Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa1f1739-a4c1-3ad1-9345-5f9b9dbe0ca0.roa
File: aa1f1739-a4c1-3ad1-9345-5f9b9dbe0ca0.roa (raw, json)
Hash identifier: 1yndhhpCuxtZ4mdmF/kowCqNJmtuyiLL4XgnynbK1Bc=
Subject key identifier: 57:E0:17:E3:81:AF:28:4C:05:AB:B6:B4:E7:9B:33:F0:F5:6F:8E:D7
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328576D51CC73C042CFC167622A4913
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa1f1739-a4c1-3ad1-9345-5f9b9dbe0ca0.roa
Signing time: Fri 30 Nov 2018 01:09:57 +0000
ROA not before: Thu 29 Nov 2018 05:00:00 +0000
ROA not after: Sat 27 Nov 2027 05:00:00 +0000
asID: 13335
IP address blocks: 172.69.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:49:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Nov 29 05:00:00 2018 GMT
Not After : Nov 27 05:00:00 2027 GMT
Subject: CN=1f11ac90-e282-49fc-aa87-0303b8090d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bb:91:13:d2:4f:c1:a2:32:5c:ec:b8:27:95:
39:cb:4b:39:43:56:1b:43:8b:fd:df:1a:4e:eb:b6:
4b:00:cc:0d:c5:f3:af:a9:cc:83:99:51:6b:88:2b:
91:16:ee:8e:b0:79:3f:5f:c2:47:fa:ee:99:9f:6d:
7a:48:7a:3a:7c:39:24:2a:cc:21:15:92:d3:7a:df:
17:d1:2b:5d:b9:35:25:9d:df:f3:71:62:38:98:23:
f4:55:f3:4c:fc:d7:21:50:88:55:0a:6d:c1:9d:73:
52:a8:25:2c:5c:50:ef:f3:ef:53:cd:6b:c2:d4:4a:
a8:04:d6:c8:8c:95:f3:04:59:c8:57:96:a8:e5:b6:
1e:52:d8:2b:c0:61:18:01:0e:b5:64:ac:eb:9e:f6:
47:a2:9f:5c:d4:00:f7:b7:09:53:4e:7f:18:06:d7:
70:f2:bd:a3:08:89:01:59:43:9d:01:2d:52:6b:77:
60:82:17:7f:90:d1:7d:c7:1a:88:60:bc:9a:0c:10:
93:26:8e:df:a0:2d:98:e2:4b:2b:af:f2:9c:b9:da:
e7:16:d3:c2:dd:f4:64:ff:74:01:40:02:d1:be:02:
e7:77:d7:26:95:f3:7a:2f:7b:72:89:7c:81:6f:5e:
df:72:25:58:3a:21:6e:c5:d7:6f:da:12:c8:57:5b:
60:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E0:17:E3:81:AF:28:4C:05:AB:B6:B4:E7:9B:33:F0:F5:6F:8E:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa1f1739-a4c1-3ad1-9345-5f9b9dbe0ca0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:db:97:02:64:c3:36:9c:c5:d6:3e:a5:07:2c:63:f5:47:16:
2d:3d:41:95:24:40:c8:16:0a:26:5d:a1:18:98:42:67:23:be:
60:1b:80:3b:11:e2:a3:7b:58:db:f0:71:77:89:f5:84:31:c1:
6f:88:a0:02:4f:e8:46:ea:a6:f3:8e:16:5b:c4:8f:eb:b3:7c:
1f:7a:31:f4:fd:19:3a:ec:5b:2d:35:12:12:c3:e9:0f:2b:af:
96:73:55:34:34:21:59:10:26:d6:7e:9f:e5:88:18:8b:fa:46:
cf:3b:1d:06:95:ac:2a:1f:b3:ae:87:44:cc:a1:9f:3b:05:30:
24:9d:d2:84:56:1e:de:98:82:4e:71:03:a3:5a:2e:3d:7c:93:
f0:27:e7:54:19:8b:26:3f:44:22:26:3e:da:ef:7f:52:ba:0b:
af:de:df:cf:d3:7f:02:66:0d:7f:7d:55:b2:e3:7b:32:82:b5:
cc:ac:dc:ef:21:22:32:34:eb:df:9e:76:2f:40:d4:28:d8:b4:
12:56:40:85:8e:95:8a:bb:b9:9a:e1:97:49:f9:f7:3e:11:62:
ff:8f:39:c7:2d:de:44:e4:90:c1:c2:31:2d:77:fb:cc:fd:d1:
2e:4c:64:9f:52:42:c1:bf:f7:77:8d:d2:8f:11:2c:f4:56:75:
b0:8b:3b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:15 2025 by rpki-client