Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb65c8f7-c6d2-32f9-bff9-66628b24a5d6.roa
File: fb65c8f7-c6d2-32f9-bff9-66628b24a5d6.roa (raw, json)
Hash identifier: +PPoVe0XA6W0THEqRKt6An6mzX+nfvcmrnxfIseM1fo=
Subject key identifier: 7A:F0:A3:5B:3B:26:D8:46:1B:CF:07:FD:0F:CA:7F:04:C1:9E:4A:5F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482A8EBC4CA7AEBBAF3FBDD940
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb65c8f7-c6d2-32f9-bff9-66628b24a5d6.roa
Signing time: Wed 11 Dec 2024 01:58:26 +0000
ROA not before: Wed 11 Dec 2024 01:58:26 +0000
ROA not after: Tue 11 Mar 2025 00:58:26 +0000
asID: 13335
IP address blocks: 172.68.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8e:bc:4c:a7:ae:bb:af:3f:bd:d9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 01:58:26 2024 GMT
Not After : Mar 11 00:58:26 2025 GMT
Subject: CN=89537be3-c55f-4c42-86a9-f5b7d194c1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:98:44:1b:bf:0c:e1:ed:1b:d2:f8:ea:19:6f:
1c:19:ac:4f:ef:52:9c:dd:37:d1:7f:ab:98:3c:a1:
bf:1a:a2:8e:4a:9d:85:e2:2f:c4:9b:56:9e:eb:95:
01:d3:b4:91:84:40:64:6c:7e:36:82:b8:32:4e:09:
1b:3d:22:a9:5a:a3:4f:c3:27:3d:b6:0e:cd:21:f6:
6b:4a:5f:f9:50:ee:aa:d5:6e:78:c9:bd:29:4a:14:
3b:26:f5:8f:8b:0c:8a:26:51:2c:17:60:e8:0a:ad:
d7:4f:58:b1:95:8b:82:b9:03:57:ba:9e:84:3c:e9:
04:bf:0e:3e:90:ef:cb:a0:dc:0b:80:28:95:f4:a3:
9d:14:42:a9:db:7b:57:25:c3:bc:5f:79:42:48:7f:
19:e3:1a:83:d6:ea:eb:8b:74:00:d2:e2:54:fe:6e:
07:ee:8d:a4:bc:ab:61:7d:c6:35:0f:97:69:64:f1:
45:5e:fb:0b:bc:15:28:4e:7f:d2:a8:67:63:3e:55:
b8:4e:4d:2c:f3:3c:e7:50:6d:67:3d:ea:54:f1:11:
2d:e0:0a:7d:c7:e4:a8:82:af:65:26:3f:0e:c0:2c:
45:74:d9:19:7a:01:3e:ac:79:70:15:d7:68:1a:50:
23:ce:40:27:1b:ac:a2:d2:e7:cf:d2:1b:c4:ea:ef:
ce:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F0:A3:5B:3B:26:D8:46:1B:CF:07:FD:0F:CA:7F:04:C1:9E:4A:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb65c8f7-c6d2-32f9-bff9-66628b24a5d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.166.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:dd:a2:df:89:97:cb:f5:7c:4d:9e:e8:ec:ed:d2:a7:fa:8c:
ff:12:29:85:97:c3:3f:09:7f:39:19:94:20:9e:de:26:b9:5e:
3a:97:c3:ba:65:64:27:8b:d9:a6:4d:a8:d4:f8:49:83:85:6a:
16:7f:44:72:b8:2c:25:86:39:d9:9e:c4:0a:b4:24:90:7e:64:
94:3f:0e:f2:00:b0:77:9f:0d:8c:9b:69:97:6b:e3:5d:0b:b3:
a7:39:2b:00:e6:e4:af:79:77:16:c9:6a:cc:39:a1:ed:57:ff:
9a:64:f7:8b:67:ce:98:af:2c:49:a2:d5:a1:ce:0d:27:30:f0:
f9:49:be:93:cd:d4:ed:ed:83:60:48:db:24:c0:73:57:1d:2b:
bd:02:cb:01:13:fd:f7:59:00:6b:cc:5b:c5:2b:ad:6e:7b:e8:
0c:b6:7c:13:81:16:b7:6e:8c:db:21:11:ec:bb:b6:4b:4d:c1:
a0:4b:3c:32:f7:6b:45:58:30:71:b5:c4:75:cc:2e:d6:55:98:
d5:7d:5f:ec:5f:a1:ae:81:a0:ce:f4:6a:4e:17:83:92:66:91:
0b:42:74:04:7a:32:f0:06:22:2d:14:6a:09:21:d0:3c:81:96:
62:fd:24:35:91:f1:64:a3:b7:a3:5d:7c:fe:3d:d9:04:b1:c0:
54:67:69:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:44:32 2025 by rpki-client