Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bde7a591-2ce6-3450-9a41-6d29d1aa744d.roa
File: bde7a591-2ce6-3450-9a41-6d29d1aa744d.roa (raw, json)
Hash identifier: 5jh09ETnyIQQ6CUOFbZdwTIF5zJDSCH+Wyafcl8rjkE=
Subject key identifier: 6A:DF:71:8E:64:71:CA:43:74:64:AA:D1:98:E3:1F:DE:42:D2:7E:2F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827A892D15DD94435EA064180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bde7a591-2ce6-3450-9a41-6d29d1aa744d.roa
Signing time: Tue 10 Dec 2024 01:03:04 +0000
ROA not before: Tue 10 Dec 2024 01:03:04 +0000
ROA not after: Mon 10 Mar 2025 00:03:04 +0000
asID: 13335
IP address blocks: 172.68.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:a8:92:d1:5d:d9:44:35:ea:06:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:03:04 2024 GMT
Not After : Mar 10 00:03:04 2025 GMT
Subject: CN=8d4a1840-d57b-4ea0-8263-5673176b4934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:49:f4:c8:15:5d:21:fc:c2:93:87:85:3a:79:
ec:d1:89:c7:c4:09:fe:c8:4b:ac:78:f1:7d:04:15:
7b:14:d7:03:cc:a5:55:a6:91:90:be:f9:14:6d:35:
b1:32:2c:a8:14:08:aa:00:02:ed:e8:92:1e:4d:9f:
21:e5:df:be:03:d1:bb:7c:ce:01:b7:b8:a1:72:04:
8c:a6:a4:a9:75:dd:b3:dc:9d:ba:85:a3:84:f0:65:
5e:4e:ae:8c:c1:53:3e:8d:4c:50:9a:8b:f7:d1:02:
4d:e0:7e:72:0f:bf:ff:11:8d:1b:90:ec:cf:ec:a4:
be:43:b7:8b:af:13:9f:b7:30:da:36:cc:e5:68:df:
ef:c6:3a:0e:e4:1d:9c:22:87:0a:90:f2:8b:84:9f:
08:43:16:2f:2b:9e:f1:52:a6:b9:a6:c2:cd:49:8e:
2b:cc:69:87:9e:d4:f6:40:4c:71:07:6b:05:58:65:
64:8e:8e:53:4b:40:4f:02:c8:1f:51:54:cf:37:b4:
d4:4e:c3:e7:48:9b:97:af:20:dc:29:ea:26:04:06:
6e:1a:26:32:c7:01:1d:d2:0b:12:18:91:19:a8:7e:
4c:08:dc:69:02:36:51:92:1b:ac:ee:35:13:ec:99:
89:1b:52:7d:4a:bb:55:07:08:19:6e:f6:0f:3b:21:
8e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DF:71:8E:64:71:CA:43:74:64:AA:D1:98:E3:1F:DE:42:D2:7E:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bde7a591-2ce6-3450-9a41-6d29d1aa744d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:98:ee:5e:50:32:64:32:41:15:01:17:df:98:7d:08:ec:9f:
f6:06:c0:8a:ce:51:65:b2:5d:72:2b:b7:45:61:57:de:ab:f6:
cf:7e:1e:9a:d6:4d:66:bd:2b:3a:d7:c0:fc:59:b3:77:44:ea:
40:c2:c1:e8:1b:45:c2:72:08:3a:79:77:2c:e6:c3:ff:f0:d8:
1f:4f:28:cb:6f:24:a8:1d:54:1d:18:bf:34:3d:e2:a4:85:fb:
08:6f:f8:40:5a:d1:37:07:6f:9f:fd:aa:f4:02:86:ff:7c:f8:
da:c8:56:01:32:27:3d:33:67:09:8b:65:ee:81:3b:94:35:7b:
28:13:f2:4e:fa:a5:db:ab:f7:cb:65:6c:b9:47:b3:4a:3b:21:
d9:39:b0:ec:4e:25:6c:48:7e:72:d2:b0:61:4e:db:70:1c:09:
de:4c:f5:5e:35:12:08:78:1f:4a:35:63:e1:38:91:2a:11:5a:
60:d4:4d:bc:99:3d:00:16:12:e8:80:88:d6:96:ec:e5:1b:99:
2f:fe:9a:a6:6c:02:f0:38:2e:a7:5c:f8:f8:fb:28:79:17:9c:
de:30:15:2a:b5:d7:48:79:fa:cb:c3:95:79:74:15:da:02:87:
ee:ac:f9:0f:a8:62:5c:80:78:dc:8b:c1:60:25:2f:40:67:36:
7a:a3:7b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:59:59 2025 by rpki-client