Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c0588042-0c57-302b-99af-793126ed6697.roa
File: c0588042-0c57-302b-99af-793126ed6697.roa (raw, json)
Hash identifier: sZWE1a+9IL4MRaSOZ5Qi9Cp8n8z7u8K9QG9lZnXEWYc=
Subject key identifier: BA:1E:05:E6:69:11:2C:7E:1C:66:C1:25:A3:3F:57:FE:50:28:A6:A4
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A8CE6486FF2F35DC4220000
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c0588042-0c57-302b-99af-793126ed6697.roa
Signing time: Wed 11 Dec 2024 01:54:44 +0000
ROA not before: Wed 11 Dec 2024 01:54:44 +0000
ROA not after: Tue 11 Mar 2025 00:54:44 +0000
asID: 13335
IP address blocks: 172.68.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8c:e6:48:6f:f2:f3:5d:c4:22:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 01:54:44 2024 GMT
Not After : Mar 11 00:54:44 2025 GMT
Subject: CN=afa85a0a-90d0-4210-9fa8-c6701dd73f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9e:f1:79:1c:33:24:30:3b:58:b2:f6:0f:0a:
06:db:94:13:7c:a9:9b:4a:69:fe:4b:57:52:be:18:
32:e4:a2:cf:ef:8d:c0:47:bf:91:d4:87:41:25:43:
9a:cb:92:03:87:d6:12:dc:ec:5b:34:8e:0c:b7:63:
ec:2b:ad:90:34:bf:21:47:17:c1:7a:48:2f:2e:24:
76:f3:b3:f8:b8:0d:2a:e7:30:23:54:ab:c3:cc:8b:
88:c6:58:1e:6b:dd:7b:dd:9e:52:9a:5c:50:78:fa:
63:18:a0:fa:80:bd:51:bb:7c:4d:d7:f6:f2:04:c6:
86:fe:17:0b:f0:70:1b:47:93:7c:f3:5f:c3:1d:a2:
48:88:ba:b5:bc:4c:f9:38:52:f9:34:62:f1:5b:90:
c1:6b:31:9c:5b:3a:e1:98:15:da:4c:1d:43:e8:b7:
ab:2b:7c:a2:25:61:d0:2a:13:da:33:48:4e:6d:98:
eb:87:18:0e:31:46:58:05:de:28:6e:e4:e7:b6:53:
8d:a1:84:a9:c7:1d:db:a6:5e:83:92:74:2f:84:e9:
01:bf:88:2b:82:fe:d4:8c:31:cd:a3:26:b2:04:98:
a4:b9:29:a5:4c:79:f7:bb:e8:da:41:92:96:a5:43:
25:ad:80:7b:78:fb:8b:73:da:65:17:17:b9:dd:ce:
6d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1E:05:E6:69:11:2C:7E:1C:66:C1:25:A3:3F:57:FE:50:28:A6:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c0588042-0c57-302b-99af-793126ed6697.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:05:d3:5c:6d:ac:ab:64:d2:de:84:f2:f2:5b:71:1d:fc:76:
43:59:ce:67:b0:07:5e:c1:e2:7a:a1:64:1f:48:83:b2:ad:8a:
d5:19:b9:9a:2e:20:05:9d:eb:90:af:ab:96:cd:64:99:dd:e5:
a1:1c:69:97:ec:8c:0a:4e:f4:b2:6c:2f:f2:72:b2:52:0e:29:
3f:b7:a1:95:33:0c:ba:6c:21:4f:ea:d7:93:29:c0:fd:19:67:
4c:e8:2d:62:dd:78:a5:96:34:d5:dc:fc:0f:68:68:94:6a:a6:
b9:94:61:f8:d6:18:31:05:00:fb:14:e9:b9:3a:3a:ed:fc:d5:
3e:36:2f:f1:5e:63:6f:d5:37:5e:be:77:41:18:00:b2:16:01:
13:4f:30:44:fa:40:4c:52:fa:52:bf:4b:2c:0c:82:78:3f:b9:
79:a5:0a:6e:f1:28:90:51:db:95:f1:88:1e:b8:62:e6:29:3e:
0d:2b:df:68:81:08:b5:b8:21:d1:31:50:75:28:47:c1:55:85:
4f:9e:ad:17:fb:ea:c4:33:15:25:8b:e5:3e:68:3a:f9:74:88:
53:e3:52:06:68:2b:58:84:d5:cd:42:2d:c9:1b:82:74:6d:95:
55:73:ba:1b:7e:5e:44:5a:17:80:9e:6c:c8:54:ac:19:d4:49:
97:36:1e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:20:16 2025 by rpki-client