Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eba0db58-d94c-3f37-9ed9-f2cf22885b08.roa
File: eba0db58-d94c-3f37-9ed9-f2cf22885b08.roa (raw, json)
Hash identifier: B3AECpsEa5L0FRIaDjd+thRwU+w1Cu25tKSUmvIFujg=
Subject key identifier: 6F:6A:18:49:9C:F0:E8:E9:74:D1:2D:6A:94:32:67:A0:8B:EB:E5:1E
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848283E53ED5030D84DDA6AB4A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eba0db58-d94c-3f37-9ed9-f2cf22885b08.roa
Signing time: Tue 10 Dec 2024 06:04:48 +0000
ROA not before: Tue 10 Dec 2024 06:04:48 +0000
ROA not after: Mon 10 Mar 2025 05:04:48 +0000
asID: 13335
IP address blocks: 172.68.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:3e:53:ed:50:30:d8:4d:da:6a:b4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 06:04:48 2024 GMT
Not After : Mar 10 05:04:48 2025 GMT
Subject: CN=0b01b90f-f346-406e-a020-46659d8dcb19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b9:0a:e6:1f:2f:5e:0b:5e:7b:fb:f7:ec:0f:
dd:2d:3f:cb:0b:98:1c:65:35:03:8d:e8:3f:fc:cc:
27:70:39:45:7c:ce:5a:ac:bb:00:e3:9c:68:c7:3c:
6e:85:ef:d1:61:8e:e0:a3:ee:db:ef:10:6c:57:22:
ee:68:c9:6f:8b:cb:75:99:df:b8:75:05:9b:07:a3:
44:de:a4:f8:37:07:3a:dd:0d:b2:f1:96:42:30:e5:
a6:b8:3b:22:78:f3:a1:cf:c3:95:63:98:98:58:40:
ad:6d:24:fb:98:51:6e:3b:c3:9e:5e:99:2e:78:83:
2a:8b:d6:29:4b:48:e8:72:9a:8a:93:bd:d7:ab:c8:
04:1c:3f:85:78:93:68:f7:cf:c4:93:b9:e8:c5:80:
23:a3:de:32:06:57:6b:08:1a:93:4b:ea:1d:76:e8:
99:88:0b:57:a1:e9:6d:34:d2:ca:44:77:29:80:d4:
99:03:47:3b:61:b5:a9:af:1b:79:4c:53:fb:df:13:
58:79:3e:a9:19:31:73:f6:25:c3:5f:b6:82:88:29:
62:49:39:1b:49:54:17:ae:1e:19:24:e5:a6:74:06:
71:a6:9b:c2:47:19:1f:43:fe:33:c3:04:a1:53:d3:
3e:88:83:1b:61:d3:bf:d2:a1:c7:bd:81:89:aa:35:
0a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6A:18:49:9C:F0:E8:E9:74:D1:2D:6A:94:32:67:A0:8B:EB:E5:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eba0db58-d94c-3f37-9ed9-f2cf22885b08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.76.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:6d:ae:26:6c:fc:86:c3:c9:9b:ad:26:16:11:16:ff:2c:0c:
cf:8f:80:d5:de:5d:55:e8:c8:10:b4:d2:5f:46:70:ad:f2:97:
ff:33:d4:10:f7:6d:07:19:c6:90:c6:da:cb:3f:95:ab:96:51:
1c:a9:b6:f9:24:a7:aa:e7:12:26:74:1e:c8:61:97:61:ac:e2:
ac:0a:fc:e0:6b:85:c4:56:d4:7c:b9:a4:87:e5:69:1e:57:5a:
1b:47:b0:0a:bc:da:51:50:08:a8:6d:ae:22:77:ef:1c:94:47:
42:95:4c:20:66:61:79:3c:2c:15:a3:ac:bc:90:00:1e:a4:85:
b7:e5:e7:c2:28:78:7e:00:f4:84:70:2e:d8:91:16:a5:d1:be:
cc:8d:14:bb:cd:71:79:61:c8:77:48:f0:3c:cf:ad:3f:88:1b:
ad:12:15:e0:46:ec:5b:a6:a8:29:78:09:d0:46:f7:a7:c9:d9:
41:e0:13:ed:50:32:90:a6:b9:df:55:75:60:fa:ea:5f:64:b7:
10:b2:a2:c5:cd:9c:01:0c:f8:12:2d:f9:89:46:db:f8:9a:96:
5a:9c:2d:eb:5e:b4:24:39:bf:f4:77:b3:da:3b:65:40:ec:b0:
23:aa:e9:2c:83:4e:04:55:5d:50:41:bc:a1:e2:60:dd:64:23:
37:f5:12:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:19:15 2025 by rpki-client