Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/095a255c-5d3d-3975-952c-37e54a4176aa.roa
File: 095a255c-5d3d-3975-952c-37e54a4176aa.roa (raw, json)
Hash identifier: Wtb9aU8T059HusmMwNCVxJqovjMsp5voZy/8RDBEWxg=
Subject key identifier: 41:D7:76:A2:8B:C9:2E:EE:89:42:41:02:4D:AE:1E:CF:E1:28:F7:2C
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827B01338B252F391FD2B5A40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/095a255c-5d3d-3975-952c-37e54a4176aa.roa
Signing time: Tue 10 Dec 2024 01:18:11 +0000
ROA not before: Tue 10 Dec 2024 01:18:11 +0000
ROA not after: Mon 10 Mar 2025 00:18:11 +0000
asID: 13335
IP address blocks: 172.70.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:b0:13:38:b2:52:f3:91:fd:2b:5a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:18:11 2024 GMT
Not After : Mar 10 00:18:11 2025 GMT
Subject: CN=3389e7da-203d-41e8-84eb-aad2dbd1af80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d6:f3:37:c4:f3:7a:ba:1e:d1:bb:e5:1f:92:
9b:85:fc:8f:6c:9d:85:37:4b:87:6c:8e:f3:6c:86:
b6:b6:e3:9e:ab:8e:74:7b:8c:71:66:3f:0c:c0:c8:
b7:20:e4:b9:76:35:05:8f:51:7a:5c:fe:76:eb:b3:
c7:04:90:ab:cb:fe:01:fd:38:bc:32:bd:bd:64:a9:
f2:a2:c4:6e:38:0b:96:30:6d:3f:6b:b7:6a:cb:b9:
cf:e1:b4:b9:16:c2:8d:70:c9:b1:f2:a1:d1:ce:01:
37:de:19:2f:ff:51:42:0f:f6:69:70:97:59:9a:6c:
75:28:04:be:e7:74:cc:f5:52:44:8c:7f:9b:0e:de:
bd:7f:d9:fa:45:d7:59:ca:44:01:d1:cd:7f:a0:4c:
84:24:60:f4:68:34:dc:79:fb:2e:6c:81:64:14:6b:
91:66:f5:f1:2f:da:f8:f5:78:93:69:98:d2:87:8c:
fd:cc:a8:58:28:01:f9:15:52:73:b7:5a:fa:3f:3c:
2a:f9:93:cd:1e:cd:35:35:97:2b:a6:23:80:0c:52:
15:fa:67:fc:4b:e1:e1:c3:29:e1:9c:28:4a:08:86:
aa:78:96:4c:77:4c:ff:cd:5f:89:8c:32:04:6d:b3:
bb:47:22:74:f1:91:fb:b3:0e:f9:73:7b:a2:74:c9:
d5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D7:76:A2:8B:C9:2E:EE:89:42:41:02:4D:AE:1E:CF:E1:28:F7:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/095a255c-5d3d-3975-952c-37e54a4176aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:db:9c:57:a2:e1:79:39:9e:1b:97:26:77:34:32:14:b3:6a:
48:41:57:af:86:c7:df:57:4d:19:25:74:61:3c:03:70:e8:bd:
26:7d:98:2f:d6:1b:f9:70:dd:2f:59:7e:76:8e:57:bc:5b:b6:
ab:8c:6d:2c:7e:e6:78:de:d2:18:e8:5b:8f:3d:06:67:3e:3e:
3a:87:23:57:a3:a6:b4:6c:76:ba:ac:ed:1f:00:34:9f:7c:a8:
c6:6a:9b:2d:23:96:2f:f9:de:ba:39:b0:fd:4f:5f:12:5c:91:
01:24:71:dd:29:08:d5:e7:55:d4:6e:fa:19:0f:60:a9:42:d2:
cc:7d:04:3b:b6:f7:64:44:dd:67:cb:8d:8c:1d:2f:04:ec:77:
93:f7:3b:51:05:c5:33:2d:44:c0:80:d0:76:a3:73:32:03:4c:
42:f3:3f:c4:c7:ec:fb:fa:65:9b:8d:1b:dc:2d:3f:7f:ad:db:
e7:07:b8:6f:1d:ab:01:cd:ac:dd:62:f6:82:05:49:1d:1e:19:
f7:70:e9:b7:88:f9:9b:80:89:d7:80:43:12:dd:22:41:14:b2:
26:4e:6a:08:f4:19:2d:97:c7:45:94:da:07:e7:91:e3:0a:0a:
7d:47:e9:65:98:98:66:61:e8:95:6c:fd:7f:15:c3:c9:ad:23:
42:f1:da:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:58:08 2025 by rpki-client