Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da8733fc-9374-3587-b695-3635b841d64c.roa
File: da8733fc-9374-3587-b695-3635b841d64c.roa (raw, json)
Hash identifier: +M4IcJ4v1wSfx8gr1IDI9PpwfgmuJNIt5QJVKjdbvbo=
Subject key identifier: 7E:94:EF:F0:93:80:B1:36:BF:AC:D1:EA:58:28:F6:2B:E8:23:63:33
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848283BBC3465EC55A6F3048480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da8733fc-9374-3587-b695-3635b841d64c.roa
Signing time: Tue 10 Dec 2024 05:59:35 +0000
ROA not before: Tue 10 Dec 2024 05:59:35 +0000
ROA not after: Mon 10 Mar 2025 04:59:35 +0000
asID: 13335
IP address blocks: 172.68.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:3b:bc:34:65:ec:55:a6:f3:04:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 05:59:35 2024 GMT
Not After : Mar 10 04:59:35 2025 GMT
Subject: CN=ce7dca18-e91a-4115-a459-572eb9d00f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:27:25:6c:a7:46:75:a0:1d:68:2c:62:48:af:
76:47:98:e1:ef:17:f3:96:6a:a3:89:77:e8:ad:b8:
cc:49:b1:0a:03:a3:f8:7c:b6:8d:f9:2f:90:84:95:
a4:80:c8:e9:a7:67:bc:90:f6:ee:d1:a1:e5:74:b7:
9d:b8:ca:7c:ab:c8:98:1d:4c:3c:c7:84:5d:19:6b:
ff:67:d1:cf:7b:4f:9c:65:47:cf:7d:f5:c9:09:ea:
bb:73:45:62:40:87:23:f8:d6:2e:59:bf:69:2d:bd:
85:bc:42:6a:0b:15:6a:04:55:ea:15:97:83:d5:75:
57:c8:f7:df:cd:13:f6:9c:f1:b4:6e:3d:46:65:6a:
b1:e8:7c:7c:ce:65:24:be:47:fe:0a:88:91:65:0d:
ee:f1:e9:66:83:68:8c:c2:56:c9:50:e9:6e:21:37:
82:c6:08:4f:c3:f9:39:75:95:08:da:47:8a:1c:c8:
57:6a:f3:9c:68:0e:38:84:e8:0f:0b:94:dc:12:c2:
a3:84:66:b3:ad:35:f1:d6:45:d4:20:8b:38:10:96:
0f:b5:70:67:0e:2c:2f:75:a5:a3:8f:d1:85:9b:0e:
48:d1:7b:b7:dd:20:34:c6:1e:6d:a3:a7:b5:34:ca:
cb:2c:58:b4:7a:21:98:2a:6d:15:9a:45:0a:26:f8:
5f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:94:EF:F0:93:80:B1:36:BF:AC:D1:EA:58:28:F6:2B:E8:23:63:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da8733fc-9374-3587-b695-3635b841d64c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:09:03:66:7c:4a:66:48:b5:af:f7:96:c8:1c:e5:ed:d9:47:
0c:f5:9f:0d:72:92:11:da:86:2f:49:bb:10:04:86:35:90:61:
56:da:70:a1:77:0f:a0:bb:6f:50:f3:7c:ae:09:a1:c5:23:e3:
5e:04:cb:91:6b:4f:f6:85:00:9a:55:19:22:59:5c:25:7f:f8:
76:ae:23:48:0b:9c:b0:bf:81:22:65:26:72:88:9d:26:e7:e2:
18:be:c5:a5:1a:37:0a:30:b1:e2:70:5f:45:66:f0:98:7e:47:
62:91:eb:be:0b:a0:58:cb:a8:54:1d:ff:e4:f8:ba:12:13:4d:
d0:77:ae:f4:f6:1e:ad:50:d8:05:a3:7a:82:79:2d:bd:58:e2:
e1:5d:be:e5:e0:f4:51:cc:10:f2:1c:86:c7:12:0e:87:ca:95:
a6:ef:de:b2:0c:16:06:05:0c:56:a5:a3:e8:5f:8b:c0:03:be:
e6:e2:65:34:40:c1:d9:a6:50:5c:79:92:b8:94:a4:86:dd:32:
68:87:5c:1c:b3:f4:df:0c:af:0e:13:76:53:0a:4d:5d:62:17:
d3:ed:fe:26:60:bf:1e:29:74:11:07:df:62:23:2c:cb:41:12:
66:5b:c5:bd:db:07:7e:72:82:f3:fb:b0:33:17:42:8c:cc:25:
8a:5a:9a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:43:56 2025 by rpki-client