Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4fe4614b-69cd-30b6-a777-0b22e54dd246.roa
File: 4fe4614b-69cd-30b6-a777-0b22e54dd246.roa (raw, json)
Hash identifier: rBDnXJFPfB6H6Gx7qLd9zy2iAmS6URAZqK/7ZZksSro=
Subject key identifier: D1:AD:70:6D:92:53:E6:2F:4B:38:7B:8E:CA:F9:13:F2:47:71:09:63
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848319592895D39A3031F4EF800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4fe4614b-69cd-30b6-a777-0b22e54dd246.roa
Signing time: Fri 13 Dec 2024 14:22:52 +0000
ROA not before: Fri 13 Dec 2024 14:22:52 +0000
ROA not after: Thu 13 Mar 2025 13:22:52 +0000
asID: 13335
IP address blocks: 172.68.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:31:95:92:89:5d:39:a3:03:1f:4e:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 14:22:52 2024 GMT
Not After : Mar 13 13:22:52 2025 GMT
Subject: CN=4f5e152e-aa3d-48a6-a420-9cd9280a399a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:58:e1:0e:1c:fd:fa:2b:c2:1a:09:ec:02:8d:
fc:aa:f2:96:24:68:c3:76:ac:cf:e9:d1:99:cd:9d:
98:82:46:25:94:43:04:9a:52:03:5c:06:67:2c:01:
94:30:17:12:0c:82:1d:1b:38:b6:e4:a2:58:47:58:
8b:03:0f:8d:65:c3:c9:b4:2b:63:2e:72:75:fa:ca:
d7:e8:99:25:89:38:c5:60:a7:47:1b:03:a5:e6:d8:
91:37:46:77:b6:e0:3a:c1:aa:1d:3e:05:9f:93:ce:
d9:24:ee:8b:70:bc:36:1c:27:1a:48:f4:0a:7c:bf:
8b:80:38:db:76:e3:21:7b:c3:86:1c:f5:6e:4e:b0:
f1:6d:72:81:6c:8c:c5:d0:b7:f4:8a:ee:bd:84:d6:
a0:17:91:28:f1:97:bc:e8:57:f6:c8:e4:2e:e7:a6:
4f:63:a6:fc:5a:62:1d:2d:db:97:70:e1:db:9d:1f:
8f:45:92:7d:a3:8d:22:0b:e6:68:20:32:76:29:94:
42:bb:4f:a6:1e:3d:40:96:9d:6c:29:4a:03:7f:d3:
0e:c3:b9:56:12:a0:1d:39:08:cc:81:d9:0b:b1:a2:
4a:76:4d:b0:49:2e:76:8a:71:5c:21:e8:86:9a:0e:
7e:36:2f:04:b2:22:ee:f7:42:b6:24:36:22:cd:9c:
ac:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AD:70:6D:92:53:E6:2F:4B:38:7B:8E:CA:F9:13:F2:47:71:09:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4fe4614b-69cd-30b6-a777-0b22e54dd246.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:47:b0:0f:55:bf:9d:99:fe:8d:27:e8:57:10:64:27:9f:34:
0f:d7:be:fc:5e:83:fb:6d:c4:11:57:fa:24:8e:95:11:98:4e:
df:b3:ce:20:46:69:5f:03:4f:e9:62:e3:d3:7e:fc:4b:b3:20:
3b:62:ee:ca:61:dd:ea:71:62:0d:8d:b3:c4:9a:2a:e2:98:37:
92:45:a6:09:34:87:f4:dd:dd:fb:96:dc:4d:d3:5f:30:4a:90:
f7:12:1b:8b:ad:b9:b6:fa:49:78:f8:9f:2a:ff:b0:ca:54:15:
b9:e4:f8:43:bf:12:c4:f0:e5:f2:0b:f7:19:bf:83:64:5f:13:
03:4a:2e:84:07:16:b4:1c:3a:45:70:0d:00:c4:d4:44:27:92:
65:a2:ce:2d:6d:ae:33:e8:dd:04:81:34:e1:db:2e:c8:2d:f7:
5a:54:cc:93:a0:bd:3c:25:80:e2:b2:f7:e5:ef:02:e4:1a:18:
6e:3d:80:45:87:73:90:59:a0:5f:a4:ed:e3:62:d1:5c:84:22:
cb:2f:c3:1b:e4:ea:87:1c:8b:11:fa:0c:1f:00:2a:4a:f6:b7:
94:de:59:88:15:8b:55:4a:2a:c3:91:5e:67:7a:27:13:a2:c4:
40:93:f4:d1:df:e7:19:fe:49:c3:33:7b:e2:f6:8a:50:1c:35:
b7:b9:94:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:59:48 2025 by rpki-client