Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/276c634e-f302-3b0d-8dc8-0ac2700dfb4d.roa
File: 276c634e-f302-3b0d-8dc8-0ac2700dfb4d.roa (raw, json)
Hash identifier: R7mSR/tE0jg/qSQbMLGJp+nEHrHUeWmKxT6EluZbS2I=
Subject key identifier: 95:62:D2:53:B9:B5:F7:5B:D6:AA:E6:F2:4D:72:06:37:22:08:EC:2A
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848283A5E2DD2961B86173C4640
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/276c634e-f302-3b0d-8dc8-0ac2700dfb4d.roa
Signing time: Tue 10 Dec 2024 05:56:50 +0000
ROA not before: Tue 10 Dec 2024 05:56:50 +0000
ROA not after: Mon 10 Mar 2025 04:56:50 +0000
asID: 13335
IP address blocks: 172.68.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:3a:5e:2d:d2:96:1b:86:17:3c:46:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 05:56:50 2024 GMT
Not After : Mar 10 04:56:50 2025 GMT
Subject: CN=94e64721-43c0-4dc3-af01-413b7a828ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8d:e6:fa:12:7f:f8:f2:ba:5e:ce:7f:51:ed:
3b:61:96:87:8f:e6:79:d5:4d:91:2d:c8:a3:29:51:
bc:d4:14:3f:f2:bf:d7:71:d1:16:0c:0e:c4:62:90:
99:4f:33:66:3b:a1:7a:74:2d:16:fe:50:f1:1b:ee:
68:ec:68:9c:93:04:ff:3e:64:2e:c7:a2:e4:f1:ee:
37:d2:f3:f1:45:64:dc:85:8c:a9:5e:67:f1:b9:c6:
9c:03:05:ed:be:0e:4f:62:dd:14:b7:8c:e3:06:82:
28:bc:01:1a:d6:5c:b5:e6:18:54:71:59:0c:7b:1e:
3a:bf:85:2b:99:1f:16:fe:de:e9:f3:80:29:eb:78:
d0:15:9c:97:c5:88:09:96:c6:c9:62:0b:54:d9:3e:
dd:2b:01:82:fa:03:bd:a2:c0:d4:36:ff:dc:2d:82:
30:bb:11:fd:88:f1:a6:92:2c:c7:c7:ab:dd:0f:6e:
1a:5c:1d:f9:4b:e6:42:9c:22:5d:7b:0e:88:21:a7:
78:be:0e:56:99:bd:79:44:20:f1:79:85:40:f1:72:
1b:f7:c8:75:6f:0d:ab:23:47:7d:46:8e:e8:17:87:
a8:7b:de:02:76:63:7d:bd:e5:7e:8f:05:eb:00:fb:
4f:06:f1:96:07:9f:e5:19:ef:e0:60:b0:70:05:b0:
8a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:62:D2:53:B9:B5:F7:5B:D6:AA:E6:F2:4D:72:06:37:22:08:EC:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/276c634e-f302-3b0d-8dc8-0ac2700dfb4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:4e:0b:08:4f:8c:8b:53:2e:77:72:11:8b:b6:84:99:3e:2d:
1c:e6:b0:05:54:37:fe:81:42:6f:4a:59:fa:44:40:4c:eb:62:
50:c8:10:28:91:30:8b:41:f1:98:4d:b0:d9:5b:0d:19:28:16:
83:79:0c:31:15:88:66:47:43:41:03:a6:c4:cd:88:1d:a2:ee:
cc:35:2a:e9:07:a1:0f:8e:81:82:2f:3f:68:44:17:13:32:fd:
bd:28:16:51:0b:ff:8a:44:28:8b:c1:81:a6:9d:ff:4d:16:eb:
53:e9:a4:01:5a:85:a2:ce:27:de:db:30:bc:e8:4d:7f:e8:dd:
05:b3:a3:ef:cf:f0:21:a7:47:94:fa:91:fd:a5:89:83:0f:b5:
c6:0b:32:68:d7:27:cb:fd:e8:01:9d:8b:e6:83:92:6c:5f:a4:
61:26:22:92:fb:72:5b:ee:44:81:c5:41:da:3b:79:80:12:b1:
40:dc:dd:8e:b7:56:9f:c6:31:3f:90:9d:ea:73:a9:c2:4e:de:
bc:08:56:c8:20:2c:85:2f:a4:b6:e8:fe:b5:77:36:d2:0b:89:
0c:bb:cd:c0:be:6a:bd:42:09:08:31:2d:00:30:d2:3e:53:5c:
52:ed:63:82:e9:65:8f:75:0c:5d:39:e5:44:2d:d2:50:1c:3d:
57:de:8d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:48:13 2025 by rpki-client