Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c0e2604f-e28a-3702-9217-08bd59e7c604.roa
File: c0e2604f-e28a-3702-9217-08bd59e7c604.roa (raw, json)
Hash identifier: oocL3cB8bMzkg+r4DyE7bXlQ+0PHH7MGrmOIFP/tVzM=
Subject key identifier: 5B:3F:23:7B:98:B7:6E:91:34:27:17:7D:19:42:9C:B5:B7:84:15:A7
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584830308AFDBDBCE20390199D40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c0e2604f-e28a-3702-9217-08bd59e7c604.roa
Signing time: Fri 13 Dec 2024 02:23:30 +0000
ROA not before: Fri 13 Dec 2024 02:23:30 +0000
ROA not after: Thu 13 Mar 2025 01:23:30 +0000
asID: 13335
IP address blocks: 172.70.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:30:8a:fd:bd:bc:e2:03:90:19:9d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 02:23:30 2024 GMT
Not After : Mar 13 01:23:30 2025 GMT
Subject: CN=4ef10f45-5ac8-40c8-a6e9-f6865e124905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9f:e3:3f:df:0c:a1:05:8b:0a:35:bc:1f:6f:
11:b9:e9:6e:81:a2:e9:db:cc:4b:9f:36:da:9b:da:
54:df:89:50:e3:83:2c:71:90:9e:9c:27:37:64:48:
8f:09:c0:6a:05:47:44:82:b6:d2:5d:c8:8e:7e:6a:
46:3f:54:18:74:dc:4b:f4:2a:84:db:af:cf:91:bb:
18:f1:cb:d9:fd:4d:fe:32:68:7c:16:60:48:ca:e3:
79:a4:e3:30:9b:84:b9:3f:b3:35:1d:97:74:d9:c7:
2f:db:2f:77:7f:f6:e9:13:ef:45:bb:78:7f:9f:bb:
7c:1d:a4:55:4c:ed:2e:7a:b4:ca:2d:22:97:48:d4:
a9:8f:15:dc:e3:a2:eb:4a:3e:75:73:49:c9:36:bd:
35:d5:ce:ab:be:08:13:4f:78:6b:25:50:2f:99:e7:
02:a3:45:98:9c:54:b5:82:ae:bf:05:53:6b:19:48:
8e:97:78:4c:5c:45:8e:2a:17:5f:46:66:c0:d8:31:
59:8e:ac:86:d8:a6:30:67:01:e7:da:90:60:2d:2c:
b1:d7:2b:e4:b9:cc:42:cd:23:8e:b6:f7:42:b5:5b:
60:5a:c0:48:f6:fa:fc:e0:a9:00:1d:10:cc:06:a1:
a0:5b:ac:e9:f6:21:97:39:f9:b3:ef:2b:ea:dc:ca:
42:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3F:23:7B:98:B7:6E:91:34:27:17:7D:19:42:9C:B5:B7:84:15:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c0e2604f-e28a-3702-9217-08bd59e7c604.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:1b:c8:75:58:15:a8:2d:ca:64:ba:b5:72:28:ae:a0:8a:50:
3f:55:b4:6b:42:d6:ec:6e:c3:27:dd:c1:6e:6f:06:18:6f:b5:
e7:86:d9:3f:c7:33:39:c0:eb:83:f3:4c:cc:5f:f0:bd:cf:24:
cb:5f:52:36:73:ce:56:de:a5:ad:8f:15:d6:e4:ec:94:8a:f3:
b0:e8:eb:e3:7b:28:b5:82:8b:d8:d1:54:c2:cd:60:80:b0:37:
67:c9:ec:50:4c:6a:37:32:f2:5f:09:f8:a4:8a:fa:73:59:d8:
34:c9:83:a4:06:8b:38:04:0b:3c:5b:37:45:36:cb:d7:37:3b:
52:9c:ba:05:7d:94:37:5d:11:c5:de:79:4d:2a:79:b5:ba:3f:
0f:d0:57:2c:7e:d3:97:1f:30:8d:cc:56:22:17:b9:39:a5:6b:
74:3b:43:50:ab:00:1b:29:ed:29:9c:eb:f0:44:98:6a:ee:34:
30:ec:f9:bd:14:14:91:53:d1:48:3e:35:8d:67:03:80:38:5f:
a0:2f:7e:73:29:0b:85:6b:07:cb:78:a2:9e:14:d3:37:2a:94:
44:62:a4:23:21:7a:6e:a9:80:a9:6a:ee:6c:15:dc:06:0d:51:
91:13:ef:1f:d4:1d:bf:d5:0c:c1:0c:74:95:3d:33:18:5a:f2:
1b:4f:85:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:56:36 2025 by rpki-client