Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2cf86ff7-281b-3317-934a-1989a3943f3b.roa
File: 2cf86ff7-281b-3317-934a-1989a3943f3b.roa (raw, json)
Hash identifier: fCbKGfEWXVogr2d+rf3WiWl+Mu5WmyHK8QaVKvYeg2M=
Subject key identifier: D1:EC:28:46:7C:72:6D:E2:41:46:38:C7:0C:B0:67:CE:1E:96:A9:82
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858483020CFA2AE98F329B85DCA00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2cf86ff7-281b-3317-934a-1989a3943f3b.roa
Signing time: Fri 13 Dec 2024 01:51:48 +0000
ROA not before: Fri 13 Dec 2024 01:51:48 +0000
ROA not after: Thu 13 Mar 2025 00:51:48 +0000
asID: 13335
IP address blocks: 172.70.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:20:cf:a2:ae:98:f3:29:b8:5d:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 01:51:48 2024 GMT
Not After : Mar 13 00:51:48 2025 GMT
Subject: CN=655d0f0e-92ac-473c-9e91-29120085bc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:aa:fe:72:7b:2b:3c:7c:6f:11:7f:f5:8f:
a3:f7:fe:13:eb:45:5d:35:c7:b2:48:49:0e:77:e6:
7a:16:86:c2:40:aa:13:8d:11:35:ef:94:30:58:78:
20:62:c7:65:c9:58:f7:ef:d7:9f:f0:c9:93:18:fc:
f8:b7:39:1b:4c:7d:5b:34:66:e6:62:0c:fc:f0:46:
8c:18:db:c1:6b:21:a2:06:a4:41:89:09:61:ed:8f:
f3:f6:ac:47:86:aa:d2:21:c2:cd:94:9c:54:01:c6:
84:8f:3e:ce:24:fd:00:fc:c3:fd:2c:00:99:bf:8d:
d9:c8:c9:ce:ce:40:ee:a6:c7:90:de:c8:ac:f6:58:
58:9f:51:78:8b:dc:d6:00:a7:5e:a6:a1:0f:31:c0:
9d:94:57:09:9a:d6:f2:ee:e4:00:c0:14:ae:2a:68:
f8:f6:34:a0:df:6e:d8:75:3c:77:45:6c:92:d0:86:
5f:0b:ed:fe:e3:6e:f1:f2:7c:23:39:c3:bb:e7:bf:
e5:98:e0:e3:4c:96:7b:a5:0a:72:e0:a1:ea:64:cc:
c4:e3:61:f6:aa:d4:f4:1a:b7:98:90:e0:27:96:fe:
31:0e:f4:09:ef:77:9f:9b:0f:9b:81:4a:1f:ae:80:
45:7d:86:64:5a:bb:58:64:93:4c:62:fa:ef:50:14:
36:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EC:28:46:7C:72:6D:E2:41:46:38:C7:0C:B0:67:CE:1E:96:A9:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2cf86ff7-281b-3317-934a-1989a3943f3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:c2:ee:96:f0:e7:72:3d:4b:ad:af:4c:e5:8f:43:09:6a:e8:
87:92:9e:8e:20:af:f4:97:8b:be:a0:6e:6a:de:6e:88:36:65:
d1:97:68:64:06:d8:a2:36:72:ba:10:19:76:f0:7c:6f:60:2d:
07:d7:cc:89:6d:60:89:4e:f1:d0:a8:b3:7e:dc:06:f8:1b:d5:
cb:2c:02:0c:c2:a1:77:b6:5a:a8:c9:9d:5c:ab:0e:e1:f8:d7:
fd:6a:2a:9b:60:24:1d:54:9c:17:43:a4:45:e0:29:7f:62:22:
dc:bc:54:ba:04:e7:bb:0b:7d:fc:7c:d3:55:48:2b:e3:5a:64:
bb:46:b4:a9:de:8d:13:8e:07:91:38:d1:a4:6d:14:15:f1:05:
d0:ad:47:51:93:6e:82:0d:f2:45:6a:20:59:6c:15:a7:07:64:
e9:2c:14:75:4f:24:07:64:cc:3f:7f:14:2b:a1:64:bf:86:8e:
0a:26:2b:5c:0d:3f:6a:9f:af:1c:25:e3:31:ca:21:a8:3a:19:
f8:27:03:f8:3f:29:1d:00:fb:d0:71:f6:e1:80:6c:8c:37:1b:
54:5b:ba:f2:f1:ca:22:31:08:04:3c:01:eb:75:b5:25:52:0c:
e6:9f:75:8d:64:6c:4e:db:e5:8f:67:5f:73:ee:da:1e:25:db:
ab:a1:e8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:00:23 2025 by rpki-client