Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2dc766a6-25e4-3de3-8f9a-75199c0691e4.roa
File: 2dc766a6-25e4-3de3-8f9a-75199c0691e4.roa (raw, json)
Hash identifier: SnA9P1xnSHN+YQWYNPgEgwbRF4wBEY+kZg/wcLpKnI0=
Subject key identifier: C3:40:45:3D:56:6E:2B:23:E6:16:11:97:B7:44:7A:4B:CD:51:ED:E6
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490F7BF5EAC3471B6EA5012400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2dc766a6-25e4-3de3-8f9a-75199c0691e4.roa
Signing time: Mon 03 Mar 2025 02:00:39 +0000
ROA not before: Mon 03 Mar 2025 02:00:39 +0000
ROA not after: Sun 01 Jun 2025 01:00:39 +0000
asID: 13335
IP address blocks: 172.69.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0f:7b:f5:ea:c3:47:1b:6e:a5:01:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 02:00:39 2025 GMT
Not After : Jun 1 01:00:39 2025 GMT
Subject: CN=5d3bc2a0-7a3b-4c13-9a01-63ec96797b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3e:16:e3:72:02:dc:e6:67:12:6d:70:8c:e5:
41:6c:b0:ee:19:65:a8:c7:27:d8:c9:cf:53:47:cb:
68:43:33:23:b5:72:9c:d7:48:97:08:11:31:fb:fd:
49:17:6e:df:24:3c:ad:41:43:eb:6a:39:b3:2a:2a:
2c:90:51:d9:29:9e:f2:8d:3a:82:25:b5:03:54:14:
22:5b:9c:35:58:b6:4a:d2:a0:56:29:58:6b:0d:8e:
77:ed:6c:b6:fd:3a:83:65:05:b4:04:f8:2c:32:81:
f0:83:be:dc:88:ee:1a:6e:c1:84:07:1d:fb:88:19:
cb:09:2d:04:b8:74:f8:f1:d8:38:77:36:9c:da:fc:
49:8f:90:ec:39:3f:40:5b:55:d2:f8:b7:b2:ae:cb:
b2:29:2d:ec:4f:72:84:16:97:91:8d:44:ca:fb:ea:
bb:f2:7d:ea:2e:2b:dd:15:08:99:a5:9f:d4:0b:45:
fb:94:55:86:4c:95:84:0f:12:cd:45:bc:88:9a:41:
2e:6e:22:43:1a:0e:ff:0c:77:1e:49:bc:ea:db:bc:
31:08:6a:8f:79:bc:f5:e3:b3:7c:fc:e5:13:4a:db:
d9:91:7c:8a:84:13:2e:f1:c9:6d:58:25:a2:ba:43:
3c:4b:bf:98:e3:3b:21:5a:52:c5:ca:a6:79:76:ce:
d0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:40:45:3D:56:6E:2B:23:E6:16:11:97:B7:44:7A:4B:CD:51:ED:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2dc766a6-25e4-3de3-8f9a-75199c0691e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:8c:b7:3f:6d:48:67:ed:1c:2d:d4:18:e3:f8:e2:3f:28:1d:
74:82:a8:c1:ff:6d:8d:a6:01:67:e7:eb:47:0a:b1:88:76:bc:
7f:1f:d7:f6:13:df:a2:ed:e0:41:b6:c3:5d:52:d8:f6:67:38:
2c:1c:a4:41:94:d3:cd:e3:70:c7:26:9b:c9:6a:b6:83:f6:94:
ec:c5:b7:22:36:dc:31:04:91:45:c3:17:75:71:6e:b6:4c:fe:
a4:d5:66:d3:35:b7:c6:69:8c:06:6e:dc:65:d6:7f:50:b6:5d:
30:1c:df:9e:a3:f5:89:d6:32:97:38:48:55:75:20:0e:b1:0a:
11:bc:48:41:01:ce:71:bc:ca:f2:87:95:1d:9c:61:1a:60:28:
47:52:59:33:75:7b:4c:39:47:4b:a2:d7:e6:01:33:b4:f8:c8:
43:02:f2:23:d2:17:5f:85:8c:ac:8b:91:0f:08:db:b3:b7:df:
bf:a8:f4:58:a0:75:cc:94:e6:f7:0e:60:f1:f0:cf:ed:ce:bd:
c6:e2:32:b2:a1:11:62:5b:84:be:24:f2:71:27:28:62:a8:f9:
20:4e:08:9a:0e:a9:49:5b:bc:d4:fb:af:99:a8:4a:16:be:85:
d1:12:f6:ba:43:b6:b6:90:b9:e6:dc:30:73:3c:7d:84:91:e4:
4b:b2:71:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:14 2025 by rpki-client