Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/036fb866-bf27-3892-8963-f6aa87a9f2a3.roa
File: 036fb866-bf27-3892-8963-f6aa87a9f2a3.roa (raw, json)
Hash identifier: Wt/a4OK39HrjipFVdrO9c8g8o8K8Du7hMJtR7mhCkMI=
Subject key identifier: F1:6E:11:4B:9E:65:C9:20:71:5D:66:C1:FA:56:EC:61:ED:7E:BF:32
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827B08D6CD48518389C67E880
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/036fb866-bf27-3892-8963-f6aa87a9f2a3.roa
Signing time: Tue 10 Dec 2024 01:19:09 +0000
ROA not before: Tue 10 Dec 2024 01:19:09 +0000
ROA not after: Mon 10 Mar 2025 00:19:09 +0000
asID: 13335
IP address blocks: 172.70.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:b0:8d:6c:d4:85:18:38:9c:67:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:19:09 2024 GMT
Not After : Mar 10 00:19:09 2025 GMT
Subject: CN=d3a94e60-6761-4a62-8ed4-acafd4fff5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:df:ef:e2:23:36:a0:7d:db:d6:3f:c7:32:b2:
d2:90:61:60:85:44:ed:3b:4a:bf:85:7a:3f:04:fb:
31:1d:8d:94:06:ec:86:e0:4f:c3:9f:bb:35:cf:1a:
b0:af:3e:e3:9f:32:97:95:a6:2c:87:3d:f2:37:8a:
d1:9a:f7:dd:5e:b7:8e:a0:af:f1:dd:93:65:24:45:
ca:d2:33:1e:54:be:44:45:c4:56:13:ab:23:59:33:
09:da:5a:af:bb:c9:8f:7f:ad:c8:77:ad:25:df:e3:
5e:4d:b6:a1:01:f5:14:f5:c2:0a:1a:18:a7:67:07:
20:18:e5:39:e2:5c:e0:ea:f5:46:b6:96:cc:1d:01:
e7:c2:c1:58:32:27:ff:4f:e0:6d:c2:bf:1e:4b:89:
ef:24:59:ce:86:a5:1c:a5:76:37:c9:56:bf:43:20:
8f:97:69:22:db:f6:9c:a1:25:32:56:a7:73:02:f2:
e3:06:ed:8f:a1:8b:9f:9f:19:4f:15:c0:a0:7a:8c:
be:88:48:e2:50:e4:9d:fe:4e:32:a9:43:18:2e:52:
a5:36:bc:91:14:ca:4c:d4:b4:61:4c:20:70:23:25:
dd:d6:c3:8f:46:45:69:e6:22:17:b6:67:b3:0b:82:
5b:f0:ce:26:10:99:fe:9e:b1:a3:32:c4:03:91:c5:
b2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6E:11:4B:9E:65:C9:20:71:5D:66:C1:FA:56:EC:61:ED:7E:BF:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/036fb866-bf27-3892-8963-f6aa87a9f2a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:db:8b:ac:58:33:fb:96:64:95:9a:cd:77:68:aa:dd:1e:cd:
57:44:35:44:33:db:c7:6d:95:48:66:a9:61:41:5d:a8:aa:78:
b6:10:df:14:06:23:87:95:da:a5:55:5a:ef:a9:04:a1:f8:83:
8f:14:b0:29:31:45:6d:08:e3:b8:a9:1a:13:90:f0:73:de:c1:
bb:b4:0c:ec:3e:61:c0:e2:af:26:e9:87:e1:ae:fe:48:2b:fa:
93:27:d4:c2:b0:66:b1:d6:04:dc:56:85:e7:bd:ae:30:0a:33:
ca:dd:45:ee:e2:92:9a:2b:9b:46:45:1d:fe:f0:27:be:84:f4:
f8:b0:a7:2f:e6:5f:c1:82:ae:a8:db:19:dc:6c:58:0a:86:6c:
ea:a9:11:7f:60:ec:55:58:1a:b2:8d:6f:60:32:44:fe:ca:3b:
06:d8:39:59:bd:a0:cf:65:bd:35:6b:10:69:b4:ca:00:5a:be:
14:f0:ae:aa:fe:60:58:71:ff:9e:66:95:4e:64:78:6a:27:f0:
a6:c7:68:a4:66:86:50:6d:df:76:14:37:53:23:51:b6:ce:42:
d0:50:2c:e9:12:43:13:37:b5:35:28:b9:57:3f:70:98:b3:ff:
2d:f2:bf:2d:38:64:5d:cc:1b:f7:f2:b5:6c:4c:f5:eb:10:2f:
21:96:94:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:16:05 2025 by rpki-client