Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e7756d6d-9b0d-3326-bafd-b8dd1d147c2c.roa
File: e7756d6d-9b0d-3326-bafd-b8dd1d147c2c.roa (raw, json)
Hash identifier: +ynkvTF48/xMxhnT+IJQMuuxrS2jcRlHZQPs6Ab3L1s=
Subject key identifier: F5:26:06:F6:07:B0:40:E9:C5:E3:8F:BE:D8:4D:80:C2:ED:3E:D6:BA
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584908818AEF7C85D3443DB0F700
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e7756d6d-9b0d-3326-bafd-b8dd1d147c2c.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.64.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:8a:ef:7c:85:d3:44:3d:b0:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=ca3902bb-dbe5-4f73-91d8-1455d53451ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bf:d2:11:f0:8b:f1:50:d3:11:d8:5d:87:e4:
b4:da:d8:eb:c5:bb:ea:05:7d:2a:54:a1:56:9d:69:
03:be:e3:6e:c4:ef:d8:00:88:bd:63:96:fb:b5:f6:
cf:de:03:f3:90:93:07:b0:8b:c4:36:60:54:24:ac:
19:71:56:04:c1:17:6e:7b:28:37:e2:f7:5c:cf:32:
59:8e:f2:1b:02:d5:52:ce:d9:18:1b:8c:2b:ea:fd:
e6:98:d1:9b:20:f8:8d:9a:11:d0:fc:10:66:85:be:
cd:df:19:c5:bd:20:66:77:09:7c:2c:01:e8:f3:44:
74:98:4a:95:ad:a8:4d:1a:5f:53:1a:ca:28:05:df:
e7:73:8b:9d:b3:21:d3:35:16:ec:c6:0f:37:27:50:
ee:e8:8f:b1:75:50:ef:9b:96:e8:09:d2:a5:7b:ce:
0a:42:5f:e6:de:e4:bc:40:d3:ed:30:45:3e:c1:d5:
7a:8f:31:95:a7:b4:b3:8b:19:72:0c:98:8b:6b:70:
03:1a:fa:bf:6d:1e:9c:06:48:0c:3b:7e:bc:41:14:
f3:1b:cb:b1:5e:6f:f9:1c:b3:5a:75:d1:2c:c4:d2:
b3:46:64:73:2a:5c:51:93:f8:41:52:26:61:fc:09:
c3:53:91:07:1a:56:af:c4:30:49:12:45:4b:e2:c1:
5b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:26:06:F6:07:B0:40:E9:C5:E3:8F:BE:D8:4D:80:C2:ED:3E:D6:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e7756d6d-9b0d-3326-bafd-b8dd1d147c2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.64.74.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:9d:8f:01:63:78:d9:98:eb:e4:9b:bc:c5:dc:7d:76:1c:8b:
10:b0:26:56:d8:ae:f3:60:3e:e7:b0:63:06:7e:d6:e7:8f:44:
0d:5a:fd:d3:72:b2:b1:5f:2b:f5:8a:69:fa:ea:b6:59:24:a9:
71:b6:54:83:a7:4f:d2:74:82:8f:49:e2:94:98:51:32:47:0f:
ca:e9:88:7e:3d:2a:1d:e3:31:aa:3d:f9:58:1a:39:01:07:0d:
c5:66:f6:c9:05:99:a1:02:a7:d1:3b:1a:6d:8f:06:51:da:96:
fd:28:f0:2c:01:47:e5:6d:c0:a4:6b:4e:cf:e8:90:37:83:e4:
9b:b7:0d:91:f6:03:67:d1:36:b6:57:bb:bf:34:83:3d:3b:1b:
b4:a3:93:1b:b3:26:c3:06:13:36:86:6e:e5:7b:90:94:eb:ae:
39:09:85:cf:41:4b:8e:93:ac:b0:ff:bc:23:94:63:35:82:73:
5e:8d:9e:85:2d:01:5a:88:a8:85:c8:2f:ac:1a:d8:09:f8:f2:
05:84:b7:e2:f9:6e:71:4e:7b:a0:2f:7f:04:75:f6:31:ee:95:
ae:86:6c:17:3a:9b:46:45:9d:b7:87:9c:5d:2f:47:5c:70:bf:
b0:07:49:75:26:d7:31:e1:ef:49:97:57:30:38:1d:df:ed:59:
ac:15:6e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:55:00 2025 by rpki-client