Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0883471-df25-369c-af33-49371a63ad5b.roa
File: a0883471-df25-369c-af33-49371a63ad5b.roa (raw, json)
Hash identifier: LtekTTJU0aHBe88Mly5SPNaHsouyL3jtiZ+pyYPOEGU=
Subject key identifier: C4:25:D5:6C:5E:C4:EC:BC:EF:BD:E2:C1:C7:E2:4D:D8:4D:0B:F8:48
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328583CB7DB67C0A626502E6FFE24C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0883471-df25-369c-af33-49371a63ad5b.roa
Signing time: Wed 26 Jan 2022 05:00:00 +0000
ROA not before: Wed 26 Jan 2022 05:00:00 +0000
ROA not after: Mon 19 Jul 2027 04:00:00 +0000
asID: 13335
IP address blocks: 172.64.52.0/24 maxlen: 24
172.64.53.0/24 maxlen: 24
2606:4700:52::/48 maxlen: 48
2606:4700:5a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:b7:db:67:c0:a6:26:50:2e:6f:fe:24:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Jan 26 05:00:00 2022 GMT
Not After : Jul 19 04:00:00 2027 GMT
Subject: CN=a433e947-bb21-4ecf-8d57-4d6ddf28170a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:74:ff:21:e0:da:b2:06:46:2a:53:9f:9b:f9:
52:d4:50:8a:03:3e:3b:87:57:0f:a8:8a:6d:de:ad:
ca:f8:67:eb:16:2f:10:bd:b8:be:37:db:8b:d1:92:
67:1d:01:d6:99:17:9a:02:3a:11:ef:36:de:56:52:
28:8c:94:3f:f3:58:a5:39:f8:dd:b8:82:cd:2c:98:
7f:4c:73:99:9f:13:01:fc:05:41:48:4b:ae:31:d1:
9b:a7:39:28:e5:3b:37:eb:23:70:10:9b:eb:90:47:
98:9c:64:80:1a:ac:a9:b4:97:07:79:65:94:e7:9b:
5e:79:9c:06:59:42:26:38:32:73:e3:49:2a:01:27:
cc:81:2f:a8:a3:2f:3d:cb:bf:5e:57:ca:d6:21:1b:
41:9d:7d:a2:4c:a3:64:49:bc:6e:8d:5d:fb:ae:11:
14:d8:5e:81:c5:75:05:11:f3:3d:bd:02:0c:1a:e6:
5d:13:f2:65:59:5e:2c:6c:9b:8f:20:a1:e9:63:a8:
1b:75:71:fb:86:b5:aa:cc:f2:e2:6d:b7:10:c3:d0:
e5:2d:f4:c1:21:1e:dd:e8:af:51:f9:7b:09:89:b5:
e9:5b:8e:ac:76:cc:69:12:4c:59:22:98:f9:45:1d:
16:01:7a:86:60:37:fa:5c:ee:e6:84:cb:eb:c0:41:
25:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:25:D5:6C:5E:C4:EC:BC:EF:BD:E2:C1:C7:E2:4D:D8:4D:0B:F8:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0883471-df25-369c-af33-49371a63ad5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.64.52.0/23
IPv6:
2606:4700:52::/48
2606:4700:5a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:9e:da:67:09:3c:97:96:fe:6b:15:bf:86:d2:82:fb:dc:ae:
a1:b4:20:a0:03:2a:54:5e:c4:ca:22:f7:8b:7b:93:bd:5a:a9:
a0:e3:45:2a:b9:ae:2e:f7:d7:da:0a:af:27:fb:93:5d:00:ec:
44:b8:a5:4b:2f:70:4f:26:d2:16:a6:9d:3b:59:42:13:b5:ea:
20:43:28:37:24:ec:92:8d:35:fb:51:c3:51:00:46:a2:c1:ba:
16:32:5b:a2:11:86:28:1c:ae:ab:09:63:67:eb:97:fd:fa:2d:
fb:7c:17:f2:63:f0:67:bd:2b:74:bd:9d:52:c7:b4:73:24:47:
ad:e6:a1:63:de:cd:32:dd:e2:bd:29:e2:76:a3:64:d2:d5:ef:
f4:c5:01:7a:4e:d9:ff:2b:67:af:68:44:53:eb:26:3f:b9:b6:
b1:5e:7d:59:cf:7b:03:44:69:66:4e:31:06:17:e8:d3:80:d0:
bc:2a:ce:1d:04:f7:79:e6:3c:66:f9:22:ae:09:1a:d1:a6:64:
f5:06:1b:09:00:5a:d6:00:26:bd:82:aa:a0:15:0a:8c:84:58:
fe:6d:6a:52:5f:b7:a3:25:ab:a0:06:0f:4a:03:44:b5:ab:79:
71:02:61:88:53:e0:08:01:3d:cd:51:50:2d:26:74:86:06:4c:
62:a9:1e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:05:33 2025 by rpki-client