Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7e5cd32f-4418-3687-a865-8f2a2ae8ab64.roa
File: 7e5cd32f-4418-3687-a865-8f2a2ae8ab64.roa (raw, json)
Hash identifier: LrALq5h//0tWduo2Ujm8J7W3JwFcR0iW0W8ytt/VimI=
Subject key identifier: C9:92:62:28:D9:46:8F:B1:0E:0C:77:51:0E:7B:DF:96:BE:C8:8F:40
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584830221C7DE587CB839ADAFC40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7e5cd32f-4418-3687-a865-8f2a2ae8ab64.roa
Signing time: Fri 13 Dec 2024 01:54:25 +0000
ROA not before: Fri 13 Dec 2024 01:54:25 +0000
ROA not after: Thu 13 Mar 2025 00:54:25 +0000
asID: 13335
IP address blocks: 172.70.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:22:1c:7d:e5:87:cb:83:9a:da:fc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 01:54:25 2024 GMT
Not After : Mar 13 00:54:25 2025 GMT
Subject: CN=2337ec01-2396-4049-9ec5-a6862ff18fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1c:cc:bb:7b:f1:34:ac:d0:04:1d:26:52:e4:
6e:a6:c5:23:05:1e:fe:56:56:24:ea:39:05:54:a8:
55:c5:bf:df:26:fb:75:36:f8:8a:a8:4a:f6:80:2f:
22:5d:26:2e:e2:73:31:e0:72:5b:98:78:eb:d3:6b:
48:2e:45:9e:e3:5c:6a:37:60:29:d5:58:49:e3:6b:
29:c1:d2:b6:00:84:ca:65:67:ce:d3:dc:78:5c:36:
17:a8:88:8f:f0:af:e9:b2:6c:d9:5e:f3:11:3e:e7:
c3:c8:07:03:91:25:05:75:a1:28:d6:0c:97:e2:af:
af:af:01:64:4b:d8:7b:87:53:be:00:c7:97:5f:20:
d8:7b:5e:27:3e:cf:25:4e:3a:ca:18:47:8f:8b:a2:
f3:de:88:16:58:a0:62:72:3b:a8:59:ed:92:42:19:
0c:73:44:85:38:6d:88:c4:67:03:aa:70:42:bb:2c:
67:ef:c8:2c:7d:8c:51:51:26:36:d1:52:ad:d8:19:
66:83:2d:ea:6e:62:58:44:8b:cf:a8:31:72:80:dd:
ba:13:8a:f3:70:88:4d:c9:1a:d0:5d:47:66:d3:62:
3e:4b:f4:72:22:07:3b:be:5f:af:66:ee:25:67:cf:
6f:21:25:8a:58:d4:ef:11:b0:ff:03:24:1b:cf:38:
03:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:92:62:28:D9:46:8F:B1:0E:0C:77:51:0E:7B:DF:96:BE:C8:8F:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7e5cd32f-4418-3687-a865-8f2a2ae8ab64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:e9:02:11:dc:7b:18:9f:86:cd:9c:43:d0:46:3c:90:57:58:
48:00:3e:53:f9:0c:53:7b:ab:e6:82:13:1d:c3:ea:cd:50:b9:
bc:0c:df:5e:e7:6e:81:6d:70:a7:af:0d:78:73:f2:af:d7:fb:
61:3c:e3:c6:dc:9a:3e:81:0b:51:39:eb:3d:18:b0:2a:74:0d:
ba:48:24:28:bf:26:6d:a1:b3:95:98:04:3d:9f:42:37:18:e5:
99:55:02:2b:3d:a2:bf:c5:a1:b8:ad:4c:2b:e2:7e:a7:43:cf:
27:50:50:12:3a:d0:8e:c4:68:fb:67:60:f7:0e:f9:88:1c:b8:
d4:40:83:46:65:f5:03:7a:1c:b2:97:19:c1:43:a3:61:64:59:
c1:0a:e8:a3:d7:5c:cc:5d:63:f5:32:e4:fd:ef:6d:a7:e0:73:
44:e7:e8:b0:89:e7:67:76:52:1a:20:ab:75:23:78:7d:e3:d9:
f7:bb:bc:bf:bf:5d:52:77:bc:b4:d1:a8:c1:ae:c9:ed:ac:aa:
60:24:7d:f8:56:13:9c:1b:92:e0:81:48:9b:3b:9a:ad:7c:55:
f8:77:fc:bf:0c:99:2d:72:8f:e0:87:26:ae:51:4d:36:a2:16:
4e:e5:d3:74:78:83:7d:0e:35:2d:10:95:73:89:13:80:fd:57:
88:82:f1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:00 2025 by rpki-client