Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17d2c343-cd32-3d84-b12a-e23f4443f4fb.roa
File: 17d2c343-cd32-3d84-b12a-e23f4443f4fb.roa (raw, json)
Hash identifier: cMofKHfR6BoCMlD+KlQngOIpfux608+yhM2PwyDl5BU=
Subject key identifier: 5E:CE:02:A9:E8:46:13:70:60:30:CB:35:E6:23:2E:6B:19:F0:E5:89
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584830237E119EAF373E12FFA100
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17d2c343-cd32-3d84-b12a-e23f4443f4fb.roa
Signing time: Fri 13 Dec 2024 01:57:12 +0000
ROA not before: Fri 13 Dec 2024 01:57:12 +0000
ROA not after: Thu 13 Mar 2025 00:57:12 +0000
asID: 13335
IP address blocks: 172.70.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:23:7e:11:9e:af:37:3e:12:ff:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 01:57:12 2024 GMT
Not After : Mar 13 00:57:12 2025 GMT
Subject: CN=a3d08721-8180-47e6-8d0e-fdb0305cc43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:31:52:41:6e:eb:73:ab:60:6a:01:d1:0e:9b:
04:9f:fb:72:ea:6f:91:e1:f7:af:d6:84:00:62:3e:
2f:ea:57:89:af:c7:4f:a0:5c:e2:f5:99:88:39:07:
38:95:84:61:f3:d8:31:81:64:33:27:df:24:c2:dc:
96:09:d9:4b:31:ea:96:1d:51:aa:40:05:bc:b6:f5:
4c:b0:9b:b9:92:b2:34:56:1d:c4:e5:84:87:20:65:
1d:15:3d:87:ab:b1:88:08:47:da:a3:96:b5:c7:44:
ca:9a:1b:ea:e1:08:86:d6:19:17:18:af:71:92:1c:
b7:1b:1b:7d:c3:39:a9:70:79:f6:e1:0b:f7:0f:c9:
a3:08:d6:09:13:75:fa:a7:8b:47:3d:90:1c:9b:0a:
64:de:81:d4:c2:8e:eb:08:e2:89:09:d9:34:3d:25:
33:4d:50:13:f1:8b:42:69:cc:ef:fb:c8:fc:50:ed:
6d:fd:e2:cb:dc:56:d8:26:f3:fa:dc:d7:c8:1c:59:
c3:01:17:6c:85:bd:79:ed:81:18:fd:05:d0:f7:63:
01:64:cc:2c:8d:6a:56:93:d5:5a:48:e5:36:1b:ce:
06:6e:e5:75:6d:c5:9f:71:d4:f5:1c:90:fa:04:10:
ef:65:e3:44:00:cc:ce:09:c2:b6:5f:ea:01:e1:5d:
ac:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CE:02:A9:E8:46:13:70:60:30:CB:35:E6:23:2E:6B:19:F0:E5:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17d2c343-cd32-3d84-b12a-e23f4443f4fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.87.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:c1:36:87:20:f0:ba:7b:31:70:51:2b:db:df:0b:bd:6d:54:
91:07:aa:49:1b:dd:0c:36:b8:cf:19:18:98:96:57:af:2e:b5:
0c:56:33:b0:95:13:18:64:27:1e:de:40:68:d2:69:80:6a:5c:
e3:0c:38:8a:04:0c:95:03:96:f7:f7:0c:aa:4d:48:e6:4e:33:
01:25:06:a9:3e:64:25:82:a4:d1:ef:5c:4c:53:77:45:cf:ad:
73:5d:76:fd:14:8f:40:00:96:04:0f:ac:30:00:7a:85:b0:32:
48:47:28:c7:3b:0b:8e:5b:41:20:9b:21:d7:8c:40:04:e6:b2:
80:c9:33:27:77:f8:c9:c5:08:b2:fa:76:a2:ed:df:b2:3c:24:
c5:33:cf:09:38:e5:20:88:09:6a:cb:62:3d:eb:e5:64:82:01:
2d:e4:14:2f:55:a4:a6:84:ba:3e:79:7c:26:15:c7:6c:98:e0:
a0:bf:f0:30:c4:f7:ad:4c:e3:4a:dc:96:8f:be:c7:6a:43:fa:
7e:fe:22:f4:3e:42:be:a3:e4:0b:21:5b:69:61:7b:bb:d0:d0:
96:09:70:43:f0:d1:32:c2:ea:98:9b:9a:74:11:81:b8:34:22:
e1:45:78:74:94:e2:63:3b:16:6e:56:fa:25:70:47:d6:23:27:
b5:4c:d0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:44:19 2025 by rpki-client