Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/08808117-e9bf-3f7c-997f-7dffa22721e2.roa
File: 08808117-e9bf-3f7c-997f-7dffa22721e2.roa (raw, json)
Hash identifier: ZTLlIaC72Zz45BdebntxMfkH+O226p23YYxCtBw3fjE=
Subject key identifier: 4D:AF:B7:CC:D8:47:D1:26:1A:53:1D:A3:33:FF:56:8A:81:03:F6:76
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490881940EDE812834489DC340
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/08808117-e9bf-3f7c-997f-7dffa22721e2.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.68.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:94:0e:de:81:28:34:48:9d:c3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=0bfd05f9-85f6-4235-a163-3609c7951b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9c:a7:54:be:62:9a:34:1f:ba:87:40:ce:6f:
c1:16:c9:14:56:a2:55:36:b7:3f:4a:86:b4:30:25:
ae:5f:2d:5c:17:c6:2f:65:fc:cb:82:49:48:e3:5b:
af:6c:d2:89:27:18:52:42:a1:80:d5:86:54:67:55:
33:b5:6f:6f:c6:97:71:e3:43:9a:2c:9b:ee:0d:1e:
ef:b0:ac:dd:23:eb:4a:9b:0e:3a:53:8c:fa:17:50:
fc:a1:8c:41:15:85:74:22:0a:cc:4c:d9:2a:3e:f4:
39:ff:0e:a7:c1:b1:ea:26:76:d6:da:4e:b8:4d:4b:
8c:2c:a4:cb:12:0b:07:f8:09:c4:3e:27:cd:b8:1f:
f6:06:b5:f5:f7:7f:dd:0f:1b:52:f4:4b:ab:1e:ac:
3f:37:c1:7a:b0:17:79:1b:a7:e9:fb:17:9f:25:e1:
fa:72:1e:15:94:09:32:78:e2:16:79:f5:c2:ad:d3:
4b:1b:11:75:25:21:8f:84:af:64:f4:9e:35:fa:e0:
da:48:e5:bf:1a:53:bf:4e:1f:04:7e:ba:20:95:71:
91:24:8f:20:45:d0:79:2a:87:4c:c4:91:42:50:95:
43:2b:6d:38:c9:7a:63:df:6e:3b:c6:04:fc:ad:4b:
e5:7b:c3:13:bf:7c:1b:db:67:7b:f3:96:71:75:d1:
b5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AF:B7:CC:D8:47:D1:26:1A:53:1D:A3:33:FF:56:8A:81:03:F6:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/08808117-e9bf-3f7c-997f-7dffa22721e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:a5:d3:cf:91:0b:88:7a:55:f7:f9:92:5d:13:c8:5f:22:88:
17:68:52:5e:ac:7c:84:97:29:0c:6b:6e:0e:5d:20:87:70:8d:
76:8b:e3:1d:16:29:05:58:de:51:e4:83:42:0a:4f:2c:6c:ef:
da:a1:df:c4:9b:01:63:38:e4:e7:78:b2:af:0b:8f:de:68:e9:
c2:0d:6b:7d:8b:81:35:7a:51:8d:b1:78:2e:9a:02:6d:6c:0a:
7d:31:0a:cc:11:cd:c5:41:61:53:31:19:e3:70:ca:c9:7c:8d:
c3:ae:85:95:88:e6:b2:ef:2e:83:81:20:aa:d0:4a:da:e1:c8:
37:ae:f9:af:45:ff:02:14:02:bb:35:c9:bf:7c:97:71:b6:ac:
75:5b:1f:bd:73:35:4d:65:ec:c4:01:dc:2a:dd:fb:e9:cf:00:
45:1f:7d:40:0f:7d:84:a6:17:ca:d6:59:c1:83:ee:d0:f4:32:
79:a3:68:1a:a9:ac:68:ed:1d:89:6c:83:2e:eb:9d:00:5e:99:
f4:e8:84:ba:9f:a2:08:4e:24:d1:9b:8c:e6:07:b2:7c:43:49:
1d:2b:7e:0e:14:c5:39:40:1c:25:f4:f7:5d:17:e6:d2:a9:86:
53:78:73:d7:f5:0f:e9:eb:3d:c6:88:d9:43:d2:a3:c3:a7:d9:
0e:6b:53:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:25:27 2025 by rpki-client