Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f591edab-34ef-3518-a353-bd64d1c1d2f9.roa
File: f591edab-34ef-3518-a353-bd64d1c1d2f9.roa (raw, json)
Hash identifier: yIyIK40UkzYR1VSkUxsnQYx0miCaHk/mUkWBrG5xZkM=
Subject key identifier: 9A:04:33:21:A5:F8:D6:B3:FE:77:F2:27:55:53:35:91:9D:4D:A0:02
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071BF92E0434D6A749BDB780
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f591edab-34ef-3518-a353-bd64d1c1d2f9.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 172.69.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:f9:2e:04:34:d6:a7:49:bd:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=24156684-ad94-4ed4-af7e-94021099c695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cf:ac:b3:72:5d:64:d6:97:ef:27:ab:5e:e2:
97:3d:b9:cc:0a:a2:b0:ce:b0:39:d2:03:f4:16:50:
c9:ee:88:b5:40:17:d6:bb:c5:85:92:a4:2a:09:9b:
4d:de:d8:ec:f1:16:28:64:a6:fb:25:1a:de:d9:4c:
8f:f6:88:67:af:04:17:1b:1f:68:11:cc:8f:eb:96:
a4:86:15:e6:03:ec:37:7f:ca:c0:3a:5d:76:51:10:
7e:21:53:50:f8:99:2c:84:fc:3d:f8:75:c9:d0:3f:
a3:e8:db:85:24:16:ac:e5:e1:fc:86:c8:8e:41:73:
eb:d1:b0:aa:49:82:70:4c:9c:f6:16:c1:73:ce:75:
be:e5:bf:e5:b8:e4:6f:58:e7:b6:85:8e:ae:70:17:
74:ea:09:db:ae:86:65:b8:78:1e:3c:e8:ce:ee:54:
61:47:e6:ab:b0:46:10:44:0d:ef:89:eb:db:d9:3d:
a9:e4:fc:4d:1f:0d:1e:10:83:74:d0:50:8c:4b:9a:
2b:bd:06:d9:af:e1:5d:67:a2:ba:bf:5d:91:71:da:
55:6c:a0:6a:96:1e:50:d4:40:b4:36:b5:93:e2:34:
e9:ab:b9:bd:bf:9d:08:64:3a:7f:6e:a0:8a:0d:2c:
20:54:a7:ba:96:6e:85:cf:42:9c:00:3b:20:b9:d9:
f6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:04:33:21:A5:F8:D6:B3:FE:77:F2:27:55:53:35:91:9D:4D:A0:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f591edab-34ef-3518-a353-bd64d1c1d2f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:50:34:5c:0c:59:4f:43:7f:6e:0e:87:d1:69:58:19:ad:72:
46:cb:95:f2:5c:38:7d:6e:76:a8:63:4a:7f:43:70:91:34:88:
59:33:a3:d7:c5:a3:02:9b:ed:a9:09:05:9c:da:1f:94:d9:45:
f7:9e:ed:e5:76:36:d4:1b:c8:21:cf:a9:b3:86:3e:d4:e3:e8:
a9:03:33:b2:5f:c9:41:52:ba:29:56:79:61:90:b1:dc:bc:7d:
6d:4f:dd:17:f6:5e:31:4e:2c:26:14:bf:c6:21:01:60:a6:7e:
9f:81:ed:a4:4b:c7:4b:ab:85:94:4b:14:a2:1d:66:b0:e9:09:
6d:9c:4b:78:67:ed:ae:f7:4f:af:bc:74:f2:81:9b:18:d0:be:
1d:27:dd:d6:08:59:4f:02:5f:6f:50:15:af:9d:5f:b0:17:60:
2e:c3:9f:d3:31:aa:c0:d5:cf:5d:7b:a2:fe:8e:c3:03:f9:3c:
72:9d:37:27:2e:2c:4b:f5:23:76:73:cd:ff:85:f4:83:e7:54:
3f:2a:7c:18:a6:1d:19:00:12:ae:a0:f8:41:9c:bd:42:45:c7:
6c:66:80:e0:89:25:7d:86:94:5b:f2:39:2f:63:d3:b9:25:3d:
09:0c:8b:b7:a4:7c:e4:32:36:90:f7:e9:95:90:12:86:ac:13:
83:0a:7c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:40 2025 by rpki-client