Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2896349d-d866-3aca-a14c-16a1b5220e33.roa
File: 2896349d-d866-3aca-a14c-16a1b5220e33.roa (raw, json)
Hash identifier: oVCGfkLWP2a33xgxNY2mJK+y6CCEEHs9evLwUuwHzh4=
Subject key identifier: 68:35:EA:F7:4C:97:9A:19:34:30:89:E5:33:D2:D4:B7:99:A5:7F:53
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584908818C43F1DC92ED74D7EA80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2896349d-d866-3aca-a14c-16a1b5220e33.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.65.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:8c:43:f1:dc:92:ed:74:d7:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=1cad880f-ca7f-4b47-a8aa-891f7c224302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:a7:70:06:d5:d9:c7:b4:fe:e4:43:3f:e1:
a7:9d:aa:12:f6:c5:5d:c3:96:83:2d:4f:13:a7:60:
c3:b2:4b:ee:1b:aa:07:d7:41:91:14:af:59:4b:f1:
ec:16:5e:b9:f4:65:20:ac:89:dc:c6:fb:a8:5e:74:
4d:2a:77:5d:55:f6:c8:9d:b1:1a:62:41:52:a5:63:
25:8f:86:4d:1a:9a:b9:f1:82:14:b3:a9:3c:6d:8a:
39:f6:43:fb:45:e5:b2:76:7a:ab:a6:71:bb:a1:ba:
3f:1a:4b:17:92:be:5c:2e:4b:bf:bb:3f:63:59:f6:
bb:34:81:73:24:15:2f:c5:39:e5:ea:ea:8a:cc:02:
a2:48:51:0c:90:b9:ec:04:42:6e:5b:43:9a:ab:fa:
f1:a0:b3:4a:48:26:89:68:a3:09:a3:f5:85:23:22:
35:38:86:4c:3f:f6:f3:41:64:e0:d6:b3:6a:4b:fc:
0d:7c:11:74:d1:5b:3b:b2:11:73:79:0d:92:9a:52:
2a:b3:e5:b8:9c:3f:e4:5b:16:dd:86:17:32:bd:15:
28:70:11:00:a6:a2:60:dd:9c:2f:aa:4b:66:d6:cc:
21:50:4d:7a:f4:68:4f:7a:ea:2c:3b:cf:b9:a3:75:
df:19:42:8a:c4:d4:31:02:f8:9b:33:b4:de:bf:bd:
5e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:35:EA:F7:4C:97:9A:19:34:30:89:E5:33:D2:D4:B7:99:A5:7F:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2896349d-d866-3aca-a14c-16a1b5220e33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.65.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:3b:c5:03:11:87:24:e0:c5:fc:12:b8:39:90:bc:43:2d:9a:
da:93:9f:4d:28:69:2c:de:31:0f:84:3f:14:70:2d:98:38:f1:
76:79:65:25:2f:f2:a9:b6:2f:f6:1c:1b:9a:d2:90:f2:ff:d7:
c4:1f:3c:13:59:95:26:f5:f9:2b:94:c1:fb:4a:d6:32:2d:2d:
53:65:30:dd:14:4f:08:e3:00:76:e9:55:58:e6:a3:a3:05:6a:
5a:b0:6e:b2:4d:af:6e:2e:0c:4d:a1:4b:f6:ad:8f:e1:5f:68:
2a:a1:54:e6:af:25:9a:f7:be:8c:f6:28:ac:0e:6b:76:8d:a2:
05:60:62:34:fd:59:b8:4b:d3:7f:e5:91:e2:88:d9:02:68:c0:
8f:0c:f0:1b:49:ac:1b:c4:7b:ce:5c:b7:dd:b7:3d:cc:5a:34:
4f:87:bf:ff:77:1a:66:9c:f0:31:d0:1c:36:46:d2:63:fc:b2:
3b:00:f5:ce:3f:84:9f:06:8c:23:c3:75:14:f5:c7:5e:f6:83:
a3:23:60:f6:9b:61:60:fe:1c:b9:b0:8e:23:77:dc:02:89:ec:
b4:c8:e7:ff:fa:81:48:f6:83:07:62:ff:b8:11:9d:eb:9d:e4:
c1:aa:69:87:19:98:15:4d:02:7d:18:04:55:61:7a:3e:c2:47:
01:11:54:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:43:32 2025 by rpki-client