Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/540c9de6-ccf9-387c-9dc0-117d1911ac2e.roa
File: 540c9de6-ccf9-387c-9dc0-117d1911ac2e.roa (raw, json)
Hash identifier: qXwZp15T66xVBzIywoq4ZLYxWhP7qUoxUQfqmifVwDM=
Subject key identifier: BD:16:5A:79:7E:65:52:47:87:27:69:6D:F5:BE:F9:68:37:FA:BC:58
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490B4C0D2363C86338D8B24800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/540c9de6-ccf9-387c-9dc0-117d1911ac2e.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.69.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:0d:23:63:c8:63:38:d8:b2:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=816b5095-571b-4615-b0a0-8d887aefd463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7a:fb:49:a7:c1:e7:42:ac:20:da:67:5e:1a:
a9:4b:6c:ee:bf:66:87:90:b7:e6:06:f5:55:d6:fd:
bf:99:53:e9:b0:c7:56:7a:ac:c3:84:90:8b:65:e6:
4c:ae:ef:d8:25:95:f2:a7:6f:23:6a:ce:68:1d:84:
42:e3:2a:d2:1d:4f:44:80:11:3a:49:b1:12:a2:de:
8f:c8:df:bc:93:91:39:e9:b5:35:9c:91:6f:92:f2:
85:81:25:5c:ce:3a:51:a3:e5:de:80:7b:28:bc:bb:
5d:33:b6:49:e5:93:5b:db:56:d1:f5:73:56:d9:ad:
11:46:08:5b:ec:41:d7:cb:af:6a:3d:bf:6a:06:cc:
7a:03:ed:8f:bd:89:15:00:01:23:b6:c4:4e:28:5f:
37:26:0a:44:e6:e0:d2:4b:f3:a9:25:20:cc:0c:29:
d0:33:7c:b6:89:ce:eb:43:f7:d4:0b:05:9b:b1:ef:
63:aa:77:42:0d:ca:b4:8c:9c:a7:90:ae:12:dd:4e:
97:ba:38:03:93:2e:1f:17:7d:c9:20:31:08:93:bd:
0b:66:8b:d4:66:c9:81:6c:41:2c:3b:fa:f5:3e:76:
78:70:92:86:0f:eb:17:44:ba:5c:a4:7d:ae:d9:95:
41:3a:ab:4a:0c:67:81:a5:bb:bc:a0:70:a7:30:fb:
c9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:16:5A:79:7E:65:52:47:87:27:69:6D:F5:BE:F9:68:37:FA:BC:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/540c9de6-ccf9-387c-9dc0-117d1911ac2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.193.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:df:b0:28:de:d4:fa:43:ef:9e:cf:d6:dc:70:3e:0e:ef:11:
39:c8:cc:d9:21:57:ed:47:b4:e7:b0:a1:f4:a3:fd:d2:1d:66:
bb:83:8e:b3:3b:42:3d:75:f1:8c:b5:d8:97:2a:b9:c4:2f:c6:
0c:08:5c:f4:2a:ce:b8:69:7c:2e:58:e0:9e:37:e2:84:59:4c:
7a:c8:10:e6:9f:16:90:bf:e0:78:0d:de:e4:25:0c:65:da:46:
ee:3c:da:b4:d7:12:28:45:5e:16:72:34:6a:5f:16:3f:f2:99:
b3:e4:04:9e:6e:c0:a3:a7:1e:38:6e:c5:34:70:66:a2:07:72:
7a:e3:48:2a:b4:58:1d:3a:e3:6a:be:0a:9b:a8:53:b5:14:da:
8e:2f:28:9b:27:f9:8f:3e:a7:10:fc:70:6a:c8:2f:3c:50:50:
e8:5c:22:a2:73:58:60:0c:6f:27:ae:f2:04:4d:20:51:eb:1f:
0a:79:5f:0e:2c:7b:61:30:ad:af:a3:36:47:c3:25:d0:f1:6f:
e5:0a:46:ed:44:d0:b9:f1:ef:e8:01:19:b7:89:82:0c:28:9a:
38:cd:43:c2:c1:79:94:bb:5b:4a:0d:14:0d:34:78:d5:d5:1a:
16:38:67:f0:40:eb:d3:34:c0:43:88:ef:94:f2:7f:10:0d:86:
db:ac:73:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:59:34 2025 by rpki-client