Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5dcaeb10-b7cb-3505-8e13-e528c0587c0f.roa
File: 5dcaeb10-b7cb-3505-8e13-e528c0587c0f.roa (raw, json)
Hash identifier: 3tEAyP18aKcdRAkqq8ukyfv1plOpG//T7xD95X81kuI=
Subject key identifier: 40:14:47:56:7B:38:86:CE:3C:FE:98:F4:A3:E0:44:7B:BE:A0:44:DE
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848281AD28A0FD86B661E4B5680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5dcaeb10-b7cb-3505-8e13-e528c0587c0f.roa
Signing time: Tue 10 Dec 2024 04:53:16 +0000
ROA not before: Tue 10 Dec 2024 04:53:16 +0000
ROA not after: Mon 10 Mar 2025 03:53:16 +0000
asID: 13335
IP address blocks: 172.64.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:1a:d2:8a:0f:d8:6b:66:1e:4b:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 04:53:16 2024 GMT
Not After : Mar 10 03:53:16 2025 GMT
Subject: CN=d39a4b72-37c6-4451-8eba-d22307b7dabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3b:18:60:4d:47:67:91:46:3e:02:e7:5f:42:
48:0d:09:6c:9f:65:dc:db:2f:5d:75:81:c3:1a:bf:
5b:10:e2:17:58:7a:33:b1:2e:e3:e7:44:a2:fc:48:
d7:fa:6f:a2:80:e1:0e:bd:92:35:e1:5d:8b:b8:25:
64:9d:1d:a4:67:c2:2d:71:a8:0f:ee:bf:50:c8:ba:
6e:e7:2a:34:8c:e4:35:5e:79:30:4b:b7:4d:0f:44:
da:ba:6f:18:7b:c0:cd:fd:e7:82:4e:0c:51:f5:00:
9e:8e:d1:dd:38:f7:02:70:a3:64:57:74:50:72:f1:
f7:20:04:28:10:28:64:21:1e:ee:73:7b:84:d6:92:
8b:7a:ac:c8:c3:55:3d:15:2c:9a:85:7e:1f:31:6c:
cc:40:82:c9:ef:0c:f4:d5:e6:52:ff:fb:9a:ec:5f:
21:cc:4b:5b:0d:b6:0c:0b:72:26:18:2a:91:d6:56:
64:0f:68:71:7f:6c:1b:8a:0b:9d:d9:1d:12:45:df:
9f:6e:84:bb:42:b0:34:c4:7e:ed:f4:19:1e:03:bc:
6a:d2:e0:b5:89:06:8a:80:a7:ba:a2:38:50:61:b2:
c8:b0:1e:62:ac:da:79:03:73:f6:e3:29:12:ef:94:
bb:a7:c9:81:7b:3b:ef:81:08:30:6a:dc:e2:6b:e3:
f3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:14:47:56:7B:38:86:CE:3C:FE:98:F4:A3:E0:44:7B:BE:A0:44:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5dcaeb10-b7cb-3505-8e13-e528c0587c0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.64.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:57:e8:ba:22:3b:56:c7:1c:e2:28:75:66:5f:04:5d:0f:1d:
26:03:2c:b1:a1:0d:b1:8f:08:a3:3c:60:44:fc:cc:bc:fa:cc:
8b:32:af:3f:61:a7:69:57:58:6f:70:8d:90:8b:15:c8:20:b2:
9c:b9:58:4b:47:be:9a:71:ac:c2:9e:eb:72:e7:4b:ca:6e:94:
6a:96:02:ec:bf:ef:b6:e3:ec:26:27:c7:2b:3c:99:4f:e2:2a:
3e:fb:2b:38:ca:f0:47:d1:73:99:61:14:7c:6d:1e:3c:ad:4e:
9e:73:df:a7:1f:f2:fa:1b:14:3b:e8:db:96:49:f4:18:3e:a9:
57:32:4f:fd:de:44:d3:29:02:66:3e:88:1c:20:10:d1:3f:1c:
77:a8:25:b3:72:19:6d:1a:dc:b5:68:98:8c:47:78:b0:9d:f4:
77:f0:3a:58:43:b9:c1:c6:30:89:8a:7a:c4:ae:3a:62:9b:ce:
a5:08:53:52:51:47:20:d8:bf:7a:29:ca:ff:70:97:ed:bd:ac:
1f:8c:4e:aa:56:5e:a3:53:62:e8:49:23:a9:f1:9e:9c:be:e7:
35:e5:cf:62:03:92:a5:98:f8:fb:a2:3f:69:4b:3f:75:29:6c:
81:3a:69:76:c3:52:13:55:13:0a:03:c8:4c:ac:c0:00:f0:d2:
1c:e5:84:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:08:53 2025 by rpki-client