Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/86f9b11a-4004-373f-9ca7-6b36b0ad8258.roa
File: 86f9b11a-4004-373f-9ca7-6b36b0ad8258.roa (raw, json)
Hash identifier: /UB9k/h7WscsTcDECHHFvfMk5wdsV9OaMlJEzJHKMmI=
Subject key identifier: 6F:18:97:62:38:2D:2C:F7:82:FB:79:4E:82:5D:85:4D:58:3C:A7:CB
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584830319BCC9A199B8FCF2AC0C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/86f9b11a-4004-373f-9ca7-6b36b0ad8258.roa
Signing time: Fri 13 Dec 2024 02:25:39 +0000
ROA not before: Fri 13 Dec 2024 02:25:39 +0000
ROA not after: Thu 13 Mar 2025 01:25:39 +0000
asID: 13335
IP address blocks: 172.70.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:31:9b:cc:9a:19:9b:8f:cf:2a:c0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 02:25:39 2024 GMT
Not After : Mar 13 01:25:39 2025 GMT
Subject: CN=acf52951-b133-49dd-82b4-68418879303e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b8:27:3c:8c:de:06:27:17:27:1e:d8:eb:50:
94:02:42:5e:e4:8b:f5:09:fa:aa:5f:a7:47:ea:60:
cd:49:6e:2c:99:fd:60:0c:67:80:ee:80:d0:23:0e:
a9:34:e9:32:62:4c:55:f6:99:f4:fc:a1:c4:df:13:
44:19:9a:de:62:36:5d:43:29:ec:61:2e:a5:e6:2c:
94:e8:d1:1f:50:60:77:67:ab:dd:05:e3:d1:1c:e0:
8b:12:40:16:1a:cc:73:49:4a:bd:52:db:7d:9a:1f:
c8:73:87:62:d9:75:bd:e4:0a:74:b2:18:3d:68:71:
60:e3:d5:14:85:57:4f:55:33:f0:2e:9b:33:2e:c8:
70:98:96:16:59:e8:70:c5:66:59:84:99:04:4d:93:
67:a4:c6:1e:37:fb:02:b1:b1:07:e0:23:27:7d:50:
c4:53:1b:1d:ac:dc:48:fd:7f:04:ba:27:70:03:9d:
6f:73:1b:04:24:2c:83:96:1f:4e:11:e0:cf:b7:65:
ae:35:28:53:d2:bd:f9:fa:a8:df:95:41:b4:d3:51:
71:e8:28:6d:74:ee:10:ba:43:b0:0c:ca:d9:13:e5:
6d:87:a3:2c:80:10:30:e6:46:12:81:dd:2d:43:ac:
4a:00:21:6c:66:15:e7:76:8f:41:3e:85:ce:bd:54:
d3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:18:97:62:38:2D:2C:F7:82:FB:79:4E:82:5D:85:4D:58:3C:A7:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/86f9b11a-4004-373f-9ca7-6b36b0ad8258.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:c2:1d:b3:b4:7a:1a:67:3a:5b:a9:de:ea:24:8c:d9:1f:f2:
19:b9:7c:4e:11:45:8e:d4:90:aa:3d:4e:11:ed:fb:6b:7d:82:
72:3a:9c:84:69:ba:94:29:2b:b4:a8:fe:42:aa:1b:e0:6e:73:
6e:c1:c9:4a:30:1e:ee:3a:d6:20:26:b3:2b:9c:6b:d1:ac:8b:
5a:8c:ae:9a:6a:f1:d4:4d:e0:1e:fb:04:bc:e4:7d:da:57:be:
7b:e2:3f:9a:06:f6:f1:db:b7:73:92:ee:43:92:e1:61:e6:ec:
27:6c:c0:09:ca:c1:31:40:76:9c:2c:39:fd:58:0d:e2:09:14:
fb:86:9c:6e:a2:95:fe:64:df:fe:73:a2:44:0b:da:74:c8:30:
26:93:c1:7c:9d:e4:63:95:b5:c5:b8:f4:d7:25:bd:a0:89:90:
2e:c9:dd:a9:45:a6:26:ae:86:b0:93:47:b8:6f:5a:a9:4a:ca:
18:72:7e:ec:75:fd:f2:5b:06:bf:3c:27:37:66:30:46:48:91:
f6:92:e8:e2:7d:eb:af:21:e2:46:f6:6f:f8:d8:dc:eb:42:96:
7f:c2:cc:9d:77:35:05:6a:11:84:dc:8f:0c:ff:4d:30:12:50:
2a:b1:7f:3f:b6:5f:03:c8:e6:c5:12:36:cf:ae:61:0d:bd:71:
a4:b0:3b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:45:47 2025 by rpki-client