Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3118f74d-4ae5-3966-b111-6d6cb9945c2d.roa
File: 3118f74d-4ae5-3966-b111-6d6cb9945c2d.roa (raw, json)
Hash identifier: MeIPyBpTC/wxOdaefbjQWIokKcClgtp/ZdjqholSFfI=
Subject key identifier: 11:92:D7:3F:04:53:D5:0C:0E:0D:32:9B:A3:1A:B6:D4:6A:E7:F4:86
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584908818DF8D9B65C60F914ADE0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3118f74d-4ae5-3966-b111-6d6cb9945c2d.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.67.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:8d:f8:d9:b6:5c:60:f9:14:ad:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=d3f90e40-afbc-413d-8783-3565bd5d2813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:c6:64:77:46:44:2b:1a:96:df:62:a7:00:
a2:03:e5:8f:6c:71:11:a4:99:c3:ee:a7:c5:1f:39:
a7:86:4d:b3:9a:0c:ad:79:0f:df:de:14:c7:99:52:
e4:39:eb:9d:e5:73:6e:e3:e9:3c:3d:de:c6:e6:9c:
b3:34:b2:ee:37:0f:77:b2:cb:f6:6d:ff:3d:c5:5e:
d3:5f:f5:af:ca:af:d5:29:27:03:5b:c2:1f:b3:cf:
0e:99:9a:33:f2:ec:2c:5f:0e:14:e8:3b:dc:92:15:
a6:33:60:9d:8e:e6:25:95:d5:66:06:65:47:5f:10:
24:71:f0:29:2a:18:0a:a7:f4:05:2a:47:f4:d1:a2:
33:a8:e7:8c:c8:2b:7f:86:e7:08:a9:e8:87:d5:1d:
ff:3b:09:96:33:c8:90:6a:c8:84:e6:ae:74:4e:03:
ca:0c:73:82:d0:6f:40:7d:3c:c7:7e:f0:84:2c:39:
f9:24:56:f8:44:78:44:80:a6:23:c8:e3:d5:e7:b4:
db:65:50:62:d5:5c:ee:8b:35:de:f8:a6:88:f8:49:
15:b3:1c:86:41:6b:2b:7d:3e:63:da:03:e2:7a:d7:
87:86:76:95:a9:5a:5b:6a:27:fc:1d:92:42:b3:af:
69:24:a1:c5:57:dc:b4:7b:33:2a:9e:93:4f:97:ec:
7a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:92:D7:3F:04:53:D5:0C:0E:0D:32:9B:A3:1A:B6:D4:6A:E7:F4:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3118f74d-4ae5-3966-b111-6d6cb9945c2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.67.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:86:81:dc:0e:b5:d3:c6:89:da:37:c1:59:71:d7:64:e2:f8:
b3:be:92:ec:47:01:75:72:fb:e6:fe:a5:b7:3e:d1:78:ec:c5:
49:8f:3f:2c:fb:d4:06:1e:ff:47:87:61:7d:16:f7:0a:9c:2e:
2c:fb:90:7b:96:aa:33:a9:5a:d0:93:3c:ea:5c:9e:80:12:70:
8d:0e:d5:fc:76:b5:06:c7:86:87:04:7c:17:ad:89:b7:74:f7:
18:77:7c:34:c1:6e:a9:09:4c:a8:7c:24:49:77:3d:f2:f4:e9:
75:2b:0b:92:38:31:3f:82:44:af:31:f9:04:4a:30:39:43:a0:
89:0a:22:e7:b3:5a:d0:1d:20:cd:d0:4b:94:bb:25:35:4c:8e:
36:79:97:59:55:67:82:3a:8a:07:1d:3f:aa:ac:d5:46:d3:97:
b9:55:13:c3:50:97:72:f1:50:ae:89:c4:0a:e1:02:d5:5e:23:
fc:f2:bd:24:cd:ea:4e:8d:81:cc:95:72:48:2a:f1:c7:a9:a6:
7f:4c:fc:74:0e:04:0b:13:b1:0c:d8:2f:f5:3f:6e:c0:69:7f:
20:8d:d6:b0:8d:93:b7:6a:28:50:04:17:3f:2e:07:42:81:ff:
26:36:e3:3f:cc:11:3a:d1:89:72:9f:4b:85:20:fa:01:dd:da:
5d:ad:76:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:12:23 2025 by rpki-client