Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3704f71e-de46-3936-8afa-b59640d69979.roa
File: 3704f71e-de46-3936-8afa-b59640d69979.roa (raw, json)
Hash identifier: kbLhlNVEeIasH/HBAi9Q0mOBxJVqdRhbF+PlocvKWTw=
Subject key identifier: 6F:C1:F1:B1:FE:D7:2D:6E:E2:60:34:18:32:E0:F6:0F:11:CA:50:53
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848278D157C6C5A0F6946FD3980
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3704f71e-de46-3936-8afa-b59640d69979.roa
Signing time: Tue 10 Dec 2024 00:07:41 +0000
ROA not before: Tue 10 Dec 2024 00:07:41 +0000
ROA not after: Sun 09 Mar 2025 23:07:41 +0000
asID: 13335
IP address blocks: 172.70.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:8d:15:7c:6c:5a:0f:69:46:fd:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 00:07:41 2024 GMT
Not After : Mar 9 23:07:41 2025 GMT
Subject: CN=4b806d89-358d-4a3f-ba05-d91743c9b066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bb:eb:1b:07:6c:4f:5e:f6:35:88:19:3a:65:
2c:61:45:78:22:0a:3d:ef:6d:d8:94:92:c3:fb:02:
40:24:ff:62:a3:3b:46:3d:13:95:74:8f:18:7c:e3:
b6:37:c9:89:cf:6b:b9:8f:68:35:72:0a:72:ad:4e:
53:db:e1:de:c9:74:fa:3b:b3:73:0d:e1:5e:e7:7b:
46:e8:d1:c1:f6:e8:40:cc:55:15:57:19:b8:8a:ba:
81:c7:0c:ba:21:ab:aa:fe:0e:af:5a:9c:23:d9:b3:
41:34:35:e5:9f:fb:59:b7:d5:98:84:c0:db:03:ab:
37:ee:5a:f2:f4:0b:23:ea:9d:cc:9b:96:b1:b3:de:
40:cc:f6:ff:90:cb:ef:84:34:15:64:a6:8d:5d:0c:
98:aa:d0:21:82:01:ba:e6:52:21:43:59:33:23:22:
40:0e:1f:5c:e3:db:94:68:6c:87:77:14:ff:64:12:
e9:c5:4b:5f:02:81:a1:cc:95:ac:11:34:79:2c:0f:
b8:5c:8f:84:94:56:ea:25:65:84:1c:c8:a3:ea:ea:
be:06:67:1f:54:44:62:d6:ed:61:2e:f1:69:44:b5:
44:03:e3:f2:2e:e2:fe:9a:11:62:ad:d4:4f:13:9e:
e7:59:ca:e6:1a:fb:34:14:d3:29:9e:26:db:bc:87:
91:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C1:F1:B1:FE:D7:2D:6E:E2:60:34:18:32:E0:F6:0F:11:CA:50:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3704f71e-de46-3936-8afa-b59640d69979.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:24:78:36:b3:53:63:cb:a6:c3:8d:91:e4:70:e2:73:cd:f2:
5a:38:d7:b4:e5:30:bc:3e:3d:14:30:ab:35:be:e4:12:45:49:
8b:1b:0f:b8:f5:ce:fd:5a:5b:32:4e:3e:7f:91:64:09:ee:6d:
8d:ef:71:c9:55:b4:0d:c7:ba:01:ca:2d:4a:d9:38:b4:fe:5d:
f9:fc:24:94:52:48:40:cb:dd:6c:67:55:cb:fa:c0:8f:f4:cc:
a4:3b:41:ca:68:f0:6f:43:f8:6e:80:58:69:67:35:78:99:59:
d5:64:4c:5f:74:80:52:d1:7d:eb:f7:3d:c9:5c:de:9d:46:9a:
6e:da:07:33:b0:30:dc:5a:fc:79:8b:11:b7:a3:7c:72:d2:63:
ab:0e:aa:86:8e:87:b1:57:da:d7:df:ef:8f:16:0d:aa:0d:38:
61:55:ed:33:67:75:86:21:0b:5d:98:b2:07:b7:31:a5:c3:03:
c2:76:46:00:98:ff:cb:f4:fa:f2:6d:6d:b0:3b:9f:af:66:8e:
d8:ee:9a:a0:6c:98:b0:ae:50:5e:78:c2:7e:17:5b:c4:66:e2:
f8:5f:ca:dd:8a:12:0c:0d:c9:71:b0:33:c9:4d:9d:22:e9:a1:
82:e9:7f:79:0e:4e:b2:bd:75:d4:d4:6b:9d:07:c3:cc:86:13:
c8:66:13:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:15:40 2025 by rpki-client