Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/19d66a2d-24e1-35d2-8ff6-cf7d642c52b6.roa
File: 19d66a2d-24e1-35d2-8ff6-cf7d642c52b6.roa (raw, json)
Hash identifier: MA3XJ2ja6s60vv5mPatCnAjJqEJnw0cM1QHoRo5ujls=
Subject key identifier: 70:33:A7:58:0D:ED:35:A4:55:FF:AE:BA:37:55:D1:10:DB:7F:BF:44
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848303020611F953FB545A8CE40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/19d66a2d-24e1-35d2-8ff6-cf7d642c52b6.roa
Signing time: Fri 13 Dec 2024 02:22:39 +0000
ROA not before: Fri 13 Dec 2024 02:22:39 +0000
ROA not after: Thu 13 Mar 2025 01:22:39 +0000
asID: 13335
IP address blocks: 172.70.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:30:20:61:1f:95:3f:b5:45:a8:ce:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 02:22:39 2024 GMT
Not After : Mar 13 01:22:39 2025 GMT
Subject: CN=71f4c3b1-5089-4be1-a19f-054c7993f1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:44:a7:76:0f:51:16:87:ed:4b:08:ad:3c:c8:
66:05:84:8e:b5:9a:c6:0c:31:6d:a9:33:fd:cd:4a:
ef:1b:da:1b:b8:0c:8c:b3:96:66:4d:db:7f:14:de:
f9:82:a5:bb:70:df:24:88:a0:98:f7:f0:13:1d:de:
df:fb:f4:76:dc:4e:cb:4e:64:3a:61:a3:cb:68:7b:
54:b5:7d:92:59:b4:79:9b:a2:78:ff:36:97:aa:b7:
51:0f:9a:f7:ad:5d:43:8c:d3:16:e0:0f:8a:b4:d7:
5b:42:41:d8:8c:4d:26:9f:e0:75:ea:74:61:63:a4:
e2:92:2e:99:c7:bc:20:62:29:6d:a3:40:e1:e8:11:
6c:20:c9:a3:51:05:ae:6d:b6:41:a2:20:2d:12:64:
e4:1c:ed:4e:6c:ff:6d:85:10:bf:6d:69:b7:3c:d5:
a2:9a:f3:1b:43:2a:2e:f7:9a:de:9e:a0:04:29:55:
f1:0f:ea:71:f3:0e:a3:cc:26:4a:30:5f:82:2b:b4:
82:1d:58:4b:7b:62:8d:8b:15:a8:87:1a:33:95:c2:
30:fd:37:b1:23:30:d3:0c:3a:91:20:27:63:5b:b6:
73:9d:14:df:32:bc:70:be:8c:ce:5e:16:1d:5d:4f:
7e:4a:4d:03:78:01:a3:83:8f:d7:29:88:05:39:27:
81:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:33:A7:58:0D:ED:35:A4:55:FF:AE:BA:37:55:D1:10:DB:7F:BF:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/19d66a2d-24e1-35d2-8ff6-cf7d642c52b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:87:cc:cf:d0:01:9c:23:15:72:fb:70:3b:14:78:62:3d:3c:
26:88:ab:fd:04:76:88:57:d2:9a:ab:d8:0e:09:48:1f:88:94:
d2:ff:db:54:0c:92:c2:03:ab:60:3b:04:2c:7b:10:30:8f:be:
07:97:7b:67:55:01:76:66:35:1a:63:61:51:e5:da:ec:bb:50:
80:69:a0:bb:eb:6b:97:e8:e1:5a:9a:c5:0e:1e:1b:d4:d6:6d:
4b:7b:2b:e5:9d:bd:ef:25:ec:67:7b:c6:46:df:12:45:3c:f0:
6c:45:33:b0:e7:b2:3c:60:1e:ab:67:2a:cb:e0:0e:96:9a:00:
1c:8a:f4:f1:a8:d6:82:c8:db:dd:cd:f2:47:40:a5:69:94:56:
ff:69:36:07:04:8f:a5:72:d3:af:15:2b:f1:b1:30:7d:e0:d9:
a9:fb:43:79:8a:db:f9:4a:90:fb:72:f2:db:42:0e:b0:79:af:
2c:2b:1c:e2:ad:18:eb:70:0b:97:36:a0:6c:d0:b7:aa:54:1a:
8c:53:36:ed:30:5e:13:cb:b0:f5:b8:31:b8:5d:5a:f1:dc:4a:
93:9b:a2:2f:6a:1a:19:e5:6a:d0:e7:09:c3:f5:5e:58:26:d9:
b7:b2:fb:fa:59:8c:71:56:a8:aa:af:cb:3f:19:5d:bd:9c:01:
5d:8d:11:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:40:39 2025 by rpki-client