Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/33944861-31a9-3611-8c2c-a36001f8c60f.roa
File: 33944861-31a9-3611-8c2c-a36001f8c60f.roa (raw, json)
Hash identifier: ZUJsOMzoPkmJ3eLT1yGnm+n68IKTNyHA29yvr2AcizI=
Subject key identifier: 97:CF:70:45:7B:3D:CC:5B:12:F5:01:12:86:E2:9C:2D:D7:F8:31:E7
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848303054CDEF0F0FC84E0F3B80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/33944861-31a9-3611-8c2c-a36001f8c60f.roa
Signing time: Fri 13 Dec 2024 02:23:04 +0000
ROA not before: Fri 13 Dec 2024 02:23:04 +0000
ROA not after: Thu 13 Mar 2025 01:23:04 +0000
asID: 13335
IP address blocks: 172.70.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:30:54:cd:ef:0f:0f:c8:4e:0f:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 02:23:04 2024 GMT
Not After : Mar 13 01:23:04 2025 GMT
Subject: CN=dd842f0f-1f66-4510-9e95-7bdf87c72c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:58:05:68:7d:a6:e8:3b:b2:61:58:69:00:78:
86:e0:76:f6:7c:89:bb:7d:5a:63:de:54:a2:0e:b1:
1c:e1:92:45:b5:ce:6f:0b:8d:99:8b:ad:bd:5c:63:
ba:04:b9:3c:97:cf:03:6a:dd:cb:67:05:1f:a7:a0:
81:a7:f5:f0:e9:ea:54:d9:72:c5:9d:a1:14:dd:bd:
a6:68:d6:8f:58:a2:d5:01:41:d5:42:59:fa:1c:a1:
a3:95:78:20:27:70:af:59:fa:b1:f8:86:7c:34:fe:
42:7f:15:42:40:f4:98:7a:11:91:04:dd:52:27:0e:
ee:20:c3:df:77:e1:e7:35:e0:de:e8:05:c8:3d:1c:
c5:e9:34:6f:64:2a:06:cc:a5:97:f6:0e:02:cc:ac:
09:8f:63:80:f2:19:24:18:36:8f:5e:3f:0a:48:17:
76:91:fc:10:3d:94:0b:2e:9d:90:e2:29:0d:13:0e:
ad:35:21:42:80:40:a8:5e:83:4b:b0:7f:d4:c6:a3:
8a:83:d9:3d:4e:db:e1:1b:be:c1:a9:97:9f:ff:6e:
ef:00:57:ee:cd:88:3e:c7:35:c3:bc:51:96:8c:69:
7e:d7:9b:ed:31:00:9b:7b:45:5a:4b:1a:4a:86:f7:
67:93:5b:89:25:a2:48:90:80:27:45:5e:c5:08:df:
4e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CF:70:45:7B:3D:CC:5B:12:F5:01:12:86:E2:9C:2D:D7:F8:31:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/33944861-31a9-3611-8c2c-a36001f8c60f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:49:56:ed:03:40:77:43:de:a0:db:6f:38:29:e8:20:9e:d3:
77:e6:0e:bd:9b:02:7c:ba:ba:45:09:71:ee:fb:7a:c3:b8:0b:
a5:8d:06:8e:a3:6d:2f:c5:a0:d3:bd:80:2b:01:ec:02:3a:91:
f5:6c:bd:58:c4:57:d7:e5:f4:f2:16:97:75:0f:80:e7:d7:d8:
13:47:45:5f:b2:08:58:10:60:41:aa:4e:22:d3:9c:99:61:74:
c6:04:7c:8c:60:e7:90:b5:25:08:90:98:aa:f6:a0:0f:c0:5d:
55:ef:00:02:dd:3b:9b:78:7c:e6:00:93:83:ef:ee:fd:d8:09:
fd:87:ae:87:20:c5:d0:47:35:11:18:4c:33:03:ac:f6:89:3d:
e6:79:db:05:dc:30:44:57:2b:82:7b:94:fa:4a:49:24:49:9f:
88:d2:42:db:7f:af:46:dd:20:47:e7:ff:ae:91:02:66:d1:01:
70:80:ed:a6:8b:f8:75:92:5c:07:b8:30:c6:d4:44:b3:e0:1f:
07:81:0b:18:ce:1d:70:0c:8e:ff:ca:81:41:da:7a:ff:17:35:
67:9e:bc:09:b2:00:de:bf:8c:d2:27:36:a7:75:8b:39:4e:1f:
e1:54:e9:42:58:01:87:08:e9:d1:37:4f:34:85:95:a9:17:91:
a0:77:42:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:58:44 2025 by rpki-client