Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d73012e-d6ab-397f-9a31-92d416e3c1aa.roa
File: 5d73012e-d6ab-397f-9a31-92d416e3c1aa.roa (raw, json)
Hash identifier: MV8Yb7McfPIe+LF4hThvPEt2X7vpLkTUHx7uhW6YL0o=
Subject key identifier: 6D:7A:9F:A7:77:B3:FB:14:E8:1D:0C:9E:3D:28:C4:57:76:0E:C0:8F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A912939B375FF017C4DFD80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d73012e-d6ab-397f-9a31-92d416e3c1aa.roa
Signing time: Wed 11 Dec 2024 02:03:19 +0000
ROA not before: Wed 11 Dec 2024 02:03:19 +0000
ROA not after: Tue 11 Mar 2025 01:03:19 +0000
asID: 13335
IP address blocks: 172.68.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:91:29:39:b3:75:ff:01:7c:4d:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 02:03:19 2024 GMT
Not After : Mar 11 01:03:19 2025 GMT
Subject: CN=dcbd9289-9186-46e6-9218-e424f3ad05ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:68:44:d0:ac:fa:e7:07:4d:3b:26:11:71:ab:
1f:68:d7:78:d3:68:6a:19:2c:d1:dd:fd:1a:fb:6b:
da:7e:c9:9a:6d:5c:16:d6:15:d2:b0:8c:0a:6c:0e:
98:92:09:bd:78:d0:59:0f:6a:f0:1a:32:4a:5a:38:
ba:cc:b2:d9:a3:50:45:83:58:a4:ff:26:b3:db:36:
b1:c1:9c:e3:e2:dc:9d:d6:4e:b6:3c:66:69:01:24:
0a:f0:88:0d:cc:f2:c8:b0:6a:e1:ef:a3:69:5c:f5:
16:a0:26:dd:b4:96:da:e8:2e:f3:aa:6d:d8:e9:a5:
b1:f6:78:fd:90:1d:aa:b9:11:1c:80:bb:d5:dc:40:
65:93:54:9f:d6:6e:91:0d:08:19:ab:91:10:7e:5b:
63:cf:93:0d:86:5e:b5:f7:5c:78:bc:68:fe:a2:f3:
03:95:41:d8:32:7c:f0:35:55:9a:5d:bc:17:3f:e5:
ed:c4:e6:45:81:d0:c4:94:e9:54:08:93:67:2c:a2:
bc:d5:a8:e5:f6:47:f9:21:bb:40:67:bb:82:3d:3d:
03:74:f9:23:3b:2e:07:60:0a:42:f5:57:4e:78:ea:
ff:5a:75:17:a0:38:97:56:2a:49:c3:30:b5:fa:31:
6e:e0:2f:80:81:c4:cc:e2:0b:0e:93:89:0b:43:c8:
7e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7A:9F:A7:77:B3:FB:14:E8:1D:0C:9E:3D:28:C4:57:76:0E:C0:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d73012e-d6ab-397f-9a31-92d416e3c1aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:66:8f:2e:40:81:b3:a9:ec:0d:76:de:ac:4d:a4:7f:90:36:
4e:35:a3:a0:90:a0:d5:29:2b:7f:d0:09:ca:5b:1f:12:c7:4c:
c1:9c:1e:74:9a:49:7d:a6:60:70:11:c7:4d:80:9d:bd:ec:7a:
7c:5f:47:ef:7f:6d:0a:ba:9e:b3:04:dd:de:07:1f:95:c2:46:
6a:1d:ca:f4:d3:4e:fb:54:65:f8:1d:ab:da:37:59:27:80:29:
e2:81:1d:33:95:91:d7:bf:0b:17:31:62:4f:2c:20:03:b4:b8:
d8:0a:00:9d:0f:f7:c6:7f:14:8f:41:e6:27:ab:5d:cc:49:c9:
0e:01:75:32:a9:df:ac:fd:33:b6:57:62:86:a3:e9:d1:5e:88:
3a:f6:60:48:75:d1:d5:aa:81:29:e6:f2:16:1a:51:df:ba:7d:
26:ed:b1:61:76:db:9a:be:52:28:25:bb:e2:69:c5:76:c9:a1:
35:59:10:b4:1a:f5:c0:03:18:7f:c7:44:31:53:22:3e:04:48:
61:04:1b:dd:93:a4:6a:9f:a1:90:1b:b5:8b:9e:04:f0:bf:f9:
1c:42:8e:15:74:f3:85:6f:3d:1d:10:5a:72:d1:de:02:0a:ff:
f8:3d:40:f3:f4:62:d1:75:62:37:a6:f4:6a:8b:2b:c9:e9:f0:
62:6c:1d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:53 2025 by rpki-client