Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ba4219e0-b418-3559-8238-61913c7c42c8.roa
File: ba4219e0-b418-3559-8238-61913c7c42c8.roa (raw, json)
Hash identifier: NH24S+Ii5wS2AV44Fdzm/112oloxd5/894IrmxLVuKw=
Subject key identifier: 96:A2:DC:60:3C:2A:28:54:4B:EA:F5:2C:D7:34:BF:89:E0:0C:C9:E6
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858483024283CDC438DBAD05F9A80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ba4219e0-b418-3559-8238-61913c7c42c8.roa
Signing time: Fri 13 Dec 2024 01:58:32 +0000
ROA not before: Fri 13 Dec 2024 01:58:32 +0000
ROA not after: Thu 13 Mar 2025 00:58:32 +0000
asID: 13335
IP address blocks: 172.70.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:24:28:3c:dc:43:8d:ba:d0:5f:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 01:58:32 2024 GMT
Not After : Mar 13 00:58:32 2025 GMT
Subject: CN=9c8d693c-b1ef-41ce-a4f3-9d91951f97f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:21:1d:32:98:99:97:d1:fc:25:16:53:3c:58:
0f:03:a4:27:c1:0c:f5:fa:5d:8c:75:53:11:eb:76:
6b:f4:ab:9e:79:51:dc:a5:4e:5e:f8:6e:6e:c4:24:
e2:23:7b:e5:e5:da:76:f6:b1:2b:e2:5c:95:c5:0e:
b7:cd:be:4e:3d:b7:20:11:ae:2a:20:48:2d:69:96:
16:ab:36:24:ac:b5:ba:63:e5:02:34:fc:eb:f4:0c:
3d:14:09:e9:3c:28:cd:6b:58:10:03:80:ce:40:60:
22:91:ee:05:34:0d:db:c8:ad:e8:24:fa:31:b9:43:
8c:bb:03:63:0b:cb:1a:c5:63:2e:53:51:01:19:b3:
be:31:f0:5c:fb:3c:0c:b9:7d:1f:62:55:b8:47:10:
30:94:4f:85:de:67:3c:6b:36:2c:77:91:59:4d:5f:
f9:6d:b8:89:c7:c4:ff:3f:7e:d5:42:ae:61:41:b0:
f2:5d:e1:b0:9c:9a:b2:be:b1:e7:32:b6:e7:2e:f1:
b5:34:90:4a:48:d0:c8:ea:b8:b1:9c:bc:60:49:d8:
25:54:36:f3:8e:2e:e0:12:54:fe:fa:89:5b:b8:8d:
ec:e6:e4:2a:de:75:6f:91:c7:69:15:bf:60:2d:c4:
92:45:56:84:a1:ab:07:04:dd:55:1e:d3:92:90:bc:
f7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A2:DC:60:3C:2A:28:54:4B:EA:F5:2C:D7:34:BF:89:E0:0C:C9:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ba4219e0-b418-3559-8238-61913c7c42c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:c6:fd:85:f6:23:51:8b:bd:59:3f:95:08:13:29:48:bd:08:
c0:28:39:d7:7d:6d:f9:3e:1f:7c:a4:e9:1d:02:6a:60:1c:f9:
27:25:ee:3c:73:db:00:12:12:9d:97:6c:f0:01:f8:ac:8b:b8:
01:95:4f:2a:b1:0d:a4:68:e2:c6:0f:ac:96:05:b3:84:e5:62:
93:87:80:7e:d4:f8:58:a9:ad:d5:d0:4b:4a:38:4e:cd:ba:8c:
4f:71:00:89:cc:f4:62:c1:52:f0:69:a9:27:6d:f1:36:6a:a0:
52:7a:79:3f:3a:a6:02:bc:a3:6e:2b:84:0e:8d:a3:a4:95:95:
ad:07:19:31:37:ab:75:1c:7a:63:0a:4a:0d:37:7a:58:cd:b0:
d7:a8:b5:2e:db:c1:dd:b8:fc:58:21:b7:8e:ef:a9:21:9b:af:
a6:b8:12:8d:3f:da:64:c5:82:58:7e:90:95:51:d6:bd:70:0d:
85:e1:b3:d8:08:da:aa:9b:24:b7:1e:13:06:26:90:df:98:6b:
0a:67:c0:f2:1c:a2:ba:89:46:a8:86:59:80:32:72:c7:6f:9f:
da:fc:ff:63:bf:e1:b6:51:a6:2b:89:c0:a7:a6:93:70:8a:a6:
07:00:55:1a:9b:1b:97:a0:be:6b:58:27:7c:a7:44:4d:e2:7b:
c1:27:3f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:13:50 2025 by rpki-client