:ab:69:0d:25:e7:c6:78:12:a0:
70:cc:4d:3b:21:d1:b8:ee:56:48:67:4d:63:3d:42:f8:a1:75:
ab:47:b0:8b:64:34:0f:12:1e:ba:4e:e8:8d:87:7f:2c:1c:2f:
e9:ea:de:85:81:12:64:e0:32:51:e3:42:60:11:64:29:8f:f9:
0c:d0:ed:0f:93:6c:33:a4:1d:b3:46:8c:7b:f3:11:25:83:c5:
ee:b5:e6:7f:8a:d7:4c:32:77:1e:e9:0f:e1:71:09:e0:f6:08:
01:45:be:a9:ca:d9:8d:2f:6f:91:ce:46:5a:fa:d9:b1:c1:61:
7e:55:49:e0:c1:f2:d2:26:4e:9d:3c:0b:14:24:36:19:42:a7:
14:7a:55:95:e1:08:b9:6f:3d:aa:81:c3:48:f2:0a:9b:e6:f9:
8c:ed:04:6e:3b:9a:c2:4a:0a:7a:d3:0a:3c:74:b1:90:1b:27:
85:c6:7f:f0:74:db:0b:93:b6:44:62:45:49:de:e7:c3:05:3c:
5c:f8:5b:cf:11:08:74:53:16:cf:de:73:99:bc:c4:5c:55:50:
fa:b2:a5:f5:8f:73:17:82:46:04:cf:da:fa:9e:67:1c:40:ee:
33:d7:d0:fd:db:e8:4f:09:04:d7:bd:ad:54:3f:16:c0:e7:2d:
18:5d:c8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:37:50 2025 by rpki-client