Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2cd16ca4-a110-334b-9064-b9697368ca32.roa
File: 2cd16ca4-a110-334b-9064-b9697368ca32.roa (raw, json)
Hash identifier: Qy1mwQjatv4h0/x2xDOLeKIKcUiPTr6TXBNgg/WN+y0=
Subject key identifier: 7A:29:49:E3:A4:63:9C:3C:6D:06:19:F3:34:B8:1A:CA:CF:23:6F:E2
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584830313E5BD9B1E93F707DE440
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2cd16ca4-a110-334b-9064-b9697368ca32.roa
Signing time: Fri 13 Dec 2024 02:24:54 +0000
ROA not before: Fri 13 Dec 2024 02:24:54 +0000
ROA not after: Thu 13 Mar 2025 01:24:54 +0000
asID: 13335
IP address blocks: 172.70.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:31:3e:5b:d9:b1:e9:3f:70:7d:e4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 02:24:54 2024 GMT
Not After : Mar 13 01:24:54 2025 GMT
Subject: CN=ee8bd925-a875-44e0-865e-567afa314c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dd:06:99:18:a5:0a:44:86:e6:46:45:97:df:
c3:fb:df:47:0e:04:55:0b:70:34:cc:50:a6:66:b5:
1f:fb:8d:13:49:f1:11:f3:f3:dc:45:68:8f:80:1d:
73:62:a8:8f:0f:89:18:c0:7d:94:88:26:3f:d5:54:
65:1e:db:aa:10:2d:ec:64:11:38:d8:2a:2b:2e:12:
b0:ab:e5:8d:ec:aa:49:84:69:01:fa:12:60:b6:a6:
9f:14:e1:aa:60:12:2a:17:cf:21:ea:ae:8e:47:54:
57:70:44:31:78:83:70:c3:08:1f:69:c0:95:72:13:
9a:6a:d9:ef:cf:93:f9:b0:3b:1b:c7:48:6c:fa:03:
c0:05:fd:84:f6:dc:02:ab:73:06:2c:05:59:16:6b:
d9:b9:97:ff:e0:99:ab:7f:4b:c3:50:13:98:3c:c6:
c0:8b:ec:17:ae:5d:a2:07:e5:04:28:5d:55:24:e0:
88:56:0f:c1:94:1c:1b:a8:30:12:bd:d1:8b:db:30:
65:3d:bd:15:ae:88:d1:8a:63:63:4b:0f:ca:2d:0c:
2c:5e:72:71:22:92:f5:9b:1a:69:f5:b9:de:05:6e:
be:17:50:71:04:b7:b2:57:cf:19:d3:8d:7d:6c:77:
4d:30:76:3e:45:05:7f:05:96:34:37:0b:9b:e7:92:
fa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:29:49:E3:A4:63:9C:3C:6D:06:19:F3:34:B8:1A:CA:CF:23:6F:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2cd16ca4-a110-334b-9064-b9697368ca32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:d2:77:a1:14:93:82:59:98:a5:75:8a:f3:1e:c1:9b:8b:c6:
9e:e6:02:39:c8:f7:96:43:68:02:ea:60:68:11:17:cd:ec:b8:
83:78:08:5d:86:3c:31:08:b0:e0:19:4a:2d:0f:a7:d5:ce:d2:
12:f0:98:cb:d9:23:28:8b:39:67:85:a0:e4:35:26:b4:96:9e:
e5:5c:49:ce:50:b9:94:2d:3f:d6:40:40:82:e2:df:7f:81:f6:
2d:74:91:c7:c6:58:55:ac:80:96:76:a0:b3:0d:f9:94:33:85:
c0:91:ea:84:c5:c4:21:79:9b:97:dc:de:08:a6:c3:4c:05:ce:
c7:b6:94:b4:41:c5:87:6c:6b:c7:66:fe:a9:66:e8:7c:ab:a3:
bb:97:5a:15:d3:6e:b4:1e:ef:9a:e9:ac:ae:be:a8:b3:b4:da:
c6:b2:13:9d:3f:13:39:61:aa:68:a1:b7:3e:e1:03:aa:9b:a9:
d6:9a:19:8a:eb:c0:c7:ec:0a:7d:3a:0e:36:a3:58:c2:24:4e:
1f:93:09:74:79:27:a2:ca:c3:18:44:47:f0:b1:22:9d:03:14:
a3:40:ed:30:33:27:85:31:f2:c4:ed:72:11:26:04:c9:ee:99:
74:fc:f4:22:b3:85:4f:89:83:28:67:5f:8d:4a:87:e6:b2:5c:
eb:8b:a4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:35:08 2025 by rpki-client