Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d8988d9b-3981-3a7e-9c86-5454060f90ce.roa
File: d8988d9b-3981-3a7e-9c86-5454060f90ce.roa (raw, json)
Hash identifier: b3VZgs2HrtDFmNcYwUzwBNPkBKWqgbOCLkNFpP+YPIs=
Subject key identifier: 35:61:C9:AD:37:FA:85:B2:2F:2A:E6:F1:1D:70:3D:63:24:8B:BF:B1
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482AAC403CDC4BF9ECEAE08190
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d8988d9b-3981-3a7e-9c86-5454060f90ce.roa
Signing time: Wed 11 Dec 2024 02:57:54 +0000
ROA not before: Wed 11 Dec 2024 02:57:54 +0000
ROA not after: Tue 11 Mar 2025 01:57:54 +0000
asID: 13335
IP address blocks: 172.69.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:ac:40:3c:dc:4b:f9:ec:ea:e0:81:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 02:57:54 2024 GMT
Not After : Mar 11 01:57:54 2025 GMT
Subject: CN=3d678c04-e2eb-4a06-85b8-ee300538b5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9c:9a:76:43:7d:ea:0b:bb:f1:a4:fb:c1:f5:
73:6e:95:98:a7:16:b1:8b:6d:03:10:4d:05:aa:96:
06:91:47:38:9e:4c:95:54:3a:41:4b:4e:30:6b:d1:
c4:7c:e8:be:a1:ef:5a:44:9a:3d:c3:27:92:76:13:
b3:73:5f:2b:5f:35:16:cf:d6:eb:1d:4f:81:11:a9:
d1:2c:38:f0:55:34:ac:c3:09:b9:56:c9:26:48:69:
f4:d4:59:7e:e7:ce:03:22:e9:62:21:e5:2b:7c:80:
c7:7f:bb:8c:12:d6:a3:7f:7f:b8:e2:b4:de:09:31:
7f:ed:9b:18:31:9a:a5:8f:3d:ad:15:bd:56:95:95:
db:9f:99:b0:c8:f6:1d:a8:7c:07:e9:ca:ef:20:8f:
8a:ec:2e:cc:c2:15:c7:21:69:38:be:02:ff:b2:60:
ba:8c:39:2c:4d:1a:6c:cf:06:71:c7:da:c0:db:67:
d8:da:86:dd:0e:d4:c2:a4:6c:97:91:8e:54:20:5f:
24:22:ff:51:39:5b:83:0e:90:36:d2:16:6a:63:6c:
ed:75:27:c0:57:3d:24:e0:85:0d:28:0f:29:a3:d1:
69:e2:01:f4:a5:b0:8f:1b:9a:be:eb:56:f4:b1:db:
de:f5:48:3d:00:91:85:67:50:e6:4c:b6:08:8c:5f:
0a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:61:C9:AD:37:FA:85:B2:2F:2A:E6:F1:1D:70:3D:63:24:8B:BF:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d8988d9b-3981-3a7e-9c86-5454060f90ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:a6:3c:e6:60:8f:24:f9:95:00:39:9e:99:b0:88:35:59:cb:
9b:76:0f:e0:16:fd:e0:c1:17:be:18:2b:14:4b:d9:da:cf:c2:
78:5e:51:52:ec:36:7f:05:df:45:55:cf:38:a2:a6:da:51:78:
33:da:95:f7:e7:d6:68:47:12:7f:33:02:55:2e:0f:e1:95:d2:
87:cf:f1:ba:15:36:4c:d3:6b:62:a3:b1:58:83:d2:15:45:71:
06:39:60:1c:30:38:a0:32:31:c1:41:fa:d2:46:cd:11:1a:01:
d8:2d:49:34:a2:34:af:8f:0a:ee:1c:25:67:b7:7c:50:4f:7f:
64:79:1e:66:ea:cd:02:ae:0e:2c:5a:ac:3e:df:74:b1:90:1e:
74:9e:80:6d:c3:0d:fe:41:91:f0:2f:e7:23:08:9c:9a:3e:84:
e5:8c:47:8c:53:32:1b:b6:25:1f:ed:1b:b9:3b:15:0d:d2:40:
ee:66:e2:66:13:52:64:02:e2:ec:07:81:bd:19:e8:9f:3d:68:
64:2f:6d:1d:fd:7c:d2:bc:6f:94:36:e8:be:c0:48:5f:83:70:
d7:1b:4c:f6:fb:08:97:5c:86:54:e9:c5:09:19:a8:42:1d:47:
b4:01:b9:2b:eb:21:b5:4d:29:40:81:8e:fb:94:80:6d:87:af:
a4:99:bb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:56:33 2025 by rpki-client