Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9fd7a7d6-4d77-310d-85c2-9bc8a0bb54b4.roa
File: 9fd7a7d6-4d77-310d-85c2-9bc8a0bb54b4.roa (raw, json)
Hash identifier: F7TcdxmHS9vNfrt2CJGAGljzcBOyj/KRyynOprG9cAE=
Subject key identifier: 0F:89:E4:7F:37:ED:0C:4A:AB:EC:9C:1D:F5:51:73:58:1D:94:30:1E
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848281F1CAA2A20C207DC459100
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9fd7a7d6-4d77-310d-85c2-9bc8a0bb54b4.roa
Signing time: Tue 10 Dec 2024 05:01:54 +0000
ROA not before: Tue 10 Dec 2024 05:01:54 +0000
ROA not after: Mon 10 Mar 2025 04:01:54 +0000
asID: 13335
IP address blocks: 172.66.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:1f:1c:aa:2a:20:c2:07:dc:45:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 05:01:54 2024 GMT
Not After : Mar 10 04:01:54 2025 GMT
Subject: CN=5889214a-aac2-498c-973a-67d820d3ad76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:aa:a4:d7:4b:80:f9:e5:8c:ae:52:fc:3e:b9:
5d:1d:05:58:e5:f1:2e:7c:15:43:a8:53:19:14:14:
d9:e2:f7:ea:94:ad:ae:30:f3:59:1f:09:18:e1:0e:
1e:a8:6b:97:ca:8f:72:71:fc:09:22:72:a9:d3:19:
0f:66:c1:8d:e4:7e:bb:5c:da:1a:1c:46:3f:ea:dd:
f7:9f:8f:ab:1e:7b:74:70:9d:14:7b:64:78:17:5f:
27:52:e8:d3:00:27:9a:f3:8c:87:d7:41:75:3a:b7:
61:85:94:3c:eb:70:20:53:05:52:80:89:c0:19:21:
78:e3:76:57:c4:9a:d6:34:a6:9d:30:5f:bf:a1:49:
85:c5:d0:99:1e:74:4e:a4:c5:78:7b:c1:cd:6a:42:
55:fa:39:43:d6:71:c8:82:44:e3:0d:a0:38:88:8f:
79:3e:fe:43:85:a7:00:92:e6:9c:87:63:97:bf:a7:
60:5a:69:ec:33:47:6d:ff:4e:24:2a:a9:08:02:be:
7b:b4:ad:c7:25:75:ff:4c:a4:25:64:df:d7:a5:4d:
8f:6c:fe:ca:a1:67:5c:2f:7e:c3:ca:ae:e2:b9:1e:
e7:b9:c3:b2:93:95:2c:cb:45:3f:aa:e7:35:b0:3f:
ca:2d:86:ed:95:cf:96:5b:4f:70:b6:d4:dd:8c:4c:
09:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:89:E4:7F:37:ED:0C:4A:AB:EC:9C:1D:F5:51:73:58:1D:94:30:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9fd7a7d6-4d77-310d-85c2-9bc8a0bb54b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.66.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:75:dc:4e:7d:bb:fe:e8:f5:20:da:c7:18:1d:8d:f3:ed:12:
93:3b:68:c0:b4:88:0f:ed:83:bc:56:5d:e5:0d:d1:b2:ae:cb:
c1:6a:7b:e0:ed:5d:5d:70:41:d8:37:5a:9a:9a:66:b5:2b:a0:
5a:5f:f5:53:55:bf:d7:23:cc:b2:71:a7:df:ad:71:51:bf:05:
37:4c:55:0a:8b:b4:68:7c:35:27:e1:37:b9:c6:d4:5d:d6:a5:
61:b9:1a:59:b6:28:6d:da:2f:fc:52:82:fb:6f:78:c9:93:b2:
a4:2b:bf:31:c5:0c:3d:1b:a8:60:d8:27:7f:4f:c2:a2:6d:a9:
d8:9d:ac:07:59:4e:87:d5:0e:6d:6e:ae:29:b2:2e:e6:fe:38:
d6:f2:71:91:0f:28:ff:5d:82:0c:a8:7a:31:04:9f:1e:4c:3e:
be:13:05:72:31:2a:96:ef:82:15:a1:19:d1:4b:0f:50:04:b5:
a0:c5:ac:bd:74:93:15:96:75:c8:24:f9:0f:8c:f3:59:ce:92:
63:d9:e3:96:cc:cc:45:38:82:be:c4:6e:89:f0:fe:9e:02:ba:
c4:b0:7c:68:6c:f3:aa:ce:dc:de:68:55:e2:ba:7a:cf:f3:a4:
78:39:af:80:fa:de:08:17:e7:89:2a:8e:d1:46:49:56:4d:4f:
33:9d:db:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:18 2025 by rpki-client