Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa8a40d3-b055-3c82-8dd2-3307e97ec2a6.roa
File: aa8a40d3-b055-3c82-8dd2-3307e97ec2a6.roa (raw, json)
Hash identifier: AquZkAJaXI4t4TefRmu1ys515G1DjImNeVlLGnmJ9Io=
Subject key identifier: E9:89:A5:1A:1D:3D:E4:71:23:5F:62:3E:06:19:ED:67:5F:D3:AB:98
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827AFCCFCCF807979F2AA37C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa8a40d3-b055-3c82-8dd2-3307e97ec2a6.roa
Signing time: Tue 10 Dec 2024 01:17:38 +0000
ROA not before: Tue 10 Dec 2024 01:17:38 +0000
ROA not after: Mon 10 Mar 2025 00:17:38 +0000
asID: 13335
IP address blocks: 172.69.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:af:cc:fc:cf:80:79:79:f2:aa:37:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:17:38 2024 GMT
Not After : Mar 10 00:17:38 2025 GMT
Subject: CN=9e8ed46f-a6fa-43c0-8d43-c03a6512e050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9f:45:86:7a:1e:45:b5:99:42:a8:0f:bf:66:
b6:5e:04:49:05:d5:71:37:e3:f3:9b:cc:8b:80:34:
6d:cc:86:23:c0:b1:57:52:f0:42:5f:cc:f4:9b:54:
7d:92:09:89:59:32:de:ee:32:d2:f2:54:36:a3:6b:
5c:f8:e7:d6:73:b2:ac:49:15:d4:53:86:6a:df:54:
78:86:0e:99:d7:e8:5d:53:1d:57:5e:c6:3d:98:51:
77:a1:da:5b:f7:4c:72:61:20:c3:cf:53:c0:67:c1:
58:1c:af:a3:03:cd:3c:21:fa:8a:8a:76:d9:e8:e9:
74:e7:e5:2e:56:02:c1:d0:d6:eb:c7:91:4c:35:20:
5b:c0:b3:06:71:c4:30:20:f0:3e:f6:4b:f2:b9:b4:
73:af:4e:35:6f:0a:0a:48:73:33:bc:b8:22:42:d4:
8d:03:59:2b:c4:51:9d:18:e6:bf:1f:c2:88:bd:92:
b5:95:4f:11:94:4d:a8:1b:bf:f3:50:9b:64:1c:7f:
21:96:6c:fa:e8:46:0c:87:c9:5e:82:ba:c8:dc:a1:
9f:d0:e2:33:86:55:55:fd:d9:40:2f:66:54:32:cb:
44:f2:85:f3:58:c0:e3:b3:66:14:fb:3c:da:47:6b:
6e:b3:4e:28:cb:0a:74:df:67:f0:05:53:39:de:f7:
37:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:89:A5:1A:1D:3D:E4:71:23:5F:62:3E:06:19:ED:67:5F:D3:AB:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa8a40d3-b055-3c82-8dd2-3307e97ec2a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:97:60:17:64:2b:0c:14:ee:e1:14:94:6d:48:c3:bf:d3:32:
8d:12:a2:13:82:40:9d:3e:79:42:fc:b4:f1:e4:ab:58:4b:29:
9c:9c:eb:b3:75:f1:07:4a:0f:9c:b7:dd:51:1a:65:e5:ff:97:
6f:31:6b:14:c6:a2:65:7d:a2:e1:c0:aa:04:c0:a8:f6:72:35:
c8:39:23:5f:46:62:7f:ce:a7:e5:53:77:da:0a:49:2e:31:86:
a3:3f:2f:73:41:98:68:f9:56:c4:ca:31:15:16:07:c2:41:f1:
85:57:50:63:dc:a6:f4:0a:89:d7:bd:f5:40:cb:42:83:17:79:
bf:8c:cd:b3:c3:a8:60:64:51:ed:c5:39:38:0c:ab:f7:37:8d:
34:ce:40:2b:46:58:58:7c:84:d0:9a:d2:2c:2a:03:79:f9:3f:
3b:7d:69:6e:05:3c:01:99:a0:62:87:c7:28:59:4d:90:75:d1:
98:63:a7:f4:2c:af:65:ba:e3:04:8d:1a:b5:ee:95:1f:e8:9d:
a7:4c:cd:7b:c3:05:67:59:a2:f8:d7:5c:d4:6b:42:49:32:49:
ff:8e:fe:84:67:f6:a4:d8:df:8a:8e:0d:5b:eb:c7:2f:f7:12:
27:37:be:da:d0:19:6b:3e:f6:65:d7:e3:c6:c3:70:4f:44:bb:
80:2b:de:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:41 2025 by rpki-client