Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17b45d6a-4c9a-3d6d-8ecb-09dfb8816a01.roa
File: 17b45d6a-4c9a-3d6d-8ecb-09dfb8816a01.roa (raw, json)
Hash identifier: kAPCHWbmfHFqiNtkEMd6Tr/3tLPNHxHvOiQvXVJd7Mk=
Subject key identifier: CA:5D:99:97:8F:79:9C:B3:DB:4D:8A:26:39:72:D8:94:56:01:4B:B5
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482AAD490BB866627747CF3C80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17b45d6a-4c9a-3d6d-8ecb-09dfb8816a01.roa
Signing time: Wed 11 Dec 2024 02:59:59 +0000
ROA not before: Wed 11 Dec 2024 02:59:59 +0000
ROA not after: Tue 11 Mar 2025 01:59:59 +0000
asID: 13335
IP address blocks: 172.69.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:ad:49:0b:b8:66:62:77:47:cf:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 02:59:59 2024 GMT
Not After : Mar 11 01:59:59 2025 GMT
Subject: CN=16101528-e6fa-4a1d-8a9b-ad2c689b23e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6e:45:f5:d5:75:9d:19:98:8f:f3:ca:a5:b8:
01:e1:0e:25:9e:78:2c:03:b1:bc:62:c1:54:86:02:
99:9e:f2:a7:07:d0:c7:fe:20:c7:f4:6a:c0:16:c6:
e9:2e:27:2d:61:10:39:c4:97:fe:1a:16:fd:16:ec:
e0:3f:9c:9d:8a:fa:a6:6a:b0:65:53:c5:56:c2:0c:
a2:0d:bd:80:eb:01:0e:c1:93:c0:7e:97:36:32:2b:
76:54:ac:7b:94:69:8b:9f:3f:dd:51:7a:ef:c2:90:
e3:93:93:e7:e1:46:ad:14:24:4e:80:b8:53:36:dc:
26:41:a5:2f:98:e0:02:f8:94:c1:18:60:90:59:29:
8d:b4:54:76:af:d9:3b:87:0c:22:cb:0d:95:2f:87:
06:ba:8e:68:7e:f0:66:52:4f:09:06:2e:e8:10:75:
d3:08:6b:a7:30:73:70:4e:b0:ea:d3:36:c0:f0:36:
19:60:be:3b:91:7b:87:ed:82:90:47:b8:f6:9e:78:
97:85:8e:77:f5:16:2a:7f:4d:6d:12:61:0c:4b:9c:
f7:a8:5a:13:dc:f3:1c:c0:e8:21:c4:67:59:5c:49:
fb:7c:b6:bf:e5:0e:d7:dc:ee:1b:54:8d:1f:62:02:
e9:1e:42:ed:ad:63:67:04:f0:58:4e:0d:c2:7c:65:
19:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5D:99:97:8F:79:9C:B3:DB:4D:8A:26:39:72:D8:94:56:01:4B:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17b45d6a-4c9a-3d6d-8ecb-09dfb8816a01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:56:48:13:b3:b6:19:74:f6:9d:37:e8:e9:98:6a:4e:13:02:
55:03:4b:27:3f:e7:90:e9:5e:ba:0d:2b:02:fe:d6:9c:85:af:
6a:dd:6d:c4:ff:b9:0f:b2:9c:c7:4f:9a:1b:45:50:3c:13:4e:
92:4c:0c:f9:a5:87:de:73:be:68:29:bd:f8:f7:71:d5:32:54:
26:a2:fd:47:c2:75:29:8c:52:61:87:22:fa:95:7f:c2:40:d5:
ee:86:b3:3d:ef:a6:35:30:cd:e2:11:f3:d0:bb:4e:32:1e:e5:
9d:a4:51:05:1f:c8:35:8d:fc:28:81:a1:90:a8:9c:7c:1e:f9:
ca:a0:b8:dd:f8:30:0d:03:cf:97:4d:b0:a6:e0:0a:80:6f:2a:
e6:73:de:3d:e9:a5:54:5e:33:78:2d:69:c9:2d:50:58:6b:7a:
00:70:4b:e4:ca:8a:21:87:f0:94:ed:13:e7:4b:77:23:87:74:
38:b7:79:b3:20:31:53:4b:f8:39:77:31:13:38:37:36:84:26:
de:85:32:ea:7d:68:83:a6:a5:92:9f:91:a4:78:43:26:06:0f:
c4:26:42:c6:cd:ec:72:12:0d:da:47:22:9d:22:b7:5c:c3:fc:
eb:ec:c0:93:d1:06:6a:c2:59:21:26:f7:67:ec:f7:e5:89:e5:
1a:c2:7d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:56 2025 by rpki-client