Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9321b008-0f22-3d80-8c12-c151456cd1da.roa
File: 9321b008-0f22-3d80-8c12-c151456cd1da.roa (raw, json)
Hash identifier: bz4Mm2cyf5DVChUo5GUAd6k7u71JesPIQypPuC3S4+k=
Subject key identifier: E3:47:48:0D:FE:FF:04:DE:B0:AF:EC:C9:8E:F2:8D:DA:A7:5C:6E:E3
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490B4C074A1BC84F683B2CF380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9321b008-0f22-3d80-8c12-c151456cd1da.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.68.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:07:4a:1b:c8:4f:68:3b:2c:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=7f95be45-769a-44c8-910b-57c790a0663c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fe:4f:57:19:01:fc:3f:5d:06:96:12:7b:5f:
8e:c9:d2:22:f8:26:6c:f8:d9:cb:9f:a1:88:e6:64:
fa:ba:e0:fe:25:22:87:11:fb:26:30:4e:ce:17:ff:
f2:80:24:41:0a:b6:d0:17:57:46:64:ff:27:1b:31:
67:26:a2:a7:76:66:33:9c:2a:e4:d7:43:17:a5:a5:
44:76:44:f4:5c:ea:36:97:a8:84:a1:23:3f:3e:6a:
37:9c:3a:ca:83:24:de:13:73:b6:cd:5b:b8:8a:fb:
a3:21:1c:58:57:38:57:81:de:30:6b:cb:63:3d:f1:
8c:21:65:2b:21:ab:5c:86:e4:0f:f5:a7:22:99:63:
fc:b2:a2:82:6e:78:f9:df:db:63:f9:8f:03:b5:af:
6b:c4:55:7f:55:cb:a8:29:a0:06:1c:31:d5:00:0f:
6e:b8:01:1b:b1:40:d6:ca:e8:59:09:eb:78:37:5a:
b1:24:2f:fd:ad:c2:eb:48:68:5b:52:fb:7c:65:d3:
34:13:79:ed:8f:3e:f6:19:df:98:b2:ff:5e:74:fb:
60:84:fc:92:a9:c6:d8:66:db:9b:0e:52:8f:c6:ba:
ca:3e:0e:47:69:b5:0a:d0:b9:fa:c2:e4:eb:5e:54:
f6:85:f8:6a:de:5e:06:d2:e2:6b:85:ab:7b:88:29:
8a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:47:48:0D:FE:FF:04:DE:B0:AF:EC:C9:8E:F2:8D:DA:A7:5C:6E:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9321b008-0f22-3d80-8c12-c151456cd1da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.213.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:14:5e:b0:1a:f8:2b:c1:2e:b3:28:b8:61:d3:db:d7:99:72:
92:24:a9:ea:30:a3:92:45:72:1e:e8:4a:df:64:0b:7d:50:62:
54:49:23:6f:ae:66:c8:d4:a5:79:28:93:f6:0f:1c:d5:52:70:
42:2e:ac:b0:4e:fb:e1:74:ef:dd:50:6b:b5:20:71:8d:ee:e9:
ea:ce:33:0c:ce:01:7e:f4:86:4f:fe:58:f0:11:02:f2:f7:4b:
7b:4f:49:19:18:79:66:40:e0:f3:42:1f:8c:c4:8a:82:ef:5d:
9e:b3:b5:79:ac:03:61:c0:b4:02:94:8c:b0:b3:5b:3f:26:45:
aa:81:13:5b:d8:7d:19:88:eb:ff:8f:7e:0b:ac:d1:e6:16:5d:
1c:a0:7c:40:c7:c1:29:32:f2:a2:e3:a9:45:1e:96:3d:dc:27:
c9:a8:c5:2c:f7:66:23:f0:a7:55:d0:69:36:98:a8:26:eb:be:
dd:31:a2:43:53:da:31:b7:d3:ab:b2:78:99:1b:a3:8e:cc:50:
f7:a9:0b:1d:9b:1a:f6:ce:75:20:4b:9b:4b:40:a1:ee:b4:e6:
7a:ab:dc:9f:3f:7e:68:b3:30:7d:a4:4c:aa:8f:4b:0e:97:c9:
5b:95:4a:e0:fc:84:e0:47:55:5a:cd:84:33:2c:51:b2:5f:92:
c9:eb:00:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:15:48 2025 by rpki-client