Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/40674d13-34cd-3c86-af0c-6dca7c56efd7.roa
File: 40674d13-34cd-3c86-af0c-6dca7c56efd7.roa (raw, json)
Hash identifier: KNt6rqLxGHjLj9x9OMO/B91faNsvXwN+6txvy6qQcS8=
Subject key identifier: 05:FA:25:26:0E:32:D8:E2:9B:F5:B8:B9:BB:5D:42:98:F0:92:24:94
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858483020BE30D94E8213893EC200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/40674d13-34cd-3c86-af0c-6dca7c56efd7.roa
Signing time: Fri 13 Dec 2024 01:51:40 +0000
ROA not before: Fri 13 Dec 2024 01:51:40 +0000
ROA not after: Thu 13 Mar 2025 00:51:40 +0000
asID: 13335
IP address blocks: 172.70.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:20:be:30:d9:4e:82:13:89:3e:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 01:51:40 2024 GMT
Not After : Mar 13 00:51:40 2025 GMT
Subject: CN=db9a8975-ab55-4e2e-b082-50908c33045e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:25:37:29:4e:44:f6:28:7d:02:7e:1f:4b:f1:
39:ae:05:2d:b5:27:62:11:97:95:6e:14:8c:88:a8:
22:6d:95:82:a5:d2:ac:16:2d:ea:36:61:1c:15:b8:
3a:f6:df:6c:2c:f0:0b:fb:7f:aa:04:c6:5e:f6:27:
38:22:9f:65:73:d3:da:f7:c9:8e:a0:f7:35:dd:f1:
b0:fe:53:3b:53:d2:52:93:63:ff:23:fa:26:75:d4:
17:34:92:86:b0:5a:f3:1c:71:35:38:58:45:29:3a:
1a:2c:d7:09:de:cf:d8:16:4c:d3:f7:3f:66:9c:a8:
dc:8b:90:ee:ae:51:49:be:b0:ad:52:26:5d:19:02:
69:44:57:ca:b3:3a:19:af:4a:be:d7:5d:84:47:df:
13:ea:22:66:69:3e:17:06:8f:8c:22:c7:43:74:00:
1d:05:44:6a:ec:a5:0f:a1:08:cf:41:97:ca:89:19:
96:16:bb:bf:02:39:88:5e:e4:26:bd:47:0f:a9:1d:
99:be:fa:7f:8e:0a:da:33:87:43:81:87:0d:39:f9:
9f:73:72:91:a3:34:f1:d5:ab:10:44:36:3a:11:bc:
c8:fe:61:ed:74:2d:e8:94:ff:47:e6:4e:38:80:c3:
3a:a1:7a:e2:6d:8d:7d:75:83:71:02:03:f5:e3:8b:
30:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FA:25:26:0E:32:D8:E2:9B:F5:B8:B9:BB:5D:42:98:F0:92:24:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/40674d13-34cd-3c86-af0c-6dca7c56efd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:63:4a:82:74:a9:91:a6:71:0e:ce:6f:5c:f0:1e:9c:27:9c:
02:8a:dd:86:39:17:66:74:b8:17:57:18:35:6a:8e:62:41:0b:
ed:9f:07:69:76:83:41:7d:31:9f:c9:94:4e:9d:c8:0d:8d:69:
93:7e:50:93:dc:d4:38:61:ad:5e:14:39:c4:36:f7:62:df:d2:
f1:02:29:93:64:86:3f:f1:28:aa:0d:d8:e3:7b:95:09:4e:81:
fe:c2:b2:c8:a6:73:2d:7f:a6:cc:56:e0:c4:d2:c1:51:84:73:
d1:0b:44:a7:10:6b:c6:94:bd:94:f6:b3:c5:a3:af:99:84:ae:
52:f5:30:78:56:ec:0c:e6:fe:2f:d0:fb:83:25:24:49:6c:8b:
ab:d1:7c:b3:b4:ed:5f:10:8a:c8:57:c8:ef:73:41:6e:79:f6:
7f:47:0c:e1:23:f6:f5:b6:98:d0:63:df:7f:70:c6:dd:1d:e5:
1a:af:ee:2c:de:49:63:7b:d9:12:7e:87:bc:73:27:c0:15:eb:
7f:06:d9:89:78:89:e4:99:da:3c:65:f2:e0:87:6d:04:5a:dd:
73:e2:94:21:19:60:ca:aa:46:8f:c9:e9:bf:5b:24:c2:1d:db:
f2:fd:aa:b0:a8:7e:a8:61:19:44:5f:cc:4e:1b:c7:79:de:39:
df:e3:1a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:58:00 2025 by rpki-client