Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e8c213c-8feb-39dd-982a-ad58773612b4.roa
File: 2e8c213c-8feb-39dd-982a-ad58773612b4.roa (raw, json)
Hash identifier: WlNVrBKJcXaUZuy95ltTSjM7ahPmrilKpQtz44knnHA=
Subject key identifier: 4B:24:DD:9A:7F:85:75:DD:4E:C5:FC:07:A7:E3:B7:B0:77:2E:0C:55
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A98DAAFE8F01077DD6D55C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e8c213c-8feb-39dd-982a-ad58773612b4.roa
Signing time: Wed 11 Dec 2024 02:18:49 +0000
ROA not before: Wed 11 Dec 2024 02:18:49 +0000
ROA not after: Tue 11 Mar 2025 01:18:49 +0000
asID: 13335
IP address blocks: 172.68.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:98:da:af:e8:f0:10:77:dd:6d:55:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 02:18:49 2024 GMT
Not After : Mar 11 01:18:49 2025 GMT
Subject: CN=f6200ade-2a03-4bbc-83a7-72ef542e8acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:79:13:ea:cf:0e:21:ac:33:97:e4:47:73:f0:
d9:27:1d:06:5c:a9:34:0b:4e:36:e5:67:82:c1:f8:
4d:8a:9a:bd:dd:08:99:82:88:8f:00:f2:f3:c0:4b:
7f:0d:f0:f0:1d:77:7f:4f:ec:76:c9:cf:4d:10:6d:
f7:56:1f:46:40:b2:41:a5:13:83:ab:cc:f5:57:3f:
df:28:96:4d:eb:54:c7:28:0c:63:0e:09:b6:c9:37:
92:51:3e:01:5e:c9:44:d3:59:e6:dd:52:8d:32:0e:
e6:9f:c9:16:c4:ea:90:d3:83:f9:6f:a9:fa:ac:b6:
6b:7d:65:34:0a:d5:d3:5d:9f:5e:5c:fd:c6:df:ca:
ec:cb:46:bd:e1:c4:8c:e1:97:de:38:9b:32:0d:7c:
42:7b:45:35:85:91:28:ce:62:55:88:6f:87:3d:fa:
1d:6b:f3:6b:80:da:25:b1:8c:5a:3d:98:54:0d:94:
fc:11:3d:8b:9f:a3:a0:68:a6:5a:12:9b:01:c1:bf:
f4:37:92:bb:b7:42:ac:f8:6c:3e:cc:f8:71:6f:90:
7a:39:58:46:41:74:69:7c:6a:ab:22:5c:35:f1:04:
bb:98:01:03:ac:bc:45:de:bc:5d:2a:ba:a4:21:3b:
62:b5:2a:58:50:6d:33:08:57:45:73:59:47:61:4d:
2b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:24:DD:9A:7F:85:75:DD:4E:C5:FC:07:A7:E3:B7:B0:77:2E:0C:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e8c213c-8feb-39dd-982a-ad58773612b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:33:a1:c3:63:b3:b7:cf:1d:5e:09:f7:fa:fc:65:2a:b3:0c:
ea:53:0e:11:fb:a8:a7:60:e5:96:1a:c1:bb:7c:c5:41:b9:8d:
82:44:b4:54:c7:7b:bc:32:d7:e0:a3:d1:f4:78:b1:e2:6d:7c:
4c:a2:c1:53:7c:54:bc:d5:83:c7:1b:e0:de:c3:ef:e0:6a:4e:
c0:2d:1f:07:98:44:5a:51:54:a8:cd:71:09:41:b3:41:4d:00:
13:54:dc:12:a7:a3:ab:67:c8:10:16:98:96:ed:04:be:b6:93:
9f:ef:48:32:31:dd:57:0a:7c:2c:eb:da:65:ea:ca:c6:9d:03:
a5:2d:09:c1:c2:4f:0a:75:46:ae:67:8d:5b:3b:b4:6d:d3:46:
0e:8e:5d:3d:54:61:22:55:17:16:39:f5:31:e0:16:91:60:ed:
2a:9d:9d:57:86:ab:ca:8f:43:8d:9a:e9:f6:03:8e:65:ab:12:
1a:6d:4e:bf:02:1f:3e:90:52:47:e4:fe:d3:44:6f:03:ca:e6:
94:7a:11:cf:fd:ef:f9:d6:58:c6:d5:c8:92:de:83:61:dd:86:
80:cc:69:42:70:d4:d7:d5:ab:ed:32:ef:e0:c5:f5:77:8d:a3:
c4:28:52:e6:1e:52:60:d6:07:18:ac:b2:f6:5c:3a:c7:3a:af:
a4:a3:dd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:25 2025 by rpki-client