
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6cd43715-9705-3e6e-b8f7-121e94276a7e.roa
File: 6cd43715-9705-3e6e-b8f7-121e94276a7e.roa (raw, json)
Hash identifier: 8xo7myN1nDG3rYIXXmlZ3gXmZQvYggC8K7Eaz4z+9PU=
Subject key identifier: 6B:29:09:EF:14:96:DE:BC:A9:F6:3E:A9:F8:ED:98:70:62:3B:E6:17
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848302406D0DC9D487036A84740
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6cd43715-9705-3e6e-b8f7-121e94276a7e.roa
Signing time: Fri 13 Dec 2024 01:58:17 +0000
ROA not before: Fri 13 Dec 2024 01:58:17 +0000
ROA not after: Thu 13 Mar 2025 00:58:17 +0000
asID: 13335
IP address blocks: 172.70.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:24:06:d0:dc:9d:48:70:36:a8:47:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 01:58:17 2024 GMT
Not After : Mar 13 00:58:17 2025 GMT
Subject: CN=88e508ec-537f-46e8-bbf9-1b3a37f3af9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bb:98:78:f8:72:45:31:df:cf:5f:50:86:8f:
54:8c:25:74:be:6f:5c:94:e7:45:e9:6e:8c:fd:cc:
57:e5:30:86:ba:b3:e3:43:3c:3c:ea:b8:80:2c:d2:
4a:e1:a8:ba:a2:2e:43:4a:35:8e:94:d9:ae:0f:78:
a3:2c:07:d2:5f:07:90:46:95:31:1b:8a:9b:d3:e4:
3f:c2:21:85:06:36:17:cf:04:ac:75:1e:ec:5f:c9:
20:73:e7:f7:61:45:a0:0b:48:ec:db:c3:22:52:3f:
ff:3a:cf:d4:a6:2a:02:a4:35:92:3c:a4:7a:73:6b:
04:ae:78:00:44:f7:b6:ef:ca:36:91:bf:ed:a8:a2:
3b:54:e1:86:98:bf:60:66:2a:8a:c5:e0:ae:61:02:
bf:62:44:88:11:1d:b3:e9:c2:db:9e:56:f8:74:d5:
58:89:43:9f:23:c1:7f:44:f0:d5:e8:16:fa:02:41:
87:db:83:c3:d4:12:bb:64:04:03:28:10:63:3a:99:
72:8b:ff:9b:c1:09:50:fd:f8:e9:c3:ae:0c:0e:b3:
01:67:64:6c:23:cb:3b:85:c5:8d:f6:62:cb:bf:28:
56:e7:fe:26:ad:2c:91:74:d2:f4:7c:9b:03:2d:73:
2d:a2:89:3a:82:b4:30:44:16:d4:22:b0:c7:a1:ad:
78:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:29:09:EF:14:96:DE:BC:A9:F6:3E:A9:F8:ED:98:70:62:3B:E6:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6cd43715-9705-3e6e-b8f7-121e94276a7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:58:6c:cc:0d:27:24:b1:cf:91:6c:f4:e9:8f:57:e6:0f:95:
fa:23:14:6f:74:d3:1f:ea:fa:78:71:1b:56:c8:e7:d8:62:10:
52:6c:98:8a:18:42:be:bc:9c:ef:a1:4f:d5:84:13:89:be:2c:
5c:59:43:18:ea:67:0a:12:e1:4f:d6:15:75:bb:2f:f8:3e:35:
3a:a6:bc:56:b4:31:6c:4c:f4:9c:6a:17:f0:45:cf:ff:db:a5:
24:cb:73:da:dd:91:71:66:59:0c:6e:53:7f:44:99:90:ca:cb:
69:dc:b4:95:f2:dc:04:5f:5b:ad:a3:99:e0:b3:d6:45:ad:ef:
5f:1b:7a:41:d5:14:ec:26:19:35:0a:60:5b:5b:ee:e3:cb:0b:
fa:e2:ed:b9:24:19:a9:b3:07:a7:17:40:8f:5a:b0:0a:b8:49:
3d:c2:8e:73:4a:96:7e:39:ac:f5:ac:56:84:93:ab:89:10:c2:
5d:5a:72:5b:11:f4:04:d1:2d:85:f9:24:de:dd:70:fd:27:cc:
e3:f3:3a:96:c3:c8:33:8d:54:88:1b:7e:c6:6c:95:93:05:d0:
70:94:56:7c:a4:ff:fd:b1:9d:28:ae:e1:bb:d7:ba:76:a4:4a:
fe:b3:6a:12:62:75:3f:66:47:ee:dd:69:ad:79:7a:0c:f9:65:
1e:9c:57:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:59:05 2025 by rpki-client