Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/beb7c7c2-7546-3f22-b990-763c99d4d512.roa
File: beb7c7c2-7546-3f22-b990-763c99d4d512.roa (raw, json)
Hash identifier: QoK/JXwD8bNe6I1tfQSQCAzpLJ/HB7ii2yuDnfzsoxo=
Subject key identifier: 21:9F:4E:61:9C:10:F7:B0:76:14:66:30:A8:B3:70:FE:9C:EA:FF:B5
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858483021B344EB2AC881290E5700
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/beb7c7c2-7546-3f22-b990-763c99d4d512.roa
Signing time: Fri 13 Dec 2024 01:53:35 +0000
ROA not before: Fri 13 Dec 2024 01:53:35 +0000
ROA not after: Thu 13 Mar 2025 00:53:35 +0000
asID: 13335
IP address blocks: 172.70.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:21:b3:44:eb:2a:c8:81:29:0e:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 01:53:35 2024 GMT
Not After : Mar 13 00:53:35 2025 GMT
Subject: CN=9f0f17ce-cff4-4e2f-84ed-144543068a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f6:39:80:a0:7b:41:52:1e:0f:3c:fe:20:71:
42:5e:04:c1:ed:34:39:0e:ca:83:80:cb:d3:0e:af:
5b:3b:8a:d2:6b:03:60:ba:4c:61:86:13:f2:ca:99:
6a:ce:ea:b5:77:e8:7f:7d:c1:20:54:be:33:e4:de:
3a:0a:7e:a8:e8:91:46:c0:dd:88:f6:ac:97:17:1c:
9f:18:af:83:75:64:b6:27:85:59:76:9c:2d:27:b4:
71:3b:c9:8d:21:77:f9:fc:01:1f:60:b8:36:e4:db:
03:30:7c:85:6a:64:73:bb:e3:3a:18:14:44:6e:f9:
bc:b2:07:7e:43:9e:5b:bb:69:41:8a:92:5c:be:53:
9a:1e:c9:cd:63:fe:95:0b:ef:0f:ad:76:1b:7f:8a:
d3:1c:35:5e:a9:3b:e7:0b:de:55:a3:61:21:d9:1e:
58:c9:8f:09:22:42:8d:b4:e4:25:58:65:32:e4:c1:
8a:0c:a4:31:d9:c8:6b:2d:19:cd:2c:4a:a6:80:80:
fb:e4:f1:55:42:59:a3:43:96:24:ab:8a:a4:83:5a:
57:0a:54:de:66:d9:58:aa:c2:68:2b:94:26:91:ba:
6a:5a:05:10:4a:79:bc:99:aa:ab:6e:0d:e7:f2:e7:
4d:d6:4c:ed:27:9f:75:23:b1:97:82:19:58:67:50:
dc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9F:4E:61:9C:10:F7:B0:76:14:66:30:A8:B3:70:FE:9C:EA:FF:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/beb7c7c2-7546-3f22-b990-763c99d4d512.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.80.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:9d:ed:db:4b:2d:5c:80:0b:06:a5:8b:77:64:85:c1:90:f6:
68:12:5b:97:bc:ab:a9:88:fd:5f:e9:d3:88:65:df:3f:24:9a:
53:7c:84:db:47:91:00:ea:2c:9f:28:5c:fc:9d:59:a6:e1:1e:
46:7e:6e:81:27:06:cb:1f:0d:ff:eb:28:4f:b7:6a:7f:7a:31:
f6:17:07:39:49:3c:5f:ad:d9:47:72:c1:42:a9:54:9e:a6:77:
44:54:2e:b6:1b:5e:ba:07:29:89:d1:14:68:fb:35:03:86:93:
77:bd:6e:b8:ec:25:d3:8b:90:1b:3c:29:5d:e1:af:da:ab:60:
85:66:d5:97:e9:b7:d5:64:fe:a4:56:d4:b8:ef:b7:62:bd:3c:
40:1f:9a:bd:81:f7:61:ef:f0:73:db:f8:a8:c4:fe:66:e4:64:
a6:fb:2d:33:30:0f:16:fa:fa:a3:76:5c:1a:05:b7:a7:30:11:
ec:06:63:b7:02:1d:6b:d4:18:cd:01:8f:7d:2d:9f:80:8b:4b:
4d:e1:dd:27:cb:a6:d0:3b:1b:2a:91:26:59:d4:4f:5b:11:06:
14:d6:6b:0c:e8:b8:ba:23:35:46:81:79:c9:04:c7:70:e4:d6:
a5:ba:9a:51:c4:7b:e2:c7:82:e9:7e:42:bc:75:f2:80:fa:b6:
3b:71:c3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:28:09 2025 by rpki-client