Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a67b845b-923e-3bcb-95a6-60afc388cfed.roa
File: a67b845b-923e-3bcb-95a6-60afc388cfed.roa (raw, json)
Hash identifier: n9FTa1InL4l/DeWh1KHs/jUBkcqMT5JrOGnG+fn7B+A=
Subject key identifier: 66:60:0E:7A:08:33:CE:58:4E:A6:3B:1F:9C:C4:A8:DB:F7:0A:ED:F1
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827B07C06E1B44D252B8F4590
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a67b845b-923e-3bcb-95a6-60afc388cfed.roa
Signing time: Tue 10 Dec 2024 01:19:00 +0000
ROA not before: Tue 10 Dec 2024 01:19:00 +0000
ROA not after: Mon 10 Mar 2025 00:19:00 +0000
asID: 13335
IP address blocks: 172.70.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:b0:7c:06:e1:b4:4d:25:2b:8f:45:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:19:00 2024 GMT
Not After : Mar 10 00:19:00 2025 GMT
Subject: CN=fafb8c36-9bbc-4fbd-a32d-4c637b4273fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:29:10:9c:c3:3e:48:93:36:50:bf:f7:83:ac:
e0:89:3d:7b:43:3e:6e:81:5f:6d:52:ba:9e:cd:19:
12:9a:52:6c:a0:3d:2a:b2:97:ee:a0:41:7b:9a:8f:
8a:28:9c:72:9b:dd:fc:a0:66:84:fe:74:f7:47:ba:
c0:5c:1e:9a:df:72:78:c5:34:6d:82:ca:cf:62:df:
dd:19:ee:c0:9b:20:aa:5d:63:77:1b:d0:8f:00:94:
5d:34:6f:6d:b5:3f:a2:02:1b:3f:f9:94:18:f3:33:
5d:ab:6f:c8:76:da:23:47:09:ec:5f:a2:94:4a:6e:
14:b5:62:ca:28:05:44:f2:34:54:92:7c:2f:5b:43:
11:5a:55:3f:05:5a:88:34:85:ca:5b:d6:d8:f2:e1:
ed:c1:68:8d:0c:65:01:3b:fc:ba:96:ac:e4:2b:0e:
36:47:c5:67:de:e1:a3:d0:b8:c9:b7:65:2b:8a:56:
25:b8:ba:c0:91:90:dd:61:5b:b3:6f:47:e3:82:96:
18:45:13:68:4b:4d:73:c2:ff:2b:84:90:6b:5c:32:
1d:0c:da:3d:93:d0:e7:97:6c:7f:11:ea:19:6d:9d:
ba:cc:d2:1a:20:ee:79:a8:04:71:44:ab:33:0f:1c:
de:ac:83:61:13:d9:20:d5:8a:20:a0:be:be:f8:84:
e2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:60:0E:7A:08:33:CE:58:4E:A6:3B:1F:9C:C4:A8:DB:F7:0A:ED:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a67b845b-923e-3bcb-95a6-60afc388cfed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:63:5a:73:43:70:d1:3b:d4:9c:3c:69:e0:45:22:34:d2:35:
59:ce:9a:a6:06:5f:8b:72:f9:ca:20:56:1b:f8:de:00:26:96:
77:7c:87:19:44:5d:ef:bd:12:a0:ca:91:ba:bd:39:fb:d6:87:
a4:a9:b8:27:b3:45:ed:7b:92:b0:2f:90:8f:6c:68:19:6a:d2:
4f:2c:d3:7d:5b:c6:3a:3c:b8:3c:79:3c:6a:2c:6a:c5:13:9a:
80:72:31:34:88:7b:66:bd:5b:a0:ad:f9:0a:a3:1e:fc:3e:12:
ec:4d:ac:21:8a:4b:48:03:a9:ab:4f:29:fe:5a:5e:96:fd:29:
47:43:18:0a:8d:f0:e6:5c:58:91:17:3d:15:58:a1:2b:9c:c4:
23:32:ea:04:7a:64:74:82:25:f2:08:62:91:88:92:88:0f:3c:
c5:b0:a7:3f:2f:8e:1b:49:18:cb:86:e5:4f:38:92:49:5d:8e:
65:a2:30:52:cb:59:06:f0:08:e7:d7:01:16:3f:1d:3d:04:a8:
da:77:d6:29:82:ac:a9:d3:b4:21:d4:35:b2:a5:f2:83:d2:97:
e2:06:aa:27:41:51:84:41:76:5b:f7:95:91:ad:25:aa:dc:fa:
c0:77:16:da:1e:b5:7c:00:f6:fd:c9:e3:cf:f7:be:5b:bd:66:
df:f9:26:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:11:22 2025 by rpki-client