Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/75271909-c8e6-3be4-826d-971dc55e1001.roa
File: 75271909-c8e6-3be4-826d-971dc55e1001.roa (raw, json)
Hash identifier: dwHEVIDIktPwHELzosr5cOyfhgA1qMDKBCnYn7lBsbk=
Subject key identifier: C4:71:39:49:AE:44:9A:B7:D6:A7:37:BE:65:5B:BE:93:9D:32:E3:A7
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584830246517BBA551B23ACAA0A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/75271909-c8e6-3be4-826d-971dc55e1001.roa
Signing time: Fri 13 Dec 2024 01:59:01 +0000
ROA not before: Fri 13 Dec 2024 01:59:01 +0000
ROA not after: Thu 13 Mar 2025 00:59:01 +0000
asID: 13335
IP address blocks: 172.70.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:24:65:17:bb:a5:51:b2:3a:ca:a0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 01:59:01 2024 GMT
Not After : Mar 13 00:59:01 2025 GMT
Subject: CN=c07e6486-91a3-42b9-86f1-36b7354f9af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:53:f6:24:d0:a4:43:64:e7:26:a8:23:5b:bd:
77:48:36:06:e0:03:84:0a:e0:17:c4:05:c1:7e:2c:
38:f5:7b:dd:f5:c0:26:20:6f:c7:d6:a9:f4:16:51:
a5:b3:da:5b:3b:b5:bb:0f:e2:2e:17:cb:59:92:af:
12:51:1b:9a:04:59:08:7e:e5:20:af:0d:3e:8d:dc:
10:97:28:c4:98:87:ab:23:3e:a6:b2:39:e1:3c:f1:
e4:47:ad:f5:e3:a2:e9:f8:d6:b6:0a:7b:95:ac:7d:
24:29:b3:a8:6f:d0:e8:43:be:95:a3:ec:fe:16:07:
be:17:f9:c0:79:f6:e5:0f:d8:4c:39:b4:31:1b:a6:
99:ea:c6:78:e0:f4:b3:b3:ba:5b:c6:99:b4:73:0e:
81:fa:a3:80:0b:a5:7d:c1:27:20:e3:07:06:11:75:
b2:0c:df:fe:49:84:bb:0f:db:3e:a2:a1:a6:3c:fc:
85:a2:c7:c2:c4:0c:af:ec:93:9a:9c:ec:66:4a:1b:
9a:7b:da:23:77:0f:e7:6e:e7:0f:25:6a:bc:8e:81:
fd:87:3d:d8:48:c2:b1:96:47:c9:6a:d1:23:06:22:
41:15:c4:fa:ff:be:51:6e:d6:22:47:e2:f6:0b:a1:
36:e6:79:5e:08:37:36:ca:db:56:51:46:83:6b:c2:
f3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:71:39:49:AE:44:9A:B7:D6:A7:37:BE:65:5B:BE:93:9D:32:E3:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/75271909-c8e6-3be4-826d-971dc55e1001.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:09:97:90:8b:8a:51:d3:f4:1f:8d:7b:f0:e8:00:60:e4:f7:
18:85:9c:22:55:24:78:91:f2:88:f6:20:8a:c3:e1:c9:f1:e4:
9d:0d:a5:ee:58:d9:ea:7e:28:13:57:fe:27:5c:92:23:d9:52:
38:1b:d0:c9:12:62:03:6a:22:c4:d7:94:1d:4e:4f:43:65:ae:
4f:15:6a:24:38:c1:66:01:57:d8:43:ca:37:95:d7:fe:20:5c:
91:d9:bf:8b:4d:8d:69:7a:8c:b2:37:01:30:29:ae:f1:2e:73:
cf:26:80:6e:d0:a2:55:f4:af:39:8e:89:84:ac:eb:99:6e:b1:
d6:90:a0:c2:54:8e:21:77:14:c0:ad:a3:63:45:5f:32:6a:14:
28:7d:02:a8:67:ab:bb:ea:c9:ed:1c:f7:e6:b6:d1:43:f6:7f:
ea:95:f4:bc:13:9d:bc:49:ff:2b:58:4a:0f:37:76:c5:8f:54:
71:cc:2a:26:c2:3a:58:d5:5c:4a:32:90:13:41:56:e6:61:94:
50:57:6c:2f:b4:1d:74:e5:e8:1a:77:ce:22:2d:58:4e:da:f8:
3e:3c:18:3d:4d:d1:bf:62:09:cc:df:d9:e7:a5:cd:70:b5:e1:
68:9c:69:00:f3:01:b2:b3:8d:8c:d4:c9:8e:58:67:25:23:5a:
b8:54:60:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:16 2025 by rpki-client