Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ea72dd8-e25c-35dd-994d-c81a614f044e.roa
File: 9ea72dd8-e25c-35dd-994d-c81a614f044e.roa (raw, json)
Hash identifier: biK5kXkFpFqaz/v9XBWgl+6fYTFLSnXy5lQe+r5GkWA=
Subject key identifier: 28:CF:D7:6B:8A:2F:93:5F:AE:3B:55:A4:86:CC:B2:78:78:6D:26:30
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858483030E548E94A7C45338EC7A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ea72dd8-e25c-35dd-994d-c81a614f044e.roa
Signing time: Fri 13 Dec 2024 02:24:12 +0000
ROA not before: Fri 13 Dec 2024 02:24:12 +0000
ROA not after: Thu 13 Mar 2025 01:24:12 +0000
asID: 13335
IP address blocks: 172.70.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:30:e5:48:e9:4a:7c:45:33:8e:c7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 02:24:12 2024 GMT
Not After : Mar 13 01:24:12 2025 GMT
Subject: CN=23e9297f-3cef-4f15-9139-478f747a4749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b4:67:f2:b3:bc:2d:2a:a5:16:eb:97:6c:07:
81:d0:e3:8e:98:78:cd:cc:0a:88:5f:f3:23:69:cc:
df:e7:5d:a7:d5:b2:0e:3b:91:5c:11:cd:af:27:2b:
16:91:a6:fa:f7:5e:39:9a:1c:b0:8a:d6:d5:7b:0c:
e1:31:92:a9:e3:c6:24:e2:38:ca:a6:74:d5:9a:6a:
cf:09:20:93:4a:63:66:a1:94:a4:4a:ea:f0:f9:7b:
6a:77:81:8e:a6:40:20:16:47:83:27:2f:80:61:dc:
d2:cf:9a:7e:3e:2b:30:d2:02:61:ac:da:b7:1d:42:
92:39:63:78:95:1e:77:45:56:c7:9e:4e:0c:3a:8f:
4e:3a:8b:d1:72:60:62:5a:ac:bc:f9:c7:78:c0:99:
3a:4d:e8:d5:a5:86:b6:08:66:f6:8c:e8:c1:65:57:
3d:d2:e5:a5:2f:f8:1d:7b:f7:05:76:6e:c4:8d:6b:
2c:49:5d:28:59:93:97:5e:c6:92:54:de:3f:10:b2:
d3:72:3e:15:ac:0d:ce:73:92:8d:f5:30:97:f7:b8:
1d:97:8e:90:f1:e6:41:db:2b:01:95:d9:11:6b:34:
68:d6:25:c4:c1:2b:2c:7a:32:b2:6b:51:ce:e9:10:
36:49:82:c5:e9:2f:23:87:e1:0e:e8:b0:cc:00:5a:
d0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CF:D7:6B:8A:2F:93:5F:AE:3B:55:A4:86:CC:B2:78:78:6D:26:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ea72dd8-e25c-35dd-994d-c81a614f044e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:32:58:6e:92:55:fc:15:9c:aa:94:74:a3:c7:c2:68:e6:6a:
42:55:fa:7e:be:0c:dd:dd:d3:e9:c4:5c:49:2d:a1:38:76:ba:
3e:8c:ee:bd:f5:77:31:8f:51:68:ed:33:91:1d:ab:d3:f4:e2:
dd:e9:e5:79:74:a5:72:90:24:29:9d:e5:1d:60:0b:69:e0:3b:
36:24:e5:54:ef:03:07:3c:97:42:73:c8:94:d1:db:cb:ae:1b:
7e:8a:c7:89:4f:67:41:28:ed:b3:29:42:b7:d6:28:8d:1b:9c:
01:7e:7e:41:e7:5d:c7:3c:5e:af:eb:19:78:93:ff:54:c1:cd:
b3:73:c8:ca:be:11:cc:45:2b:4d:7e:f9:b8:24:53:b7:64:6b:
13:25:05:10:2b:0d:b6:72:27:f9:de:3d:8f:4b:f6:a4:00:d2:
7f:10:7e:af:dd:38:1a:a8:ad:0e:71:b4:12:30:32:a4:4a:fb:
92:aa:58:b3:c5:0f:76:dc:9f:80:6e:7d:30:b4:32:04:74:a3:
13:13:c8:40:4a:4f:d5:83:0c:21:f4:56:97:fe:c8:fe:80:d0:
ac:b1:00:9c:44:1e:fd:8c:2d:f1:3d:9c:f0:e7:dc:7d:fa:86:
0e:9f:4e:33:44:79:47:ff:c5:d0:fd:9c:ac:56:39:14:c9:b6:
c1:4d:d1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:01 2025 by rpki-client