Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7c3b0cd6-d369-3169-a0ec-c6c6fbf4a42b.roa
File: 7c3b0cd6-d369-3169-a0ec-c6c6fbf4a42b.roa (raw, json)
Hash identifier: +sNu/1WSb4GvoBxnZkOc4eckTe0sEaKvzY5AoJANvyA=
Subject key identifier: 01:F5:7D:F9:15:6B:55:06:77:CE:C3:89:1E:B5:3E:D5:70:F2:9C:03
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858483040985A3BD4B66488C1E640
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7c3b0cd6-d369-3169-a0ec-c6c6fbf4a42b.roa
Signing time: Fri 13 Dec 2024 02:55:50 +0000
ROA not before: Fri 13 Dec 2024 02:55:50 +0000
ROA not after: Thu 13 Mar 2025 01:55:50 +0000
asID: 13335
IP address blocks: 172.70.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:40:98:5a:3b:d4:b6:64:88:c1:e6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 02:55:50 2024 GMT
Not After : Mar 13 01:55:50 2025 GMT
Subject: CN=10e3e266-0c02-4138-be46-ac2e7e88d988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ea:ff:f4:02:1d:12:f2:e5:ae:bc:c7:a7:2f:
70:23:13:f7:78:d4:d4:0d:37:7f:68:ad:09:5b:94:
4b:e3:05:11:b8:0b:7b:47:a8:0a:0b:25:36:66:5b:
87:66:81:0c:17:23:8c:68:7b:7f:f5:77:38:b0:34:
7c:8e:42:23:27:b2:36:d5:86:de:8f:86:c9:c1:fc:
9f:2c:33:ab:23:43:10:5e:11:57:7f:bd:16:2d:65:
41:8a:75:f4:af:15:f6:be:1d:10:88:8c:71:38:6f:
e5:1d:42:83:d9:84:1c:7e:3d:e7:a1:d6:86:9f:ec:
17:52:73:2a:b7:a2:56:ae:5a:e1:86:2b:97:68:fa:
f3:4e:9a:9c:de:bf:09:95:a7:ae:bc:04:8e:e1:db:
d0:aa:95:e4:c4:41:01:70:a5:28:70:47:5e:dd:56:
d2:cf:c8:df:4a:b8:ea:44:55:7d:7b:b4:3e:de:4d:
3a:9b:b6:c8:67:03:2e:69:46:cf:7a:c9:91:e1:5f:
d3:df:fa:e6:41:e2:d9:e3:0e:07:ee:e9:b1:58:d6:
c7:1a:18:ee:00:f3:34:36:67:e8:b6:1f:8f:21:74:
3d:d0:6d:bf:e7:38:87:96:33:89:dd:c4:10:5b:b8:
ae:b7:1e:12:17:30:9d:61:6b:bc:e8:29:97:27:11:
6b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F5:7D:F9:15:6B:55:06:77:CE:C3:89:1E:B5:3E:D5:70:F2:9C:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7c3b0cd6-d369-3169-a0ec-c6c6fbf4a42b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:0e:17:db:e4:57:59:bd:9d:07:99:d2:a8:09:a0:4d:34:20:
02:66:d9:8b:31:38:42:e8:b9:8d:85:cd:8c:6c:f9:ff:37:8c:
3e:bc:fc:7c:f4:cb:92:8b:57:7c:b3:57:c8:36:f5:f2:ac:ce:
7a:a8:3e:34:1b:7e:40:41:d3:53:62:37:1f:0c:4a:01:a9:d6:
01:ff:94:a2:21:96:41:70:5d:40:ba:d2:1b:86:fe:73:31:76:
8a:ce:3d:90:de:32:b8:5e:01:7d:58:c8:dd:00:c7:fa:48:f2:
14:c5:0c:39:88:03:19:96:82:b0:af:1a:14:2f:4b:40:01:fc:
81:cb:ee:84:63:cb:34:55:df:d2:f1:0b:72:c1:48:98:54:8d:
09:1a:47:fd:3b:35:85:eb:38:2c:72:b8:45:be:63:3b:1b:97:
a7:8d:a1:ba:94:e9:c2:68:f5:09:1b:27:18:02:7b:9f:fe:fc:
05:8a:13:8b:20:1a:bb:fb:06:15:bd:ce:bd:44:70:b6:6b:8e:
5d:04:c4:38:4b:ea:6b:24:b8:5a:11:e6:80:c9:a1:73:65:bb:
50:54:55:89:9f:7b:07:19:65:50:b8:42:fa:21:b6:27:64:c2:
4c:95:a5:3e:9d:a4:02:66:90:1c:73:b8:d6:b2:c5:1e:db:af:
f7:ca:5d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:45:55 2025 by rpki-client