Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f1de7960-1381-3f30-9985-24f97a3b12e2.roa
File: f1de7960-1381-3f30-9985-24f97a3b12e2.roa (raw, json)
Hash identifier: 4E13KTlAke/qZgiZ63eh7AWe+CKkEiK5fuaqz2wxetw=
Subject key identifier: D9:01:D4:92:A3:7B:CB:7F:46:F2:D0:12:CD:1E:57:EC:12:8B:A1:44
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A8E64930BD6B85C29F10AC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f1de7960-1381-3f30-9985-24f97a3b12e2.roa
Signing time: Wed 11 Dec 2024 01:57:45 +0000
ROA not before: Wed 11 Dec 2024 01:57:45 +0000
ROA not after: Tue 11 Mar 2025 00:57:45 +0000
asID: 13335
IP address blocks: 172.68.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8e:64:93:0b:d6:b8:5c:29:f1:0a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 01:57:45 2024 GMT
Not After : Mar 11 00:57:45 2025 GMT
Subject: CN=0f00d897-98b1-4bfb-a028-83600ad5da3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8a:d7:9b:a9:4b:7c:bf:79:c7:9e:52:e7:7b:
da:1a:cc:47:ec:7e:71:2d:84:f3:4e:a6:d4:5f:a6:
d6:10:cd:77:07:ed:c1:98:13:45:45:cb:7b:62:57:
ce:9a:11:2a:66:82:3c:59:bd:fc:30:c5:38:af:54:
68:c3:53:ea:63:9d:21:ee:3e:ac:27:f6:b4:f5:9e:
e2:2c:d7:a7:61:38:b4:7d:a4:36:4f:8a:93:5f:41:
ae:ed:78:75:7b:c0:a1:b2:d2:34:a8:2c:44:17:51:
c7:e4:f6:65:f0:08:d1:b4:1a:56:d8:e8:26:d0:36:
86:63:2f:23:60:0e:5f:30:63:24:9f:3c:40:a4:41:
78:85:03:5a:4f:ae:3e:a6:65:78:81:fd:c7:27:52:
2b:04:13:e4:3a:c0:bd:00:a5:bc:22:28:c9:57:89:
00:37:9c:6c:2e:9f:0e:b4:90:5e:de:21:7f:7f:18:
e7:34:f1:e8:95:1c:20:49:2f:84:ec:5d:46:8a:32:
c6:8b:f2:22:ac:15:c5:75:87:6c:a1:52:15:d3:91:
e3:91:8f:fd:45:e6:3a:8d:ed:5e:c4:5c:b0:f6:d3:
ef:7b:00:57:bc:5f:58:e3:6a:0c:2c:68:87:c9:76:
c5:88:f2:40:c8:1b:a3:c4:6a:86:2b:fe:93:c8:cd:
c4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:01:D4:92:A3:7B:CB:7F:46:F2:D0:12:CD:1E:57:EC:12:8B:A1:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f1de7960-1381-3f30-9985-24f97a3b12e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:3b:a0:b3:e4:0c:5d:97:e5:c4:8d:75:6f:21:be:f6:52:dc:
11:7f:94:d8:d1:17:a7:94:2d:f1:ff:dc:50:2b:51:ec:85:63:
cc:5a:97:5c:16:81:fd:93:17:2b:ae:f8:31:49:87:ef:40:8f:
52:cf:e0:8d:58:b8:ca:18:69:a7:a1:05:7e:42:ee:dc:23:51:
34:ab:d7:4e:fa:64:c9:75:00:5a:ed:47:57:02:c0:e5:4a:f0:
01:10:d0:fd:8c:e7:5b:41:6d:13:73:13:b1:89:4b:e2:21:86:
3e:5a:44:5e:57:47:85:06:ec:13:1e:61:1e:8a:9d:c7:26:ed:
ae:2a:1b:85:8b:9f:32:98:5c:19:46:fd:2f:02:07:fe:b5:86:
36:b8:4e:73:03:f0:45:a0:91:85:3a:de:b6:92:21:04:bc:61:
dd:5f:20:6a:e9:04:e6:11:97:11:46:e8:d1:be:36:a5:65:59:
fd:19:80:df:f9:6f:b6:1a:74:c6:94:66:c0:99:85:7d:e0:3b:
46:59:b5:7b:12:fb:d4:0c:b1:4e:8f:75:21:ab:ac:8b:29:14:
a5:94:05:51:e3:ee:f9:c6:c6:e8:c6:59:b7:be:58:2c:b8:e7:
ae:9c:52:a0:a7:67:8f:4e:f6:a7:e5:f5:c9:dc:fe:df:fe:5c:
a3:bb:1e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:50:51 2025 by rpki-client