Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e1db1ef5-8875-37b0-a87d-5f3f1abd148d.roa
File: e1db1ef5-8875-37b0-a87d-5f3f1abd148d.roa (raw, json)
Hash identifier: 1Vs1rnfg5pV0/5IvIIDiWV6XhgIwOGGlsOhpy5zxgfw=
Subject key identifier: 9B:FE:87:06:0A:AF:3E:5F:25:3C:76:CA:3D:15:4D:88:0A:A6:2D:EE
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490B4C04C2D8F117661FD9C980
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e1db1ef5-8875-37b0-a87d-5f3f1abd148d.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.68.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:04:c2:d8:f1:17:66:1f:d9:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=3de3e3d5-c516-48f6-9cbe-31953b5e98ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:12:2b:9c:f5:ee:05:f6:f4:70:9b:73:1f:bb:
b7:c9:06:ae:6f:0f:a8:c6:05:45:c1:e8:f5:59:8d:
56:ee:25:74:6c:6e:73:f6:eb:ac:6f:a3:c0:65:fc:
cf:30:4d:2a:1c:ce:2b:05:05:94:05:38:b6:c0:41:
ee:f5:47:c7:47:20:02:af:2c:13:75:1f:1e:18:d1:
10:4f:9e:1e:d2:f8:ac:e1:e4:a7:a2:ed:2e:6d:37:
1b:e8:f3:e7:e5:69:a6:44:93:21:fa:10:75:a4:c3:
c0:0d:8f:53:b5:64:0e:8d:5c:31:ee:ef:25:15:18:
d3:48:44:69:61:43:13:3f:83:e5:8d:bb:e6:11:6b:
bc:41:7a:b3:cc:b0:cc:df:50:81:3e:77:ba:25:11:
5c:c9:d4:62:f6:68:86:db:92:db:ca:37:bc:62:3e:
fa:4b:53:4e:d2:64:e3:8e:8e:30:2e:c4:87:51:dc:
ee:cf:58:4d:c9:bf:e3:03:03:ef:29:8d:ee:67:21:
29:d7:11:84:54:8b:41:61:1d:d2:f7:5c:1c:3b:b2:
08:e9:e3:2d:c8:c3:9e:e8:94:b6:c7:b8:02:19:fd:
7c:90:d3:84:18:8b:6f:65:6f:2c:03:b6:da:a3:9d:
70:e7:17:9d:5d:f4:0a:ae:4a:cd:56:a5:95:91:99:
59:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FE:87:06:0A:AF:3E:5F:25:3C:76:CA:3D:15:4D:88:0A:A6:2D:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e1db1ef5-8875-37b0-a87d-5f3f1abd148d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:8d:af:8e:f5:2b:1e:ac:32:7f:4c:79:18:fa:78:43:b3:74:
42:63:26:54:84:2a:b5:75:7f:02:db:44:57:5f:89:53:6f:75:
39:09:ee:e5:8f:ed:a9:b5:69:59:d0:7c:bd:fd:8f:82:a7:8b:
13:40:8a:97:f8:31:5d:5f:af:b1:ed:73:04:b9:f9:59:bf:fa:
2e:d3:6d:49:db:22:d6:89:bf:23:a8:f2:97:fe:55:c5:f7:14:
6c:79:68:45:54:f8:80:55:a0:be:ae:ec:7a:c3:10:9e:49:30:
37:ec:ba:5d:9c:dc:73:52:83:75:27:ec:6c:bd:1d:21:53:9f:
9a:d8:6c:5f:0a:49:c5:86:04:26:e6:ae:41:d6:3a:32:e3:6a:
6c:9b:1b:58:a3:55:61:76:ec:ed:88:3e:ec:b7:90:ce:67:2b:
0d:b5:83:34:08:a4:4a:0c:77:90:4c:91:6d:4c:e2:f5:56:8e:
37:c8:0c:f9:34:64:ff:92:72:74:b3:49:ee:46:60:87:53:90:
8b:13:90:21:ef:38:24:ea:de:68:4f:75:7c:88:fe:70:3d:99:
7b:97:d2:4d:4b:42:28:d9:30:1e:56:fc:1c:6f:6c:7f:12:03:
9f:0f:39:4a:b8:09:d2:2d:33:85:f4:fc:10:59:90:a5:3a:2b:
f2:da:52:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:52:17 2025 by rpki-client