Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ac2cebfd-fa8f-33e8-bba4-9c6cf3ab4e4f.roa
File: ac2cebfd-fa8f-33e8-bba4-9c6cf3ab4e4f.roa (raw, json)
Hash identifier: Q5U3bfAvyrKNNLIKfWttFhnGWr1WzTOtd8ykH94nE4E=
Subject key identifier: A0:69:FF:54:2F:89:F4:23:BD:95:14:22:A0:5E:DC:4D:E8:C2:03:74
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328576D51CC73C042CFC16FFE45A5B9
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ac2cebfd-fa8f-33e8-bba4-9c6cf3ab4e4f.roa
Signing time: Sat 01 Feb 2020 01:02:54 +0000
ROA not before: Sat 01 Feb 2020 05:00:00 +0000
ROA not after: Wed 19 Apr 2028 04:00:00 +0000
asID: 13335
IP address blocks: 172.68.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:fe:45:a5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 1 05:00:00 2020 GMT
Not After : Apr 19 04:00:00 2028 GMT
Subject: CN=20bba8ab-5d4a-400b-8f56-97e947dd9426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5c:5b:64:c4:45:23:1a:a7:4d:18:40:3c:2b:
0e:92:43:3c:01:af:ba:44:b8:0a:44:97:ec:cc:6c:
77:d9:e9:2c:af:3b:73:20:14:1c:c7:f3:0e:f9:53:
99:58:8a:8f:a7:bd:44:1b:94:40:46:9d:3d:c1:67:
6f:cb:f9:d9:58:91:f7:14:f5:45:98:78:66:f3:0e:
34:35:17:e7:65:e2:ea:90:d9:28:ca:a0:34:72:72:
66:ae:17:e3:fe:16:fd:b2:e0:1b:4a:4a:53:f6:4b:
f9:87:58:60:2e:6b:d4:88:9d:7d:10:ba:fc:d5:8c:
1b:10:04:17:e5:1d:80:c3:40:3d:b2:7a:7a:4b:41:
41:5f:8a:b1:96:b5:b1:8e:bb:09:49:03:bc:87:52:
4e:16:d7:93:08:d0:1c:85:e1:97:95:ea:cb:9f:f8:
71:40:d3:2f:be:b2:bb:55:0f:f1:7e:1d:e1:0b:5b:
51:5d:42:52:97:c2:c6:81:cd:8c:ac:f4:ba:99:52:
ab:8e:36:a5:ac:b5:bb:0a:50:63:17:2a:aa:cb:e6:
e6:50:8e:cb:58:2f:3f:56:b8:b0:e0:46:03:cb:1f:
39:6d:47:48:6c:b6:3f:7d:40:f3:f7:6c:8a:32:f4:
66:e6:c8:bd:c4:45:b9:0a:d2:a6:83:82:a5:e1:ec:
81:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:69:FF:54:2F:89:F4:23:BD:95:14:22:A0:5E:DC:4D:E8:C2:03:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ac2cebfd-fa8f-33e8-bba4-9c6cf3ab4e4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:5a:cf:30:d9:88:68:69:c2:0c:b9:8c:cd:12:59:94:56:0b:
9b:8c:9b:a5:cd:99:e9:41:aa:6c:05:6f:83:52:a9:cb:35:ab:
a2:1b:0d:7e:19:90:c8:f4:20:7c:92:70:9c:42:49:f5:79:35:
7f:06:e3:6b:4d:82:ec:b2:50:07:04:29:a5:d1:e3:f9:6b:18:
eb:4b:af:2f:aa:ff:3e:ab:71:b6:14:7a:b7:14:94:64:39:9e:
fc:89:76:e8:c9:f1:b6:20:f3:67:da:68:ea:38:9a:c9:fa:5c:
ee:48:7c:63:4f:1a:2f:42:85:c1:d0:71:88:22:a4:2b:e2:c6:
26:78:70:b2:eb:95:88:6a:39:c1:e5:2e:08:5d:e5:28:7c:3b:
e4:54:a9:c9:61:d4:d7:01:61:92:e2:c4:86:65:1a:d6:ca:70:
7d:a0:bb:2d:cd:ce:2b:be:51:f4:56:07:c8:56:f8:9e:7e:43:
d8:6e:9c:47:23:fa:8a:78:66:84:c6:ce:5e:68:d6:e9:ce:48:
11:23:6c:ec:0a:37:d2:43:dd:f0:e7:83:54:d3:91:5a:94:2d:
59:0d:7c:9f:bf:8d:c1:b4:65:bd:df:76:b4:41:80:7f:03:37:
2d:4b:82:00:2c:43:62:fd:34:09:39:8f:24:4e:21:de:be:1e:
17:a1:8d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:42:44 2025 by rpki-client