Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/76e7108e-50ed-3796-b172-e968e0bcb786.roa
File: 76e7108e-50ed-3796-b172-e968e0bcb786.roa (raw, json)
Hash identifier: L9MffgsL8SczdoKjgq/Ser2oLqkPlGT3oF1kxx8cFyo=
Subject key identifier: D1:B4:CE:EB:B6:E0:8B:98:BD:26:70:2B:C2:60:6C:8E:7B:9F:E7:7C
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584908818A0A313073C32B2A9800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/76e7108e-50ed-3796-b172-e968e0bcb786.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.64.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:8a:0a:31:30:73:c3:2b:2a:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=828f5c79-b9b1-422c-842d-503b35cf52a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d0:8a:1a:38:62:db:1f:8c:51:26:a2:1e:77:
92:7a:cd:34:01:0e:c8:48:d5:32:62:14:59:8c:37:
87:fb:90:35:87:7d:97:45:2e:ac:dd:bf:d3:83:9e:
a7:13:47:15:db:98:e2:1f:1f:e6:99:01:d2:3c:96:
2b:2c:79:5e:b7:69:1c:11:3d:27:fb:1d:f1:d0:46:
03:c9:44:55:9e:c7:f3:33:bf:09:d8:80:07:55:a9:
a3:7e:a1:b5:4a:bb:02:29:87:c0:e5:de:48:9e:5c:
71:72:72:84:af:cf:b2:ab:8c:4d:34:58:e2:47:1d:
47:92:3e:45:ab:61:04:ec:86:27:e7:ed:e5:ee:71:
85:49:6b:c9:17:76:d6:b1:82:66:f3:d2:b7:e7:2d:
a2:b2:ef:17:88:58:3b:9c:19:9d:bd:bc:17:8b:50:
84:27:d8:d9:68:64:45:43:02:a5:ba:67:27:23:43:
dc:f5:e6:84:29:26:41:7e:1c:33:ca:92:37:52:5c:
dc:fe:c9:75:5f:1a:24:db:2c:31:59:4a:8f:f0:7f:
29:e9:a2:63:d7:d2:f6:43:46:54:38:34:2f:d3:87:
fa:5a:b1:87:44:2c:80:6c:3a:4c:8b:af:4c:a2:f4:
0a:ea:f7:e0:db:66:90:a6:6a:c8:ae:08:25:cc:34:
fc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B4:CE:EB:B6:E0:8B:98:BD:26:70:2B:C2:60:6C:8E:7B:9F:E7:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/76e7108e-50ed-3796-b172-e968e0bcb786.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.64.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:a3:9f:07:04:52:3a:e2:48:43:78:04:14:9c:1a:06:46:a0:
d7:d4:2a:85:35:86:b7:96:28:69:d2:f1:3b:ca:18:5c:6f:51:
27:17:51:87:51:ea:39:28:63:14:46:8e:e5:b9:85:03:b0:bd:
ac:ef:de:cc:6a:c3:f1:a3:a3:4c:b8:13:c3:46:81:01:e3:e3:
2e:ac:f5:39:41:f0:32:f8:1d:18:b4:a0:b5:3e:13:08:f9:9e:
91:c5:a8:af:8d:73:45:ca:7f:d0:0e:07:5d:a5:e4:85:2d:b1:
47:ad:f5:63:cb:4a:52:2e:04:83:59:c3:b7:73:b6:c5:e8:6d:
9d:a5:3b:8b:38:49:9b:8e:19:a4:17:ec:c6:c3:2d:6c:fd:b6:
a5:a5:08:ad:51:df:09:1d:d2:2b:8c:a6:9a:86:f6:09:4b:2f:
b8:89:cb:c3:82:a8:bb:7d:f7:4f:13:27:5d:3e:6f:97:48:7a:
2d:69:fc:7a:64:b6:57:2b:7b:de:12:14:af:37:be:ff:2d:4c:
5e:96:5e:6a:2c:3f:e5:a6:32:4e:4a:78:cd:a5:df:c7:f1:9a:
33:bd:16:13:f4:e9:58:dc:59:d7:e9:ff:ce:c4:d7:1a:c3:ab:
37:5b:3b:a5:d4:cf:2b:77:ec:a2:4d:3e:99:4f:61:7e:c9:64:
4a:dd:2c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:09:30 2025 by rpki-client