Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae6fa773-9177-396c-a066-b77fbe30b7ba.roa
File: ae6fa773-9177-396c-a066-b77fbe30b7ba.roa (raw, json)
Hash identifier: 3G68r1KVSAbSOz7NS1KAJo5WVJ/KNtVrEqa5AjM7NCU=
Subject key identifier: 81:50:7B:FE:F9:94:31:D3:EA:92:C6:43:30:EC:56:8A:04:90:69:FB
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A909C9C958A367A83C2DC00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae6fa773-9177-396c-a066-b77fbe30b7ba.roa
Signing time: Wed 11 Dec 2024 02:02:13 +0000
ROA not before: Wed 11 Dec 2024 02:02:13 +0000
ROA not after: Tue 11 Mar 2025 01:02:13 +0000
asID: 13335
IP address blocks: 172.68.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:90:9c:9c:95:8a:36:7a:83:c2:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 02:02:13 2024 GMT
Not After : Mar 11 01:02:13 2025 GMT
Subject: CN=15eb82cd-51bf-43e0-91f8-642d9d47dde4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a0:7b:45:62:c2:70:73:04:a9:0b:49:33:de:
b1:0d:00:b2:bc:1b:05:75:86:a1:e7:6a:82:78:9e:
ff:85:74:d5:f5:e1:ff:74:5a:2e:57:f3:b4:74:60:
75:d3:0b:b6:b2:10:a2:fe:4a:24:38:35:ba:9a:2b:
ed:b0:bf:cd:69:e1:78:aa:f8:21:2e:45:cc:20:d4:
2d:95:12:07:0e:2e:41:11:5f:16:6d:1f:f5:40:e8:
93:45:d0:59:c8:87:2f:7b:c5:d5:0a:55:3b:41:b6:
24:66:78:78:3b:d1:a0:0c:89:fa:b0:7d:a1:af:e3:
6e:2e:50:80:73:93:03:f2:3a:5d:c6:7a:93:66:08:
46:0c:da:32:21:97:f9:ae:d3:94:e4:e7:0f:a6:fb:
3e:73:79:0a:c4:f3:ed:15:ca:5b:7a:b3:74:cd:f9:
4c:d1:59:06:2d:59:40:f0:c6:41:10:4c:8e:c9:32:
1c:d6:68:62:6c:67:9f:a4:75:03:31:49:02:95:80:
82:13:12:37:5a:f4:b6:33:35:9b:3a:63:93:d7:dd:
6a:80:eb:c1:4e:5d:ea:57:09:02:3a:e7:8e:89:f2:
e0:04:68:95:12:9c:95:69:fa:5c:61:75:78:75:b9:
d3:ed:06:39:4a:33:a9:27:4b:b6:50:db:7a:9d:22:
2c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:50:7B:FE:F9:94:31:D3:EA:92:C6:43:30:EC:56:8A:04:90:69:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae6fa773-9177-396c-a066-b77fbe30b7ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:f4:63:06:62:39:2f:25:10:e3:80:6c:5d:e6:6b:4a:82:29:
0d:78:2c:7e:aa:19:76:05:07:be:40:d9:dd:de:02:c6:88:d2:
00:72:ea:f3:b0:29:df:3c:3e:25:97:96:56:30:b0:20:42:88:
9d:58:dd:96:f5:98:7b:9c:c0:0b:82:0a:19:ad:5f:85:07:97:
ac:01:94:76:77:78:cd:cf:ed:fa:b8:bd:89:4b:76:ab:05:0e:
33:4e:f3:88:5a:4a:20:34:49:c8:86:28:f7:19:82:20:e3:4d:
89:77:31:a5:b5:f8:31:70:9c:1f:c2:ef:fe:90:7e:5c:a6:15:
27:cc:00:20:23:43:f1:fa:8f:47:b6:ad:00:f9:9a:99:6c:bc:
c8:65:1d:89:3a:92:3d:14:d8:e0:1a:c6:c3:ab:6f:16:07:df:
59:04:4d:cc:24:91:fd:9b:7c:d7:7e:95:92:2b:8b:6f:a3:13:
97:4f:3f:d3:8e:e3:7a:16:c6:52:50:99:22:b9:04:58:79:2d:
59:6d:3e:1b:2a:24:b4:fa:53:a2:11:f9:a5:7c:e9:e5:bd:1f:
bf:db:44:2e:21:b6:4f:6a:5c:68:da:31:92:fb:6b:44:8d:20:
6b:e7:a3:93:6f:27:10:ec:17:07:d3:6d:d5:4f:ea:f7:19:be:
fc:a4:df:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:22:06 2025 by rpki-client