Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6c964f17-dd9e-305a-b4a3-efd8e43d3a89.roa
File: 6c964f17-dd9e-305a-b4a3-efd8e43d3a89.roa (raw, json)
Hash identifier: 6FlTctbpSVRLcd6D+YegYpwgVq9LS0buZIKRRP1NeHM=
Subject key identifier: D9:D7:60:22:D1:09:48:25:F8:FD:61:86:82:82:9E:A1:54:73:2D:3E
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490B4C173B8E1FAD6E622D5088
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6c964f17-dd9e-305a-b4a3-efd8e43d3a89.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.69.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:17:3b:8e:1f:ad:6e:62:2d:50:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=44c85d45-64e3-4f4c-b78a-9ecb520848a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:92:c4:7d:2e:e6:d4:cc:6b:1b:1d:87:f3:0c:
6f:0c:1c:ea:10:e9:9d:e0:a3:53:02:d0:c5:89:ad:
31:0a:b1:d8:cb:af:9e:86:e6:f0:f4:f8:6c:9c:90:
bd:8f:34:fb:68:58:05:c0:65:cc:91:b7:18:04:bf:
1a:c1:35:ba:c5:36:43:31:fe:19:26:d8:42:d0:11:
9d:a1:12:fe:f4:91:50:70:cd:1f:3c:98:4f:4f:3d:
b8:1b:53:1e:8d:5c:8b:e5:91:f9:27:28:3a:7c:06:
98:b1:fb:50:58:c1:3f:97:89:98:99:57:e6:68:12:
c0:d0:f1:67:50:5c:53:d3:42:49:ba:74:98:08:00:
71:85:9e:28:cd:27:d4:09:26:80:94:ac:8c:11:61:
d8:0f:1a:5b:8c:86:48:4b:23:0a:8c:af:48:5d:b3:
18:b7:36:31:88:0b:77:7e:bc:6e:67:77:2d:81:36:
ca:1e:eb:65:8b:3d:c7:92:c0:00:c9:da:64:bd:9c:
1f:7e:c7:c5:7d:65:20:22:1a:7d:1a:2a:cf:ca:21:
6c:21:7d:aa:3d:5a:9e:eb:1b:21:59:1a:76:d8:98:
17:f9:55:24:df:cf:0b:ce:ee:01:ab:5c:0d:91:f4:
0c:12:e2:6b:79:0f:38:08:12:b5:6a:70:3d:24:f6:
b7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D7:60:22:D1:09:48:25:F8:FD:61:86:82:82:9E:A1:54:73:2D:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6c964f17-dd9e-305a-b4a3-efd8e43d3a89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:79:f8:ac:e4:36:d9:38:3d:83:d7:aa:d0:33:b9:e0:44:c3:
a8:a0:74:fb:49:6a:c2:11:78:14:6f:1c:a4:e4:a7:ec:07:af:
41:2f:f4:9b:15:ff:dd:1c:dc:36:dc:1b:ee:50:b8:e4:d9:4b:
dc:49:9e:28:b6:99:70:ee:ba:fe:f8:49:ff:89:10:99:38:89:
35:27:f7:64:f4:10:40:95:5a:f1:93:1d:3b:a7:7c:ba:e6:2e:
5c:27:45:8d:01:22:f5:46:23:17:4a:86:05:ec:aa:85:bd:1a:
bd:65:92:f8:c0:83:56:77:c4:d3:da:bb:10:cb:6a:76:38:06:
d5:b1:9f:e2:c1:4c:6a:bc:0c:0c:15:2a:8b:12:19:57:23:3d:
a5:42:99:a1:88:50:3c:94:3f:1c:26:69:21:94:38:99:44:df:
87:bb:46:82:96:d0:1b:c1:9c:b4:2d:d2:22:91:1a:d5:3d:44:
ee:59:1a:a8:9c:4e:4e:11:7b:f2:ba:a0:30:0d:67:78:6e:3f:
a7:40:55:27:34:40:5b:a7:a6:9d:26:64:b6:67:dd:e2:99:f0:
56:a3:57:88:13:ba:16:57:d4:92:c6:a0:40:d9:84:97:00:80:
b9:2e:1b:15:3b:16:70:18:d0:31:32:29:c4:42:46:6d:2a:7a:
9a:16:98:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:21:52 2025 by rpki-client