Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c117cc29-9832-3eb6-9424-93416b2c8bbe.roa
File: c117cc29-9832-3eb6-9424-93416b2c8bbe.roa (raw, json)
Hash identifier: z4SLBaYpeYchu2ay2PZJ0iYzCZ9eRIVHVteWASuZqc8=
Subject key identifier: 67:64:2F:79:B3:E5:2D:FB:89:16:21:B4:85:3D:33:44:F1:58:E9:A3
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848302DE4DAC3AD56E24432C080
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c117cc29-9832-3eb6-9424-93416b2c8bbe.roa
Signing time: Fri 13 Dec 2024 02:18:10 +0000
ROA not before: Fri 13 Dec 2024 02:18:10 +0000
ROA not after: Thu 13 Mar 2025 01:18:10 +0000
asID: 13335
IP address blocks: 172.70.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:2d:e4:da:c3:ad:56:e2:44:32:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 02:18:10 2024 GMT
Not After : Mar 13 01:18:10 2025 GMT
Subject: CN=495689f2-b563-442d-8e2b-6a64f2bc9aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:73:30:42:f6:53:2d:4b:39:e9:46:31:e5:bc:
bc:61:8b:e4:e2:68:2b:57:62:29:8e:87:89:28:ef:
c2:e6:ef:f1:45:87:35:3e:23:02:6b:1a:eb:49:ab:
78:5c:93:f8:d5:ef:e7:13:c5:8f:f0:fb:80:51:d1:
18:18:65:13:f6:30:1e:ae:e5:b4:82:30:1e:2e:2d:
b6:2d:0c:f7:76:55:c7:b9:d5:4b:82:ac:93:a8:b9:
41:6d:dd:d2:1c:e5:8b:87:55:25:c8:27:dd:21:74:
01:f3:20:91:81:9d:1c:a5:d7:5b:5e:e3:43:f7:26:
d1:ad:86:b7:e7:d8:b5:ab:8c:8b:de:b5:d0:f7:1b:
26:2c:dc:4f:f7:50:3d:ca:f9:40:ee:b7:22:d2:97:
3a:4b:27:93:b4:bf:2f:40:25:ee:73:a2:69:ee:f1:
b4:55:a4:1d:e3:6f:83:53:0c:54:04:9d:07:a1:3f:
00:ee:73:19:c9:30:8d:df:3c:4d:b9:7e:75:25:1b:
b8:06:70:65:a7:ce:27:88:22:79:c6:bf:67:0e:1f:
db:64:f4:06:74:c2:15:bd:25:75:d8:a1:e9:54:71:
08:6d:62:21:6a:bf:a8:f8:c2:f8:c2:57:4d:a3:d6:
f2:c9:3e:dd:58:da:a4:9a:f1:93:fe:7d:2b:f5:e9:
6a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:64:2F:79:B3:E5:2D:FB:89:16:21:B4:85:3D:33:44:F1:58:E9:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c117cc29-9832-3eb6-9424-93416b2c8bbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:a6:93:71:93:63:64:6d:e3:07:06:ff:d6:73:a4:1b:dd:ea:
a6:18:be:82:9c:0c:48:fd:27:95:42:2a:cd:67:10:e9:e0:c4:
92:2c:20:a3:7c:d3:6e:66:01:91:b3:68:78:eb:37:32:99:b9:
49:2f:b5:fc:79:1c:56:21:38:4c:db:9f:d0:5f:a2:cd:93:ce:
06:d8:4c:4a:0c:2c:07:64:17:ef:29:34:5e:41:df:d4:f2:68:
fa:c4:df:e1:d8:bc:9d:6c:83:a1:43:28:06:3a:74:d2:06:47:
41:82:98:e8:67:76:e6:7e:c2:b2:5f:18:76:77:8d:8c:f8:b9:
ff:11:f5:5d:8c:c9:8c:29:fd:c7:0d:a8:99:8b:74:39:34:62:
b9:8a:b5:1b:11:91:1e:2b:99:ed:8a:2e:47:d8:10:07:49:df:
0b:6f:72:5c:8e:0d:cf:70:27:fd:48:42:79:9c:95:0c:fa:47:
62:50:63:bb:22:14:51:02:a8:a8:5d:f2:62:b7:52:22:27:1c:
65:43:98:3e:d3:3c:05:8f:50:ea:b2:d6:a2:6c:1b:16:85:2e:
11:f1:01:dc:c3:b9:27:f4:b8:80:f9:a8:c2:2c:21:9b:8e:68:
fa:1b:a2:26:f9:bb:a8:01:c6:eb:6e:ae:97:57:22:02:ea:81:
e2:1d:ff:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:35:57 2025 by rpki-client