Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06aa9508-1f87-3be6-af1a-ca72ec736648.roa
File: 06aa9508-1f87-3be6-af1a-ca72ec736648.roa (raw, json)
Hash identifier: LZsdJqaRg/xImHpmPpCnM1qZwr4edS+CT7bkBBpRjVM=
Subject key identifier: 76:17:6B:A9:9A:E2:7A:E4:BE:5B:25:4D:EF:C8:69:CB:CA:0E:32:82
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490B4C0C6A89BFC2EA94E9F600
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06aa9508-1f87-3be6-af1a-ca72ec736648.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.69.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:0c:6a:89:bf:c2:ea:94:e9:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=b20fef2f-b590-4d1d-aafa-c1c6319f80f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e6:47:42:bd:99:2c:ff:d6:b8:f1:35:39:3e:
d0:e3:71:29:22:80:76:36:c2:b5:d7:30:35:b1:c3:
54:6f:c6:22:74:30:fd:d1:22:1b:c4:45:e1:1e:14:
97:8e:af:f2:dc:8c:99:44:7d:c2:84:05:13:8d:7d:
dd:dd:70:12:d5:c2:f5:7f:23:7b:c9:4a:7b:95:a2:
17:46:e9:ee:2a:e6:57:07:93:72:d6:b6:36:52:c5:
60:74:62:e6:bf:28:1a:cc:6f:59:8a:76:61:8b:ae:
af:1e:a7:1f:99:89:6b:b4:b4:26:c4:0b:f3:bd:1a:
b4:5a:94:19:fa:c7:c1:11:b4:18:41:c6:0a:3d:e6:
e1:39:0d:b9:b2:81:b4:c0:da:9f:11:03:f6:01:30:
60:39:47:75:b8:92:29:e7:6b:3a:6a:10:35:b9:83:
07:0a:95:5a:8c:81:c6:8a:37:67:89:c8:2e:73:4b:
05:92:d5:49:27:c3:a7:1b:23:9e:41:38:f9:f0:f6:
28:a3:a7:a1:a8:33:b0:fc:97:c3:5f:11:79:09:73:
98:1e:f9:3b:ff:d1:18:d7:ad:c0:2d:04:44:5a:a8:
42:81:5b:d7:ab:3d:05:89:a9:10:ec:ba:e2:5d:8b:
15:b9:a0:e6:2e:89:d8:7d:b7:8d:5c:3c:27:d1:fe:
e5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:17:6B:A9:9A:E2:7A:E4:BE:5B:25:4D:EF:C8:69:CB:CA:0E:32:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06aa9508-1f87-3be6-af1a-ca72ec736648.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:e3:52:c6:25:84:b0:81:e3:78:0b:1f:8b:0b:24:a6:f6:e0:
67:46:6b:be:37:6a:82:8e:e3:43:6f:28:4d:e4:55:dd:7d:d1:
59:b3:bd:88:17:24:6b:98:f8:d3:e3:d6:62:93:78:ef:1a:92:
94:fc:f3:ef:de:53:1b:10:3f:a0:29:02:ba:b7:29:a7:25:1d:
e1:5a:44:38:8c:75:7d:9e:2b:02:41:eb:2c:94:d3:9f:45:9f:
f8:fe:32:5c:f9:c9:5f:c3:e7:a0:1a:90:e7:83:c7:a5:37:f8:
0a:14:62:5b:6a:60:50:5a:49:2d:f0:1d:1b:e0:f7:33:4a:f4:
6f:e2:86:50:21:41:32:db:3e:38:f5:dd:1a:f5:51:da:60:66:
5e:e9:ed:81:29:ef:f5:09:4b:35:ad:47:b1:25:4f:26:eb:20:
45:8e:8c:88:5b:6d:9d:3b:45:ba:f5:93:48:7b:29:74:03:2a:
39:26:2f:82:f6:cf:2e:e1:39:08:b5:73:74:17:e1:a7:9b:8e:
da:f9:de:36:c0:a1:ca:c6:1e:73:32:7e:61:05:c5:4c:2c:22:
e7:f5:af:85:fe:ad:74:5a:22:be:c1:41:4e:e2:97:28:c4:78:
e3:10:83:b6:59:74:21:5a:70:fe:9b:46:bb:34:06:42:33:a4:
54:a9:f3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:59:52 2025 by rpki-client