Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bd9ba23e-776a-3a49-90e6-b56a58f11076.roa
File: bd9ba23e-776a-3a49-90e6-b56a58f11076.roa (raw, json)
Hash identifier: nMWnzqCzCDmTXx5kvJpteSDAVO/itWN//fC2fxb7L9I=
Subject key identifier: 0F:90:E0:C2:63:D9:99:42:E3:C5:8B:17:24:E5:5C:07:B9:2F:C9:7F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849088190A025FED550EA1DC380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bd9ba23e-776a-3a49-90e6-b56a58f11076.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.68.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:90:a0:25:fe:d5:50:ea:1d:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=ae326271-9eea-4d68-9020-3782c83afb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:71:b1:22:6f:09:9e:eb:8c:63:94:9e:7c:
0a:78:d6:aa:db:83:2b:c0:0b:33:fb:1e:b6:2f:3c:
12:92:dc:d0:fc:3e:53:82:be:ca:2c:9a:41:12:db:
c0:15:24:67:4f:75:57:2a:c5:e8:a6:b7:54:d7:d4:
ca:96:9c:1e:18:eb:24:0d:5d:4c:a6:2d:c0:70:06:
75:3f:ab:37:5a:78:a9:35:12:20:db:93:cb:34:2f:
a3:54:27:40:ea:36:21:3a:9e:79:f1:d9:3a:7b:bc:
87:8b:aa:a5:f1:41:e1:3c:4c:78:60:a6:b2:4b:54:
c3:91:9f:d4:6c:3c:4b:f8:9e:16:00:48:88:3b:88:
35:d0:75:86:05:97:41:79:0a:4d:d4:6f:be:6b:2e:
3a:fe:67:ad:56:23:42:90:e9:2b:0f:0d:e9:21:1c:
69:52:ed:91:8e:f7:b1:c4:d5:3d:ba:0c:e9:5b:09:
7c:ae:07:86:51:c6:f6:1d:e7:18:e2:dc:2e:97:90:
29:43:47:a7:d5:b8:94:ee:b4:d5:08:af:28:2c:a7:
fa:cd:ce:a8:b3:6d:c4:80:5a:80:55:9f:08:c1:06:
2f:82:1b:dd:94:1c:6d:6e:2b:7d:0d:3e:f3:d2:8b:
00:cf:62:4b:84:a1:cf:d4:d5:51:7f:48:89:89:d7:
8e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:90:E0:C2:63:D9:99:42:E3:C5:8B:17:24:E5:5C:07:B9:2F:C9:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bd9ba23e-776a-3a49-90e6-b56a58f11076.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.39.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:3f:d0:61:d6:31:f5:9d:f8:32:a1:9c:a5:8e:f8:61:af:22:
34:e9:bc:09:c9:45:0c:a4:3d:3e:72:8b:a9:28:74:a2:42:4b:
99:1e:de:ee:46:b0:3f:a2:7c:07:32:c0:d8:9a:ba:02:cd:21:
c0:e1:b5:f8:bc:7f:d1:34:0a:85:a2:20:d5:88:0b:e3:5e:f6:
c5:af:e5:2c:fc:eb:ea:7f:3d:5e:23:7a:45:a8:f6:26:bb:26:
d8:e4:03:5a:67:44:76:72:92:87:4e:de:6c:75:1b:44:7f:87:
3d:98:84:00:db:30:2a:8e:fc:b1:e4:e7:fe:dc:eb:00:45:a6:
c5:ce:2c:0a:ae:6a:8e:d4:db:7d:cc:92:e8:d2:93:eb:9b:fe:
f8:cf:cb:e2:ee:a3:a2:7c:04:ef:ec:4b:10:81:bf:21:c0:d1:
ac:9c:45:53:74:00:d3:63:b4:f4:b8:8d:48:53:aa:d0:ba:6d:
02:39:61:ef:39:d3:55:e0:13:4c:1b:9a:4c:fa:dc:88:e9:34:
6f:73:9e:32:63:46:9e:7c:91:5d:73:e9:98:62:5d:7f:5e:98:
fd:2d:84:5c:16:43:4d:05:eb:af:19:aa:6b:26:f7:fd:23:06:
d3:74:af:63:a3:c5:4c:09:9b:e6:97:fd:1f:89:b0:7e:e4:d2:
a8:8c:57:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:59:36 2025 by rpki-client