Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4780b144-3326-32a1-a1a7-24cf28858004.roa
File: 4780b144-3326-32a1-a1a7-24cf28858004.roa (raw, json)
Hash identifier: G56Z+h92cx8vgu6epBQA/K32DgHJiGFYcWCrp87+PAc=
Subject key identifier: CA:11:31:7C:CB:AA:C1:DF:58:D8:29:72:60:BC:5F:36:5C:E1:9C:92
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482AAD379D20BF94181A2DC900
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4780b144-3326-32a1-a1a7-24cf28858004.roa
Signing time: Wed 11 Dec 2024 02:59:51 +0000
ROA not before: Wed 11 Dec 2024 02:59:51 +0000
ROA not after: Tue 11 Mar 2025 01:59:51 +0000
asID: 13335
IP address blocks: 172.69.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:ad:37:9d:20:bf:94:18:1a:2d:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 02:59:51 2024 GMT
Not After : Mar 11 01:59:51 2025 GMT
Subject: CN=14a29171-1cd0-49e4-94c4-86b39b216782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3a:40:75:5b:7d:e9:b6:32:09:78:d5:0a:76:
0c:89:ba:c2:53:b1:04:0b:d9:47:f8:6e:0d:e2:22:
1e:f1:e3:d9:22:7e:1e:b7:cf:77:d6:2f:02:60:68:
6d:80:f3:b1:de:a9:66:f7:43:3b:dc:14:c0:25:15:
21:ac:c1:fe:d7:52:64:57:e6:72:5a:09:20:e7:03:
4f:a6:fb:33:0d:e4:f8:cf:8c:6d:85:fc:f9:f0:90:
65:1a:56:99:e5:c9:40:8e:b5:df:de:c5:1e:4b:bc:
51:7e:1c:a7:c0:6d:82:25:82:fa:05:cb:02:e6:fe:
60:b5:d4:2a:8a:01:47:88:01:81:07:d8:ff:7f:9f:
e2:27:30:a4:ed:13:d0:9d:eb:57:dc:92:50:e4:3e:
d0:a4:ec:c3:5f:f0:52:80:c1:fc:22:50:a6:3b:cd:
c9:17:04:13:8e:b1:40:4c:1d:fb:c2:49:f6:4a:35:
a8:f1:07:ec:88:72:c3:48:2d:95:53:9e:3c:d2:de:
09:41:ea:b9:4c:5f:d7:d4:53:31:37:30:c6:63:04:
74:ec:23:ca:ce:d6:5d:6d:0f:d5:62:5f:07:c9:93:
b9:32:d1:4e:99:7c:80:18:41:2e:55:7c:3b:c8:02:
6f:3e:f4:b0:03:f6:34:26:5c:a4:57:3b:68:36:b5:
05:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:11:31:7C:CB:AA:C1:DF:58:D8:29:72:60:BC:5F:36:5C:E1:9C:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4780b144-3326-32a1-a1a7-24cf28858004.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:0a:63:0b:a2:ea:26:27:d7:ff:48:8f:1c:b8:6e:c4:41:b5:
74:d0:48:78:76:c5:60:93:a8:02:77:8c:51:49:6d:fe:ff:ad:
ac:53:9e:08:95:f6:49:b6:e1:cf:d6:54:2a:c3:12:bb:c6:ac:
08:c9:b2:37:a5:1e:b5:08:6a:ca:10:e8:80:87:5b:d0:7c:45:
be:54:82:d8:dd:c1:37:fa:ce:af:0c:85:04:e3:9c:b0:ec:b8:
3f:51:3a:1f:d4:1d:01:52:2d:30:aa:6f:78:a6:db:86:9e:f5:
1c:90:d9:a3:8e:ba:c4:69:37:63:fa:d5:32:21:6e:71:08:c9:
87:58:40:19:8f:ee:74:ea:90:b7:cf:dd:f9:d0:ce:0c:ca:1f:
ad:66:ad:03:02:74:95:4f:0d:25:59:50:64:48:e0:cf:0a:65:
fd:9c:a0:1f:bb:f1:53:b8:db:d8:e9:b8:bd:57:79:c7:17:58:
bf:f7:48:22:f7:7f:65:e0:51:1e:89:ca:86:c0:0f:c8:f5:2b:
59:ea:ab:84:d1:96:d9:a6:3b:78:d2:33:fa:7c:41:0d:d8:d9:
75:75:8c:de:6b:94:df:7d:3f:0b:53:54:b3:84:29:57:83:a0:
4d:c2:55:86:50:cc:2c:28:29:0a:79:49:4c:00:0d:af:99:b5:
48:b5:47:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:11:18 2025 by rpki-client