Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efdf0fe6-7cec-3df1-aa40-01cd7e527044.roa
File: efdf0fe6-7cec-3df1-aa40-01cd7e527044.roa (raw, json)
Hash identifier: 1EfKZy/GvTxGkzUVgE27V7wtCYKx5ltzRLE84PrHpE0=
Subject key identifier: 0A:02:C3:CF:D3:EE:5A:D7:A6:E4:E8:8B:FF:FD:89:DB:9D:EA:3E:2F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A902D6F2DE98E9B1B03D780
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efdf0fe6-7cec-3df1-aa40-01cd7e527044.roa
Signing time: Wed 11 Dec 2024 02:01:20 +0000
ROA not before: Wed 11 Dec 2024 02:01:20 +0000
ROA not after: Tue 11 Mar 2025 01:01:20 +0000
asID: 13335
IP address blocks: 172.68.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:90:2d:6f:2d:e9:8e:9b:1b:03:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 02:01:20 2024 GMT
Not After : Mar 11 01:01:20 2025 GMT
Subject: CN=2d2a2aba-24c1-4d80-b96b-c20252b7c5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3d:85:4f:db:7f:b0:2c:12:f0:c0:3f:b7:e1:
c0:35:c7:0e:a8:c2:a4:c6:74:9b:79:88:d6:9e:20:
5d:f2:94:13:2e:f3:22:1c:0c:00:c7:b0:ff:08:3d:
8a:13:40:a9:7f:59:18:eb:34:9f:d1:6f:1a:b7:f9:
ea:83:8e:7d:94:a9:3a:26:fa:d7:39:2d:ba:3d:11:
19:bd:bf:4e:7d:8e:67:4e:45:26:8f:13:83:38:51:
04:7f:7c:cf:c1:77:da:23:e9:19:ba:f5:79:ee:01:
5c:af:eb:1e:51:57:5e:80:5b:6b:4c:9c:5e:d7:41:
3c:33:2c:d8:d8:bf:f5:4d:27:c9:21:1f:d2:23:ee:
2a:5f:7c:1f:57:52:9e:4b:7f:91:15:1f:da:8e:2e:
ac:96:94:70:3b:87:b3:67:d9:f8:3d:7c:da:9e:5b:
cb:e3:53:ff:42:5e:54:3c:37:e9:55:c2:8e:bb:ec:
cd:d9:85:85:19:f8:0b:be:74:94:14:8e:c6:de:f5:
b8:a4:47:fe:86:60:56:b9:56:f0:ae:53:24:10:7d:
0f:89:47:44:ff:c4:8d:f4:b7:fd:49:2f:9e:b0:a0:
51:65:63:b0:8f:9d:df:ae:c5:ac:f3:5c:6d:43:f1:
5b:a0:64:fa:fd:36:0a:7f:b4:dc:fa:2d:dd:e4:c0:
c4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:02:C3:CF:D3:EE:5A:D7:A6:E4:E8:8B:FF:FD:89:DB:9D:EA:3E:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efdf0fe6-7cec-3df1-aa40-01cd7e527044.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.190.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:15:ba:e4:be:92:9f:94:3a:39:dd:f2:bd:c4:c1:b7:68:49:
5e:13:eb:b5:58:4b:e1:49:fa:15:f5:b1:a1:dd:36:c3:2e:10:
6f:4f:26:c2:08:d9:3c:7c:0b:09:7b:f1:2f:47:2f:16:85:b4:
4e:f1:06:5f:38:77:83:b0:0a:81:04:4a:01:6b:b3:bb:0d:70:
b1:0c:a7:66:52:c9:ad:5a:34:a9:81:e9:98:a4:d6:a0:1c:e4:
6a:07:c1:0b:e2:5d:ad:75:15:49:4a:00:e0:a3:ee:26:45:48:
97:e0:8a:a3:bc:5d:f2:34:e1:c4:b5:71:bb:cc:13:31:16:1f:
c1:a6:69:b3:59:97:fa:48:10:41:b4:18:58:be:6c:aa:1c:92:
e1:68:a2:8d:6b:37:b8:f7:cd:c8:9a:eb:05:7b:f6:2d:50:75:
01:dd:66:93:e4:02:11:ab:5c:c9:d3:4a:75:9e:71:53:e7:c3:
c3:1a:fa:4c:1f:0c:54:46:41:3d:d7:b8:a5:1b:b0:37:c3:45:
ca:ad:79:e3:99:f5:c5:2a:33:f7:f2:dc:03:52:f9:cb:b4:03:
51:0e:7d:84:46:7b:26:f1:2a:7d:de:92:a6:27:75:31:d3:09:
ed:a0:2a:d2:65:5c:f1:26:e4:d3:db:fd:6a:9c:dc:1a:a2:07:
91:41:17:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:45:47 2025 by rpki-client