Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a425177-ae2d-3ba8-9603-0e6133ca0f04.roa
File: 2a425177-ae2d-3ba8-9603-0e6133ca0f04.roa (raw, json)
Hash identifier: mbhW87sXCx276j4cAnT+qmRIdcPq1Vwb+4PZcYh9arw=
Subject key identifier: AC:DB:77:71:2F:CE:BC:07:AE:C3:C6:0A:57:99:CE:D7:A2:64:2D:90
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848302D708A372F5A2FE8B88840
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a425177-ae2d-3ba8-9603-0e6133ca0f04.roa
Signing time: Fri 13 Dec 2024 02:17:15 +0000
ROA not before: Fri 13 Dec 2024 02:17:15 +0000
ROA not after: Thu 13 Mar 2025 01:17:15 +0000
asID: 13335
IP address blocks: 172.70.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:2d:70:8a:37:2f:5a:2f:e8:b8:88:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 02:17:15 2024 GMT
Not After : Mar 13 01:17:15 2025 GMT
Subject: CN=e8909649-ed9c-44ae-9b16-622c860fc4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a2:d6:6c:f8:a3:4f:d8:73:09:b2:09:6c:d1:
99:ab:29:17:ef:cc:42:f2:03:e1:ea:52:72:1a:03:
62:8b:74:d1:9b:30:f0:71:b0:0c:ec:5b:0f:14:6d:
6a:88:e4:aa:26:8f:69:2e:09:46:e4:9e:57:10:a0:
82:9f:bb:b4:69:5c:00:76:e9:77:d3:a1:18:5c:52:
d9:82:2a:27:31:c3:28:fc:4e:9b:08:fb:61:69:41:
ad:d2:5e:dd:cb:2f:b9:82:ac:2e:fa:d3:1c:01:8e:
c3:30:ea:cf:1d:66:d6:be:75:ea:9c:70:cd:1e:26:
00:d6:f2:d7:d9:09:d0:32:e2:e9:a9:dd:82:b1:0c:
76:7e:26:2e:86:d9:2f:40:3f:97:bc:49:fb:95:52:
44:b5:f4:45:ec:40:2b:3f:c9:a9:71:f0:5d:a5:b6:
f5:5c:ff:08:44:7a:29:0d:d3:83:db:c7:ec:d6:34:
91:6c:bc:08:b0:bf:fe:e0:89:35:41:34:b6:b7:07:
23:87:d0:56:c3:0f:fd:25:04:1a:9a:72:66:0b:a1:
dc:46:b8:b4:f3:40:05:df:c4:45:56:46:14:0b:5f:
84:8f:67:8e:e3:5c:07:d5:2a:43:80:5d:46:3f:92:
9c:cc:2c:91:c8:42:88:f2:24:2f:6a:74:49:27:b6:
d6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DB:77:71:2F:CE:BC:07:AE:C3:C6:0A:57:99:CE:D7:A2:64:2D:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a425177-ae2d-3ba8-9603-0e6133ca0f04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:75:84:af:ca:53:88:06:55:e4:a8:47:81:07:12:ff:51:1f:
ae:62:94:5a:46:28:ae:7b:93:90:db:1c:7f:af:37:99:65:18:
5f:4a:86:cf:dc:40:61:bf:39:79:41:5a:f8:d2:38:85:41:5b:
06:ef:21:b9:df:09:11:37:2d:2b:1e:1d:d6:21:5b:4d:e1:1f:
32:53:27:54:f2:25:ab:96:c9:87:bf:31:c1:16:50:f2:b4:65:
aa:a3:28:35:59:46:b8:a1:3b:96:9e:3f:ae:e2:64:fb:fd:30:
73:40:39:68:14:ff:65:1f:14:66:98:c6:45:c1:e9:55:bd:d2:
29:e7:41:d0:ec:04:8c:41:2f:8c:50:89:d1:ed:01:ed:a8:b6:
40:13:ad:46:80:94:30:53:bc:20:67:db:e7:54:68:ba:6e:48:
68:89:92:cb:49:4f:a0:9d:90:d4:c9:8c:21:4c:20:89:f7:ee:
77:fc:a7:14:4c:78:ec:74:af:9a:64:fd:27:54:b3:bd:df:4a:
ba:b0:7e:3f:ba:87:ce:a9:c4:21:e3:7d:8b:4c:51:6f:21:6e:
08:4d:b8:c8:82:06:e4:5c:9a:a2:ea:a7:ee:55:b2:d1:e8:ce:
6a:2c:9a:86:03:6a:be:57:33:2c:7e:ea:10:1d:4c:95:b1:4f:
61:74:1d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:56:35 2025 by rpki-client