Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/023c2728-c60b-35c6-bebd-293d9fa56f1a.roa
File: 023c2728-c60b-35c6-bebd-293d9fa56f1a.roa (raw, json)
Hash identifier: 6qgC8PAvv/7WL4mJ5Qow54SDkom8iJM9V02TyuKBzPI=
Subject key identifier: 24:4F:90:F4:F2:85:15:43:70:77:0E:AC:49:BD:BE:62:9B:4A:37:DF
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584830309D1FBDB9249D3324F2C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/023c2728-c60b-35c6-bebd-293d9fa56f1a.roa
Signing time: Fri 13 Dec 2024 02:23:38 +0000
ROA not before: Fri 13 Dec 2024 02:23:38 +0000
ROA not after: Thu 13 Mar 2025 01:23:38 +0000
asID: 13335
IP address blocks: 172.70.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:30:9d:1f:bd:b9:24:9d:33:24:f2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 02:23:38 2024 GMT
Not After : Mar 13 01:23:38 2025 GMT
Subject: CN=8e4d451e-5476-4193-91a3-a7da73e21871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:67:e2:67:a5:0b:a1:6f:f9:7c:fc:8f:1f:aa:
d5:83:69:2e:65:98:cb:8e:e0:be:22:8f:c8:6b:24:
1e:d5:0b:91:ad:9e:77:7f:6a:4c:04:8c:be:c7:5e:
8f:84:bc:44:43:11:d7:89:8f:d7:ea:8f:07:58:d7:
ef:10:ba:05:67:08:9c:93:87:87:1a:52:14:7b:6d:
b7:44:d8:44:d1:b4:03:c4:21:0b:5f:62:fe:08:93:
85:0c:7d:c9:c9:85:d7:d3:92:fd:d0:bc:a6:44:e3:
3a:13:de:72:24:0d:c3:b7:e1:c1:77:ea:09:84:2f:
b3:0c:f1:1d:df:f6:f0:f4:9f:63:66:ec:36:3d:70:
a0:50:da:0d:1b:8b:f1:1b:d4:78:92:32:81:55:39:
01:f5:1d:0b:17:0d:fe:36:6f:aa:e0:37:78:27:a8:
03:26:84:dc:78:0a:98:93:a0:dc:a2:a0:7a:8b:5a:
d4:64:f2:76:a5:d9:28:14:eb:c1:10:08:ad:05:48:
43:b9:cc:e6:f3:2e:a4:de:82:dd:28:32:7e:9d:a1:
b5:ae:16:e7:4d:12:d5:eb:30:9a:32:57:8c:96:ed:
2f:bd:ad:68:ac:33:84:db:8e:0f:5d:18:4b:5d:72:
5e:55:f8:ed:e2:a3:8f:41:5f:0c:c5:37:bb:ca:bc:
92:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4F:90:F4:F2:85:15:43:70:77:0E:AC:49:BD:BE:62:9B:4A:37:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/023c2728-c60b-35c6-bebd-293d9fa56f1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.206.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:56:38:ec:aa:2f:e9:01:3f:83:2d:93:58:35:09:2d:0a:b6:
90:3e:b8:20:a3:e9:22:0d:b4:5b:8e:cb:25:21:e7:84:2f:e0:
00:57:90:35:7a:1b:d5:60:d9:6b:e3:14:43:1d:b9:0e:96:11:
ca:ce:f7:30:04:03:b1:21:ff:16:a8:4e:d5:75:36:bc:5d:31:
64:dd:54:64:8e:28:96:cb:a0:8e:45:c9:d8:ca:4e:1b:e7:ad:
7b:fb:53:0a:97:f6:a5:6c:9a:24:b9:9f:da:a9:3f:ca:e8:10:
16:51:6a:4f:a9:08:ed:dc:0c:19:a2:a4:37:c0:82:a3:93:b5:
80:7d:f2:03:6a:9b:be:16:b0:d4:63:ba:88:87:54:52:19:be:
53:67:5d:7e:b8:fd:5c:70:6c:5f:bd:c2:27:61:ff:6e:b5:74:
1c:56:8e:13:d2:77:7a:80:62:90:58:58:ed:c5:93:19:58:98:
c1:f3:84:0f:28:52:02:0a:dd:aa:23:f1:cd:f5:c2:4a:23:21:
75:06:3e:34:79:f5:8a:d2:45:8a:40:3e:17:40:dc:39:fc:cc:
20:f2:d6:52:61:70:54:09:c5:d0:48:8c:cc:8a:68:c1:08:37:
5d:7b:b3:bd:50:59:70:a5:74:83:f9:2a:71:92:b4:eb:1d:8f:
01:99:83:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:54:09 2025 by rpki-client