Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b24dc92a-cc8c-3cf9-9297-c0bed1db2414.roa
File: b24dc92a-cc8c-3cf9-9297-c0bed1db2414.roa (raw, json)
Hash identifier: W99xfs/CLbEEWALj2mIBI2ZqNqymlzPr1YB+4MH9b6Y=
Subject key identifier: F9:B1:6F:80:3F:DA:81:EA:CF:4B:BC:92:EB:87:4C:B6:CF:00:8D:0C
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858483022A7E8C0336274BFF80580
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b24dc92a-cc8c-3cf9-9297-c0bed1db2414.roa
Signing time: Fri 13 Dec 2024 01:55:31 +0000
ROA not before: Fri 13 Dec 2024 01:55:31 +0000
ROA not after: Thu 13 Mar 2025 00:55:31 +0000
asID: 13335
IP address blocks: 172.70.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:22:a7:e8:c0:33:62:74:bf:f8:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 01:55:31 2024 GMT
Not After : Mar 13 00:55:31 2025 GMT
Subject: CN=ecabd301-1a4b-4a62-847c-00fb91badbd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:91:ca:66:be:2f:59:54:52:73:82:f0:c4:2c:
5c:20:3a:2f:7f:23:4c:7d:23:2c:e5:a2:46:57:ee:
42:ac:51:67:cb:15:d3:a9:a5:d5:c3:84:76:50:b5:
97:3d:12:ac:c0:96:1f:29:48:a7:8e:c9:a0:f0:b0:
a3:a6:ac:d4:c8:e5:78:23:a6:17:a6:77:6a:f7:fe:
cd:a8:77:9e:70:b5:49:f1:56:a8:e8:5a:cb:78:15:
16:0e:b6:52:c1:0a:ed:60:91:4f:a1:a7:41:2f:2f:
12:4e:5f:f5:77:72:2c:b7:e5:86:84:8f:ad:8d:d1:
28:ff:95:0f:b8:0a:49:bd:25:02:17:7d:f3:49:7b:
1f:ea:0f:40:4a:68:4d:d8:3f:8d:1d:ea:f0:4f:ca:
c7:19:eb:e8:12:7f:f6:ce:14:22:69:7d:e5:0c:2f:
40:f9:b5:8f:b7:7b:57:6d:88:c1:bd:a9:4e:fc:f4:
5d:ce:be:22:9c:19:cb:ad:24:44:ec:19:bd:45:68:
9e:6c:ff:88:72:52:6d:21:48:7e:0a:71:bd:95:3d:
a7:90:aa:61:56:70:67:d5:a3:e2:a0:da:70:16:e1:
60:09:74:af:59:59:22:6b:41:97:54:1a:85:24:0a:
4b:6e:63:a2:04:54:96:b3:0d:27:1b:42:44:8d:69:
19:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B1:6F:80:3F:DA:81:EA:CF:4B:BC:92:EB:87:4C:B6:CF:00:8D:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b24dc92a-cc8c-3cf9-9297-c0bed1db2414.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.162.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:62:d1:52:d9:35:d2:f9:c3:cb:22:d0:4c:62:b5:55:7b:70:
7b:ea:e5:29:30:10:11:a7:9e:43:f9:99:99:f4:9f:37:43:97:
f1:7a:26:c2:c6:54:93:f0:9d:72:60:a1:39:90:7c:89:4a:3b:
8a:c4:45:da:8f:b4:e9:c9:75:b2:c8:50:cc:97:69:5f:67:7e:
41:21:ff:ac:bb:3b:08:44:43:5a:ba:4d:e0:aa:09:2e:b0:13:
62:72:32:ec:6b:a9:8d:8c:2c:2e:30:96:ba:9e:f3:0e:d0:02:
c1:40:82:4e:01:b8:7c:c1:0c:05:e3:79:5c:21:52:6c:6e:77:
bd:a9:a4:ba:e0:eb:ca:0a:e7:4c:8d:c7:57:77:b0:fa:0f:60:
9b:98:b1:ac:af:02:52:de:d3:6f:63:a8:01:d5:01:74:0e:a9:
b0:27:e7:84:75:4e:ed:f3:30:a2:e0:3d:b7:8b:6a:ff:3c:87:
56:08:7e:1c:69:bf:cd:b6:13:86:f0:06:f5:60:3e:41:07:7d:
b2:ea:78:58:40:17:dc:81:1b:ca:97:7a:6a:87:b8:04:c6:9d:
46:4c:c8:67:32:fd:f2:dd:ef:c6:27:e0:cd:e5:36:25:51:8d:
b6:87:b3:88:2f:e1:e3:00:c0:80:17:17:d5:0b:14:cb:a8:1b:
03:56:c5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:49:02 2025 by rpki-client