Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a12efd23-1da3-3127-950e-d6f4cfde3c50.roa
File: a12efd23-1da3-3127-950e-d6f4cfde3c50.roa (raw, json)
Hash identifier: hdZf/fxFNITpFPzuBWUzbHfeFgFdAjjOTttrDa0eIcw=
Subject key identifier: 45:B0:65:F7:41:FE:8A:04:09:1F:F9:D4:3C:EA:8A:DA:54:A3:0F:BF
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848281B2A3C17B2226458AC20C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a12efd23-1da3-3127-950e-d6f4cfde3c50.roa
Signing time: Tue 10 Dec 2024 04:53:57 +0000
ROA not before: Tue 10 Dec 2024 04:53:57 +0000
ROA not after: Mon 10 Mar 2025 03:53:57 +0000
asID: 13335
IP address blocks: 172.64.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:1b:2a:3c:17:b2:22:64:58:ac:20:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 04:53:57 2024 GMT
Not After : Mar 10 03:53:57 2025 GMT
Subject: CN=9c845b0b-f6b6-40b0-aa9a-bb2abc7c5255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fb:07:ea:32:1c:92:53:ea:a4:75:14:96:08:
02:2f:92:07:8f:21:16:ad:9e:71:14:4a:3b:32:1f:
d1:c6:45:3a:27:b5:65:e5:96:c7:4a:37:7c:c8:f7:
cc:ef:cd:23:0b:70:cd:a6:52:55:f5:57:62:aa:03:
6a:82:7f:9a:e7:d5:08:87:83:37:d8:36:cf:da:d3:
f1:cf:ab:42:3b:ef:f1:68:a4:02:f6:bc:17:98:17:
3b:87:08:74:d0:b2:6f:1d:7e:eb:a4:65:fc:ab:8f:
db:90:17:37:c4:ed:84:f9:c8:9a:f4:d0:e2:e2:78:
d4:90:fb:43:77:84:9c:a9:59:53:b7:31:0c:47:26:
2e:85:e7:f4:ca:a6:54:d1:a2:84:ee:ea:a9:67:8b:
83:d3:78:f5:ce:e4:0c:7d:ea:37:09:4f:6f:89:2a:
99:5b:67:e9:13:f9:49:6c:18:03:b5:1d:24:71:bb:
57:42:a5:85:41:e4:12:27:86:7e:5d:52:db:d6:f7:
56:f6:14:12:cd:60:99:2c:71:6f:3c:e1:f9:f7:85:
24:a8:0f:e1:64:98:17:fb:92:93:29:5a:86:01:36:
cd:ae:e8:23:15:43:a7:2f:4f:35:5e:38:ec:17:41:
ad:58:3b:6c:8a:fd:78:52:7a:bf:ea:f3:45:84:12:
c1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B0:65:F7:41:FE:8A:04:09:1F:F9:D4:3C:EA:8A:DA:54:A3:0F:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a12efd23-1da3-3127-950e-d6f4cfde3c50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.64.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:25:62:10:08:51:64:f1:66:8c:b2:ef:6e:fd:4f:b8:46:55:
2a:79:f9:5e:40:66:77:ab:2d:da:9a:bf:4a:6f:a2:c1:c0:58:
ec:98:93:48:8e:9c:e7:18:c3:e8:98:84:3a:b5:e5:cf:7e:69:
b1:23:80:be:ba:7c:61:b8:2f:70:f9:f2:66:c4:77:64:42:c6:
7e:a2:a1:d3:6e:54:7c:3f:c4:0f:24:2a:eb:47:a4:b0:b0:b1:
37:d9:d4:c1:6d:90:41:62:14:71:68:84:0a:ed:4f:5a:16:09:
8d:c0:ee:d1:e2:f3:d3:1d:ef:47:59:18:05:86:c0:04:cc:98:
6c:c5:ec:19:bf:5b:10:56:45:37:41:20:61:dc:d5:2b:7b:97:
3e:43:93:12:69:ce:b9:6a:ce:89:c8:d4:6c:30:37:d0:d1:68:
8f:f8:3c:64:10:6b:ad:e0:c0:2d:68:05:40:e2:3e:07:5d:95:
c6:09:97:00:fa:01:ef:86:6e:7b:42:1a:ae:d9:96:9a:8d:ea:
ff:de:b2:63:2d:3c:ce:9d:a3:f6:04:66:cf:f3:18:43:50:22:
fe:07:47:d8:74:f7:b4:a1:32:c6:51:08:ae:1a:0a:12:c8:57:
4e:0f:cc:2b:25:ca:2c:c3:79:91:86:76:2b:35:51:58:8b:d9:
b6:04:b1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:45:25 2025 by rpki-client