Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bdab94b-7ef8-3231-84b3-1c6fd77bb119.roa
File: 5bdab94b-7ef8-3231-84b3-1c6fd77bb119.roa (raw, json)
Hash identifier: 355Q1z/uz6j+GCn4+apcsFIzl43w3MGNR2l5qUKXo1g=
Subject key identifier: 0B:2E:AB:BF:45:22:3F:22:8F:40:CA:A9:F0:EE:18:62:4C:2E:F6:F4
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A8C37F61FFFD3F468E823F4
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bdab94b-7ef8-3231-84b3-1c6fd77bb119.roa
Signing time: Wed 11 Dec 2024 01:53:22 +0000
ROA not before: Wed 11 Dec 2024 01:53:22 +0000
ROA not after: Tue 11 Mar 2025 00:53:22 +0000
asID: 13335
IP address blocks: 172.68.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8c:37:f6:1f:ff:d3:f4:68:e8:23:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 01:53:22 2024 GMT
Not After : Mar 11 00:53:22 2025 GMT
Subject: CN=a0f98464-2514-4ad8-a2c0-bc948e3c8720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f6:fa:07:90:12:22:8d:0e:d4:1d:ed:14:7c:
ab:7c:d0:41:df:7d:37:5d:54:08:bc:d7:50:4c:3d:
27:8f:18:e4:d1:c5:dd:cd:74:63:53:59:89:4a:97:
20:b3:ea:69:02:1f:c8:0b:4a:74:95:92:b2:9d:23:
cc:0f:a0:e4:b8:da:d8:ae:f6:e4:0a:31:ce:a3:f3:
39:67:63:64:d7:4d:eb:ef:3a:c1:8a:df:74:10:15:
2c:01:82:71:d3:a4:1e:2c:81:e2:bf:83:ee:0f:11:
9e:87:d5:53:93:cc:7a:fe:49:b3:bd:e8:4d:3b:98:
3a:ef:c3:95:62:fb:af:37:0d:5d:4e:28:8b:2f:85:
e5:cc:6f:3a:17:af:fc:5f:61:90:d9:13:b8:53:18:
57:76:2f:12:06:ad:2c:c2:0c:ac:fa:3c:6d:25:00:
0b:aa:e0:31:43:e8:1a:ab:9b:51:22:48:89:b1:e3:
6c:1a:07:08:df:4e:3c:9b:cd:c1:96:44:ca:ca:a8:
72:7c:1d:b0:b1:c3:2a:bc:99:a4:59:7e:d1:df:37:
77:0a:56:af:8c:0d:ff:13:85:2d:b2:55:4f:2a:d0:
5b:8c:52:ca:33:2d:f9:8c:9a:cc:0e:ae:5d:0c:1a:
c0:54:b8:b2:02:7d:6d:4c:98:81:d7:81:80:c9:2f:
93:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2E:AB:BF:45:22:3F:22:8F:40:CA:A9:F0:EE:18:62:4C:2E:F6:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bdab94b-7ef8-3231-84b3-1c6fd77bb119.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:76:ac:c5:47:2d:37:a7:ba:12:30:37:b4:af:e5:56:f2:48:
c7:36:30:fc:66:64:4e:b3:13:b6:c0:9b:86:72:e8:d5:05:14:
f6:cd:84:27:9d:85:e0:28:0d:37:ff:03:b2:a0:c2:93:ca:5f:
1b:47:6e:31:6e:81:8c:d6:88:5d:05:57:00:28:b7:7e:e3:e0:
e2:92:b1:78:11:1d:21:6a:fe:9b:b1:77:74:a9:ab:bc:3e:f8:
07:51:c0:67:9a:65:91:b5:91:7a:21:22:12:c4:f8:20:be:2e:
b3:92:34:d4:1a:8a:55:df:e5:ec:d7:52:33:1d:df:77:ff:f6:
b0:05:82:d1:22:ce:de:0e:f6:93:2a:60:f4:46:3b:4b:28:29:
e4:a6:6f:68:fb:fb:5b:0a:47:f4:cc:85:a3:7d:aa:bb:c1:63:
71:32:bd:0d:40:95:14:9d:6a:f0:63:b2:3d:3d:67:d4:a8:34:
51:b7:1f:60:35:41:2a:0f:05:7c:22:2e:f3:f5:fe:62:18:43:
80:26:8d:ff:e3:c7:b6:70:1b:58:f1:3b:23:39:a0:d9:6e:7d:
c9:4d:9e:b4:95:da:f3:d1:89:80:d9:06:44:ba:6e:3b:c8:1a:
38:7d:94:9a:85:6d:a2:53:cb:9f:a5:9b:bb:26:f4:50:62:10:
81:1c:e1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:37:49 2025 by rpki-client