Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6f08d253-32e3-370e-97ee-7b41bde60260.roa
File: 6f08d253-32e3-370e-97ee-7b41bde60260.roa (raw, json)
Hash identifier: m12K9KbrT002hc8toxXjtq+Q+Ud7aPhYJ6RS37dlw8w=
Subject key identifier: 78:20:0E:EF:33:FF:E8:45:C5:F9:0F:8A:9C:55:A4:3F:26:D1:06:07
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848283B53685CD7002F964A1480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6f08d253-32e3-370e-97ee-7b41bde60260.roa
Signing time: Tue 10 Dec 2024 05:58:45 +0000
ROA not before: Tue 10 Dec 2024 05:58:45 +0000
ROA not after: Mon 10 Mar 2025 04:58:45 +0000
asID: 13335
IP address blocks: 172.68.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:3b:53:68:5c:d7:00:2f:96:4a:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 05:58:45 2024 GMT
Not After : Mar 10 04:58:45 2025 GMT
Subject: CN=e58cdad2-88fa-4887-bd18-1f9d12ce70e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b9:3a:59:20:61:be:3a:ba:a1:1f:fd:5b:ea:
66:b6:0a:45:be:77:d8:e0:74:fb:f7:ef:06:e1:9f:
0f:10:63:5b:2f:51:d5:2d:d8:1d:68:37:2b:65:eb:
b7:74:e6:12:a5:b5:aa:24:a1:c1:b3:5a:d5:73:84:
e8:14:b1:22:60:f9:87:ed:ea:c8:e2:15:58:92:1b:
7d:79:1a:6e:a5:5e:f0:89:a0:99:e0:19:ce:b7:c5:
2e:1f:5f:0b:bc:bb:89:81:60:d9:db:51:b1:62:c4:
df:86:ed:0b:59:0c:e5:a8:e1:c2:c0:bf:45:ff:8d:
a0:8d:bd:24:c1:a8:31:bc:ea:61:6b:d9:b6:13:bb:
23:97:e4:d9:15:c5:cf:e9:c6:45:93:60:12:ad:09:
b8:b1:ed:ff:88:f0:88:3a:0c:c6:28:d3:93:fd:e9:
a6:20:8f:f4:da:1e:04:1d:31:36:15:60:c2:f5:35:
ac:5c:46:bc:f1:3a:f3:a9:9f:65:48:cd:5b:02:a8:
a5:c4:2f:99:18:c6:3b:1f:bb:96:cc:83:17:0c:37:
29:68:d9:d3:fe:46:34:5a:5d:45:d8:a8:2d:79:34:
e8:56:b5:85:90:32:bb:18:6b:37:0c:4b:96:ca:2d:
ea:c8:38:62:de:b4:15:c2:5f:81:ed:35:d6:86:59:
fb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:20:0E:EF:33:FF:E8:45:C5:F9:0F:8A:9C:55:A4:3F:26:D1:06:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6f08d253-32e3-370e-97ee-7b41bde60260.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:51:71:3a:ee:34:88:fe:16:09:24:1f:93:85:21:79:1b:0b:
63:19:a2:92:2b:b2:70:72:cc:97:f3:93:3d:e4:a5:f4:ae:73:
aa:4c:16:93:c9:94:bb:53:db:c3:83:7b:eb:81:b0:5f:b9:5b:
7d:60:5a:01:eb:f8:c6:e8:bb:d0:a6:e5:2e:bb:e1:74:8f:b8:
d0:5f:31:d1:32:d1:9e:5a:86:f1:5b:43:ec:c7:7e:87:e2:b1:
af:ed:84:70:90:e0:be:63:94:a5:cf:01:61:55:6e:a9:95:40:
23:dd:c0:24:c7:bb:81:da:41:d6:3e:a8:06:07:69:5f:dc:fc:
9b:b3:bb:84:83:38:47:c1:c7:9c:3f:02:ba:27:64:a4:97:bb:
9c:fc:a7:3b:9a:27:a3:da:bb:79:e9:ba:d7:bd:3b:c1:8a:b2:
e9:6e:12:40:1d:22:53:ff:bd:2f:fa:c4:81:8d:24:bf:61:f3:
e7:a9:6e:ca:08:59:e4:78:ce:0a:0a:2d:04:8c:b8:b4:7e:33:
97:c9:91:69:94:9d:57:6d:b1:e6:bd:a0:2a:05:dc:68:23:83:
80:52:37:a6:92:cc:0f:04:61:fd:8e:b8:b2:01:ee:d5:82:4d:
76:5f:06:10:65:6f:b9:15:dc:cb:bd:67:8f:3d:05:53:83:23:
8c:3f:c7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:01:07 2025 by rpki-client