Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eba0db58-d94c-3f37-9ed9-f2cf22885b08.roa
File: eba0db58-d94c-3f37-9ed9-f2cf22885b08.roa (raw, json)
Hash identifier: bjxVEA7IhZ8S6bk96sLAys4jkeMGrbmZ/cILlOwcC4s=
Subject key identifier: 43:85:DC:69:27:B2:48:7B:96:12:72:54:DE:BC:9E:98:11:FD:43:AE
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849088192BE3D7108DBE3B83280
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eba0db58-d94c-3f37-9ed9-f2cf22885b08.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.68.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:92:be:3d:71:08:db:e3:b8:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=65254399-2f7f-4e83-8bc4-42cc580432a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8c:13:c4:2a:63:b2:41:60:8a:e7:b2:f5:5a:
61:b6:33:96:7b:53:2d:8b:77:d0:b3:ab:31:fb:87:
bb:bd:f8:a6:76:ee:82:1f:65:6b:b1:70:de:51:0d:
66:ea:8d:ed:c1:ee:5d:06:55:b9:eb:db:8c:64:00:
50:00:90:7a:78:bd:6b:0d:8a:1c:d3:32:65:e4:fa:
e3:58:61:d0:27:dc:30:fe:1b:e8:b4:3b:f7:48:2a:
f3:45:62:56:60:75:3a:30:01:ac:f5:96:bc:2d:24:
65:da:5d:17:a9:d6:08:de:44:05:35:3b:57:c4:f2:
85:55:c4:d9:da:f7:0b:83:95:98:ac:b0:69:9f:ef:
cc:2f:84:b3:1a:bb:c8:47:74:1f:fd:a1:ad:89:78:
45:3f:3f:b6:3d:be:ce:a7:f7:fd:66:72:e5:c2:ba:
fc:4a:50:93:6e:bc:f9:fa:ab:96:82:c2:6f:ec:af:
12:3c:d8:6d:69:1f:02:55:2d:40:c8:ea:ec:25:1b:
5f:a0:d7:5d:d1:06:11:3e:25:e7:60:bf:d2:70:cd:
f4:b0:19:59:80:ab:9b:13:58:10:30:22:3b:15:31:
74:45:7f:46:c6:0e:44:8c:be:a2:0f:8f:d2:dd:e6:
f9:07:d5:57:32:84:14:75:71:78:60:fe:24:15:1e:
87:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:85:DC:69:27:B2:48:7B:96:12:72:54:DE:BC:9E:98:11:FD:43:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eba0db58-d94c-3f37-9ed9-f2cf22885b08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.68.76.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:19:de:56:5c:dc:b1:dd:3c:42:85:9e:de:fd:02:ce:7b:c9:
0b:07:26:fb:13:b8:6f:11:82:06:5c:ed:04:31:5c:dd:e2:6a:
42:3a:e9:eb:c0:7c:ee:2f:7f:f6:1b:d1:66:b6:a6:9d:11:8b:
d5:06:95:e4:b2:83:0c:02:45:20:7b:c4:0e:07:3a:f6:da:37:
fd:b6:a8:67:7e:c2:ca:19:a6:7b:78:ee:0b:0a:8c:8e:31:fa:
58:bf:c3:10:73:62:aa:17:e4:e3:c6:c4:b0:f0:a9:06:7c:42:
c2:cd:88:66:e0:15:ae:7e:7d:b5:41:9a:2a:2c:96:cb:36:af:
31:39:9f:02:2e:8b:1d:e3:9a:5d:7d:cc:a5:c9:81:e8:19:3c:
aa:84:bd:1e:a4:90:84:c3:de:53:45:37:16:1e:31:79:86:58:
ad:cf:e7:cf:68:5f:80:bb:9f:77:d6:04:16:97:70:59:51:67:
fc:73:0f:50:a5:7d:a0:0b:80:68:c0:0f:32:aa:47:d3:64:ca:
7a:c2:43:2c:4d:47:c4:65:a6:15:5e:25:77:2b:37:10:54:31:
71:96:20:1c:8c:27:2b:39:5f:cf:60:ec:c2:71:7f:1f:53:c6:
db:2c:60:6d:04:87:f4:59:e9:a5:ca:f8:a0:13:2e:c4:d0:b9:
2f:0d:5c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:42:38 2025 by rpki-client