Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f5a6930-ef80-3c09-a659-2012e7807a88.roa
File: 8f5a6930-ef80-3c09-a659-2012e7807a88.roa (raw, json)
Hash identifier: nAChf6ptCAkI3trDkCKpfhlwbv75pSuUjgcmPiK8hoM=
Subject key identifier: 88:20:E7:B1:11:4F:15:81:52:0A:01:92:23:1C:6D:E8:E6:C0:6F:97
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848302FD4009E5EC4740A01A040
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f5a6930-ef80-3c09-a659-2012e7807a88.roa
Signing time: Fri 13 Dec 2024 02:22:03 +0000
ROA not before: Fri 13 Dec 2024 02:22:03 +0000
ROA not after: Thu 13 Mar 2025 01:22:03 +0000
asID: 13335
IP address blocks: 172.70.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:2f:d4:00:9e:5e:c4:74:0a:01:a0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 02:22:03 2024 GMT
Not After : Mar 13 01:22:03 2025 GMT
Subject: CN=f090b7c6-dc5c-4bfd-937c-15714d9ad1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:b0:05:93:1f:82:6c:31:33:ff:03:ae:3b:
ff:53:2d:51:82:56:b6:57:fb:77:9a:a6:fb:fd:cc:
b8:cd:c5:d4:17:68:17:87:ed:30:e8:91:86:54:a3:
d1:e9:0e:34:6c:b7:e7:38:79:a5:cd:f7:ff:17:f7:
2c:4a:4f:d1:0f:22:38:a3:28:e7:47:b0:b8:03:48:
26:31:cf:34:03:b8:5d:89:54:db:13:00:2b:1a:dc:
d7:da:a9:6f:94:26:99:df:f7:7b:68:6c:a7:7b:35:
de:cf:48:1b:79:66:72:f8:50:d7:a3:f8:63:3a:48:
a7:e7:8e:0b:8b:7f:9a:0b:32:03:6c:24:6b:1e:1f:
17:8a:37:cb:2c:bf:42:3b:87:23:9f:ef:5a:55:59:
89:56:fa:3d:31:f4:53:86:ba:f5:8e:0e:38:bc:de:
55:1b:1c:0a:19:2b:63:5a:11:51:5a:96:54:4f:06:
7d:4e:be:50:be:3f:3b:4f:b9:62:c8:b9:16:fc:b6:
fc:82:f3:8f:7a:6b:2f:25:e5:d0:66:b9:2f:a9:90:
89:84:3c:0f:c3:93:78:f5:98:ac:47:76:b0:68:9b:
21:74:0a:8a:b0:ba:31:69:71:71:5a:b2:af:32:af:
76:83:11:80:15:0c:09:c9:ad:66:60:e1:ef:cd:d6:
b1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:20:E7:B1:11:4F:15:81:52:0A:01:92:23:1C:6D:E8:E6:C0:6F:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f5a6930-ef80-3c09-a659-2012e7807a88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:59:f6:c6:65:15:7d:bb:86:f0:c6:90:71:9b:30:18:f3:10:
fd:9f:3d:1b:5a:e1:5a:c3:54:9e:6c:0d:09:03:fc:e9:9b:45:
fd:83:0f:51:8e:95:63:86:3d:3d:40:2a:ec:00:c0:4e:09:0e:
57:36:d4:5a:22:12:ef:2d:28:47:d5:c9:7d:e6:07:cd:eb:5e:
c5:a8:3d:03:17:d8:40:7d:c7:4d:42:24:2a:a7:85:50:12:87:
cf:23:7a:38:6a:ca:af:87:64:08:d7:36:20:b7:04:ae:82:4f:
9c:07:76:b2:80:2c:8a:b7:d6:ec:35:68:5d:1b:ee:fc:56:ee:
2e:cc:89:17:83:63:fb:1e:dd:18:8a:ba:19:2e:f1:d4:18:9d:
d1:5e:ab:e5:85:b8:46:40:b1:4d:f7:30:de:0b:28:37:64:86:
6d:c7:23:44:fd:1a:4b:af:65:45:4e:0b:0a:0c:7d:bc:d7:15:
81:fc:08:6a:c4:d2:eb:23:9e:cc:ac:24:57:70:bf:a3:bf:5d:
e1:42:90:f5:8f:b0:1d:86:8c:3a:b7:6f:b2:e1:2a:76:8a:b4:
a3:d3:b2:f8:70:7b:13:c0:5b:f5:51:3d:1a:77:03:ae:cc:b8:
13:e0:1f:0d:f8:a7:12:35:16:ab:41:b0:ef:4a:96:e3:8b:03:
00:1c:0b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:34:35 2025 by rpki-client