Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5130b2fb-8c38-345e-856b-12dd5ca7a4d9.roa
File: 5130b2fb-8c38-345e-856b-12dd5ca7a4d9.roa (raw, json)
Hash identifier: OJ42/DLoeFpJZ9KGlEAQC9k9qc7R28UR7aemz+Q8UVI=
Subject key identifier: 2B:09:33:86:8F:70:B7:AC:A6:66:80:21:AB:82:A6:AF:7F:65:5C:D7
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A9A508899F9FEF03DF7BA40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5130b2fb-8c38-345e-856b-12dd5ca7a4d9.roa
Signing time: Wed 11 Dec 2024 02:21:46 +0000
ROA not before: Wed 11 Dec 2024 02:21:46 +0000
ROA not after: Tue 11 Mar 2025 01:21:46 +0000
asID: 13335
IP address blocks: 172.69.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:9a:50:88:99:f9:fe:f0:3d:f7:ba:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 02:21:46 2024 GMT
Not After : Mar 11 01:21:46 2025 GMT
Subject: CN=187d05fb-8dd0-47cb-9b74-3ec6961856e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a1:c7:ba:6d:79:ac:42:6b:c0:f9:9a:bf:29:
8e:39:40:93:78:71:b4:98:95:bc:b1:09:92:a4:a3:
18:9a:f7:d6:6c:e9:6d:3d:1c:d8:b0:6d:ee:f5:8c:
c8:18:8e:9c:12:fb:f5:37:10:95:ab:5f:c5:f6:49:
33:82:19:58:0f:8c:3d:46:4b:67:32:a7:4c:ca:e9:
b2:00:73:83:54:9a:a6:bb:2f:cb:ff:14:00:55:9a:
3c:1f:a7:a2:04:0a:55:0f:cc:db:19:93:39:c3:7d:
6c:23:80:b4:84:4e:8b:75:7c:fc:5b:5d:17:9e:7c:
0c:58:25:67:8f:fb:ec:f3:5e:91:59:85:6a:4a:a9:
cf:7c:27:36:41:c7:67:6f:98:bb:7b:ec:94:84:f8:
b0:ba:4b:cf:80:c7:2a:07:a5:01:d1:ff:45:27:0c:
d8:b0:2e:2d:c1:9e:02:2b:47:76:cd:20:10:09:18:
00:30:d7:3f:be:13:05:49:a9:c6:b8:73:65:26:2d:
a8:6c:60:b7:59:d7:20:7b:db:20:39:4e:88:7b:63:
35:e8:8e:fc:3d:31:a6:0b:1e:e9:ce:3f:c3:0f:fe:
90:19:89:1f:59:70:ea:e4:55:98:64:20:99:35:81:
c0:8b:5c:17:86:f3:e0:78:6f:42:31:a2:f5:76:16:
c3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:09:33:86:8F:70:B7:AC:A6:66:80:21:AB:82:A6:AF:7F:65:5C:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5130b2fb-8c38-345e-856b-12dd5ca7a4d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:79:da:55:25:db:d5:64:3c:68:da:de:c5:a0:ff:45:6b:fb:
16:05:15:10:28:5e:51:03:b3:5e:42:7c:82:14:24:e5:5b:f4:
7d:50:08:b6:b9:2d:a9:8d:18:c8:e3:2a:ba:7d:a8:15:0f:68:
2b:4b:0c:f9:73:5b:3c:c4:54:86:cb:27:ef:72:0c:a4:ca:a7:
49:ae:0f:1b:3e:66:a9:f5:6b:a7:a0:d1:d7:3c:4b:be:7b:15:
03:7a:82:e9:bc:20:dd:9b:1b:a4:7e:d2:1d:f2:7d:49:6d:cd:
7e:4a:18:a0:8f:d9:bc:6c:cf:5f:04:05:10:25:ad:2a:b4:23:
c0:df:cc:e0:c5:04:e3:ff:cb:ec:52:58:94:2d:92:33:c6:ad:
11:75:a1:92:28:c0:94:53:cf:2f:d8:df:81:1c:80:0c:24:60:
58:6a:5f:56:2f:4d:2f:36:23:0d:4d:cd:c4:81:57:6f:d3:be:
05:04:86:25:51:8a:29:40:0a:d4:97:ea:73:bb:80:b6:02:7e:
b8:6a:21:c9:df:84:7f:2f:03:b2:e8:54:cf:04:90:c5:98:99:
c2:93:a6:e7:07:6d:42:e4:52:ea:3a:7b:06:b1:5b:01:fd:5b:
26:6b:32:44:b3:f6:04:e2:93:db:c9:ed:50:0a:fd:b6:28:3a:
2f:57:aa:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:45:30 2025 by rpki-client