Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/88674e0a-efc0-3112-b316-ca2b820f32ce.roa
File: 88674e0a-efc0-3112-b316-ca2b820f32ce.roa (raw, json)
Hash identifier: k6zx39JRfgDxVmy6KBn0GXPWYWIchUB7TB4RPh3oZGY=
Subject key identifier: DC:BF:24:6B:E8:A9:A5:FD:EE:88:39:32:DF:0B:5F:0E:0C:CF:2F:CC
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848302E3DD9195C569B94A0D000
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/88674e0a-efc0-3112-b316-ca2b820f32ce.roa
Signing time: Fri 13 Dec 2024 02:18:52 +0000
ROA not before: Fri 13 Dec 2024 02:18:52 +0000
ROA not after: Thu 13 Mar 2025 01:18:52 +0000
asID: 13335
IP address blocks: 172.70.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:2e:3d:d9:19:5c:56:9b:94:a0:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 02:18:52 2024 GMT
Not After : Mar 13 01:18:52 2025 GMT
Subject: CN=1b5becae-de5f-4d1f-a3ef-0564308a2a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:39:77:b5:12:8d:fe:17:cf:46:b8:82:dd:81:
bd:47:a6:88:55:05:e2:40:52:18:25:7a:6e:b7:77:
37:48:89:f3:7c:c9:b8:26:a0:50:c5:9e:a3:8b:99:
47:5e:47:1a:3b:52:eb:bd:a0:50:ef:e9:c5:c3:94:
37:ae:12:35:ef:5d:9e:68:4c:a3:cb:bf:49:6c:04:
d6:a2:26:5d:4e:bb:95:e3:ab:91:e1:96:de:d4:5c:
3d:f6:cd:b8:d0:ea:99:d0:96:99:1a:04:b6:79:1d:
42:86:f5:0c:80:13:04:bd:32:f2:6a:fb:34:83:d4:
67:79:0b:c2:67:44:3d:0d:7e:df:0c:92:d4:43:b3:
58:e6:bf:23:89:a9:48:89:d9:33:72:27:86:31:4e:
aa:88:4d:72:16:c5:8e:f7:50:2f:e2:c7:16:da:05:
72:d0:b3:0d:20:52:46:6f:d6:20:10:f8:8d:4b:47:
c4:dc:77:04:11:7b:70:81:88:8b:3c:65:16:03:de:
f0:f8:b4:c4:54:e6:aa:30:d0:f4:a4:f1:78:c6:34:
a9:e3:1b:b1:69:69:af:ff:ac:87:6f:9c:25:47:95:
e6:7a:e0:91:1d:a5:7f:c1:d3:7a:98:94:6d:e2:b5:
c7:95:d7:f1:3b:c0:2a:57:f0:ad:62:cb:9c:2e:48:
c4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BF:24:6B:E8:A9:A5:FD:EE:88:39:32:DF:0B:5F:0E:0C:CF:2F:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/88674e0a-efc0-3112-b316-ca2b820f32ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:d8:dc:8d:c4:92:ea:c1:a2:02:9e:18:d0:5f:d6:6f:24:af:
b4:0f:f2:63:3f:8f:b5:15:f1:8d:5a:3f:3a:48:0d:9f:ff:21:
48:45:07:c7:f1:53:80:30:04:33:85:0d:63:1d:92:38:2f:81:
09:48:41:74:86:bd:36:60:93:7d:31:a2:ce:7d:8d:56:a3:3e:
c7:5e:16:88:1f:23:54:58:52:76:5e:47:59:73:1d:9e:e3:16:
bc:0e:af:11:74:66:9d:e2:d4:aa:a9:49:06:7d:a4:43:92:29:
0d:19:93:30:78:c2:1d:26:a2:bc:88:b1:cd:e5:fb:51:fc:38:
c4:05:cf:35:49:31:a5:c8:04:8d:86:44:7f:3d:bb:e2:98:23:
78:d0:b3:8c:aa:a8:f2:ba:9a:1c:7b:aa:cb:07:39:89:42:86:
a8:61:76:cb:d0:39:78:4a:2a:04:6e:38:4d:96:51:22:3a:a4:
0e:90:e6:2c:8f:55:2a:b6:bc:f0:e6:c0:25:e8:f8:89:82:85:
cb:77:b1:77:90:2b:77:8a:da:8a:3d:dc:c8:19:09:5b:85:e1:
a8:19:db:a9:51:56:b6:c8:dd:3f:7e:4d:59:d0:3c:41:c1:70:
49:98:41:a6:40:11:4e:61:a9:59:88:39:03:87:25:4d:1c:1a:
ea:f1:a0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:28:25 2025 by rpki-client