Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/15b0116c-dca6-3e8c-9af9-5d63f9d7d437.roa
File: 15b0116c-dca6-3e8c-9af9-5d63f9d7d437.roa (raw, json)
Hash identifier: cW3ny4LvSZkMBCGKxvCVwxNZZ5JRRHEzIXj0IgZF+K8=
Subject key identifier: FA:0D:A7:99:4F:0C:A9:BB:81:53:43:91:BE:B1:65:6F:61:15:F8:59
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848302CE38C91892E5670CED3D0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/15b0116c-dca6-3e8c-9af9-5d63f9d7d437.roa
Signing time: Fri 13 Dec 2024 02:16:08 +0000
ROA not before: Fri 13 Dec 2024 02:16:08 +0000
ROA not after: Thu 13 Mar 2025 01:16:08 +0000
asID: 13335
IP address blocks: 172.70.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:2c:e3:8c:91:89:2e:56:70:ce:d3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 02:16:08 2024 GMT
Not After : Mar 13 01:16:08 2025 GMT
Subject: CN=e885f863-c18e-40a2-b874-6eef6e68ddc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:81:3d:dd:c1:7d:9c:95:e9:88:51:b7:09:
db:66:cb:ef:d1:62:dd:69:ca:37:8f:14:e6:58:97:
c3:9d:32:1f:70:d0:3b:b9:d5:47:58:04:0c:fd:6a:
88:9c:a4:af:27:6b:cd:0a:e2:76:be:63:ea:96:71:
55:11:70:d8:48:31:7a:67:81:48:58:ab:3d:1e:a6:
fb:a3:9b:37:6a:b1:e8:2e:e0:79:b5:34:2e:1c:d0:
01:24:03:9a:12:cf:1e:2f:cd:dd:45:c3:14:e6:59:
ac:d8:18:18:44:8d:e0:64:87:13:42:38:52:2f:79:
46:b0:73:20:ce:87:84:80:d3:ce:a6:aa:70:2e:79:
df:74:aa:3c:1c:c3:e0:b5:eb:9b:b0:d3:2c:19:bf:
b6:10:a3:04:fd:25:e9:96:6f:0f:9c:11:a3:fd:75:
8e:56:fc:cd:9d:5d:9a:d8:47:d1:59:82:e9:5b:0a:
b2:9e:c2:e3:48:81:d4:e6:8d:fc:50:a0:8e:9d:99:
95:0c:ed:44:f0:c2:a9:9b:f2:27:78:44:cd:6c:1f:
64:2c:93:f3:e2:32:c1:df:6f:87:6f:59:9e:bb:d9:
10:ff:35:dd:f6:53:29:70:43:d0:f0:cd:8e:f8:da:
88:f0:e7:f9:8b:ff:a3:51:d6:d2:2d:d5:5a:8f:4a:
13:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0D:A7:99:4F:0C:A9:BB:81:53:43:91:BE:B1:65:6F:61:15:F8:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/15b0116c-dca6-3e8c-9af9-5d63f9d7d437.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:98:43:1b:f8:2c:84:91:01:41:40:80:79:27:20:0a:97:4b:
d2:88:71:63:c1:d6:d9:97:83:15:17:63:1a:81:91:36:32:b4:
c8:92:08:1e:b4:78:aa:2a:39:a9:62:c8:12:c3:50:27:cf:b6:
ae:8b:51:da:6e:98:4d:00:80:78:c2:8e:51:85:ac:15:22:c5:
51:df:43:6c:12:57:ed:fc:16:4d:8f:4c:91:8e:2d:2f:a8:c2:
10:92:e4:56:49:f7:e8:b8:e6:00:d1:b4:79:97:89:02:7f:c8:
a0:66:dd:4c:30:c2:0c:e9:19:23:fa:29:81:76:2d:44:dc:ba:
65:57:84:d6:ef:06:7f:cb:30:70:e4:bf:4d:98:a6:4c:7a:23:
6a:70:da:3e:b4:73:ea:e0:7c:78:7b:17:9d:d1:4d:17:ae:95:
f1:1a:d1:07:91:6b:a7:b1:02:28:0f:9a:b3:81:40:e5:02:5d:
53:72:e9:ef:68:c0:15:66:fe:c9:60:88:b6:01:4a:52:57:8d:
73:cb:16:cf:24:cc:4e:92:20:b0:00:16:00:14:b9:0f:07:29:
0f:1f:b3:9b:43:39:7e:1c:b5:53:f5:18:39:ab:a7:3a:68:a6:
68:e3:73:c8:d2:45:64:2d:62:10:b5:00:50:21:c1:3b:a9:f7:
8a:40:10:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:40:40 2025 by rpki-client