Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e077b92-4970-3931-948c-73006961edad.roa
File: 2e077b92-4970-3931-948c-73006961edad.roa (raw, json)
Hash identifier: vEACI2ItqGjcjVvWEdUNt8UheVXXJLEXbNTlDSkFDTI=
Subject key identifier: CA:2C:26:31:3B:10:59:60:6C:26:9B:69:9B:04:E8:B9:45:6D:67:81
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A8CD4CDF1A06E046EBED380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e077b92-4970-3931-948c-73006961edad.roa
Signing time: Wed 11 Dec 2024 01:54:36 +0000
ROA not before: Wed 11 Dec 2024 01:54:36 +0000
ROA not after: Tue 11 Mar 2025 00:54:36 +0000
asID: 13335
IP address blocks: 172.68.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8c:d4:cd:f1:a0:6e:04:6e:be:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 01:54:36 2024 GMT
Not After : Mar 11 00:54:36 2025 GMT
Subject: CN=fc528edc-5e91-4272-8883-f12a3fa2383a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1a:33:ac:8a:a6:9c:ab:1a:fa:9e:2a:ab:b0:
fd:4e:57:87:de:c4:03:d0:28:1b:b0:34:3f:76:f1:
7e:bf:55:07:6c:af:9f:b8:a2:0b:8c:1f:70:3c:75:
40:36:c3:24:ff:9d:40:21:e0:3f:a9:1b:3d:02:77:
1e:f5:6c:ed:07:40:e4:8e:7e:ac:27:4e:c6:f0:f9:
e5:9d:31:dc:0c:8b:7a:77:5d:b5:a5:8d:ab:7a:8e:
cd:e0:2a:37:c0:6c:22:8a:bb:a0:f9:a5:82:b6:e0:
d8:25:5a:20:38:0c:7e:da:26:9e:23:45:d5:2c:f2:
f6:f3:3d:5f:d3:24:f2:c1:a0:92:6e:9a:4e:44:18:
55:de:43:0c:ae:ec:74:9e:b9:26:e8:b5:24:38:f7:
ba:8e:46:54:8d:6f:43:13:64:a4:c6:89:0c:fd:a8:
81:98:e0:cd:03:ee:c1:59:a7:b9:ef:86:84:b5:4c:
71:ea:50:c9:22:d4:42:c3:84:04:eb:b5:2d:6a:a2:
99:1b:f8:d2:16:85:fc:5f:5e:c2:29:98:0a:55:50:
a8:ee:a0:b5:48:67:4b:02:af:4a:5d:23:8f:31:b6:
88:0b:5d:22:77:2b:01:21:c3:bc:a6:0b:80:59:7b:
c7:73:ff:66:79:18:05:39:e2:66:15:e1:87:f6:42:
20:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2C:26:31:3B:10:59:60:6C:26:9B:69:9B:04:E8:B9:45:6D:67:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e077b92-4970-3931-948c-73006961edad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:03:e4:56:d9:7a:98:80:1a:24:3e:17:97:b0:d3:17:cc:5e:
05:b6:00:2e:4b:fc:40:ff:46:c3:b8:22:bc:36:38:b2:78:b9:
b0:52:ca:ba:19:cf:a5:d7:89:6a:3f:cd:29:9d:5c:6c:32:8d:
9e:2b:1f:fe:db:fe:e8:0c:00:39:32:1f:d8:87:68:b4:9f:ce:
83:71:a6:c1:81:8f:fa:c5:26:76:8e:d7:66:6d:2c:8d:a2:39:
35:7c:73:d9:9e:52:e8:e0:15:3f:a1:41:75:8c:e9:13:eb:2a:
59:69:65:18:3b:79:fe:ed:2f:df:fa:a9:40:a2:22:aa:f5:28:
51:ff:39:1b:ab:85:2b:f5:7f:15:03:a6:80:74:13:f7:d6:cd:
5c:e2:94:5d:a4:48:53:14:06:b7:0f:5a:6e:40:8a:31:f1:ba:
bf:b9:7d:66:ad:31:08:e8:e2:33:4c:5a:84:6b:e8:12:93:2b:
b6:be:b3:ae:0a:57:46:f0:c4:91:11:12:99:00:cd:d0:f4:aa:
2f:fe:d6:43:1d:5f:70:72:24:c3:14:66:24:bc:40:48:54:e3:
54:c7:ef:40:41:ef:c3:90:0d:02:11:fa:56:bd:2e:b1:b5:57:
ba:4f:ca:58:c7:99:f9:2d:5a:58:6b:9b:43:37:e5:9f:a7:56:
9b:52:52:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:09:42 2025 by rpki-client