Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c411adeb-7dc7-3c74-ba66-74a28916c12b.roa
File: c411adeb-7dc7-3c74-ba66-74a28916c12b.roa (raw, json)
Hash identifier: +PR+UaI5ndBCHZz6OjHur5kw2cwn0WbGAuuAAuH9c0M=
Subject key identifier: E3:6A:C8:D4:7B:95:C9:D6:10:D0:28:7B:BB:68:82:7B:E5:AA:45:79
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858483030410F58FA8991938C75E0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c411adeb-7dc7-3c74-ba66-74a28916c12b.roa
Signing time: Fri 13 Dec 2024 02:22:55 +0000
ROA not before: Fri 13 Dec 2024 02:22:55 +0000
ROA not after: Thu 13 Mar 2025 01:22:55 +0000
asID: 13335
IP address blocks: 172.70.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:30:41:0f:58:fa:89:91:93:8c:75:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 02:22:55 2024 GMT
Not After : Mar 13 01:22:55 2025 GMT
Subject: CN=fe3d7537-9eea-48ae-886a-6e29d56b239d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ae:0f:fb:6c:21:fc:99:9d:ca:80:fc:3b:6e:
03:cb:9e:c8:be:02:68:e0:c1:08:af:d1:6e:a0:0d:
c3:86:f0:e3:7d:75:c0:fa:42:b0:74:76:84:56:d4:
b7:eb:cf:de:c9:ef:ea:76:78:80:60:b6:53:43:a4:
52:c2:cf:f0:21:ca:e3:1d:74:58:92:e1:b6:0a:7a:
84:05:44:9e:96:03:c7:35:fd:43:3c:21:b4:3a:d5:
2a:60:26:da:b5:4c:7b:d4:b9:cd:9b:22:1b:df:f1:
4b:d5:b3:8c:04:f2:b9:2d:35:a1:da:f6:16:b2:e3:
41:61:7b:94:2e:72:70:99:fd:06:bf:b0:e1:a3:7b:
46:e3:2a:92:db:ba:0c:99:71:e8:57:e7:5d:84:29:
d1:70:04:67:d5:a4:9c:af:fa:13:36:04:10:02:4e:
4b:06:65:12:50:db:b9:d8:20:21:0f:b3:69:7d:de:
a1:86:93:5c:96:45:0a:94:13:46:c0:64:1f:cf:ab:
99:17:cb:b1:0e:e8:04:c5:d6:b3:15:3a:3c:38:f8:
a3:de:1e:60:02:6e:38:c1:89:49:7d:ef:e2:32:6c:
ec:bd:c1:f0:43:7e:b1:e9:c1:23:d9:49:ec:35:ed:
54:54:c5:5b:ec:07:4a:93:3e:d1:b7:8a:44:6f:93:
06:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6A:C8:D4:7B:95:C9:D6:10:D0:28:7B:BB:68:82:7B:E5:AA:45:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c411adeb-7dc7-3c74-ba66-74a28916c12b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:1c:bf:23:de:1e:45:27:42:68:54:52:1c:fe:f2:e5:d2:26:
57:32:fe:aa:53:48:30:65:b7:0d:53:3d:98:6a:24:ec:38:62:
db:95:3d:30:9b:2e:a3:4f:a2:fc:73:6e:62:1c:51:2c:ca:c7:
06:92:41:4b:27:ca:c6:c7:7e:90:d0:27:26:82:ea:b9:95:91:
fb:18:de:91:a0:09:99:3b:c6:c5:c6:94:85:c9:20:12:82:7d:
9d:c3:83:d4:56:79:bb:e0:d4:7c:8f:70:5d:7f:72:9b:88:65:
aa:38:39:98:f9:7a:e7:95:82:46:25:8d:65:1c:e5:8d:c5:69:
a9:ea:45:67:62:b4:0f:4c:45:90:22:d0:77:d4:1f:6a:fc:13:
4f:2f:a2:83:13:00:f3:96:e3:d0:d2:04:cf:85:94:63:0e:53:
93:22:a7:60:4e:5e:ea:ac:82:62:0c:45:69:a5:5b:a8:7d:e6:
04:66:f6:22:81:76:38:d1:c4:b1:65:5b:a8:c0:85:43:28:e9:
f5:e0:2d:57:8b:cc:71:e6:7e:0b:b7:0e:e4:88:05:4c:8e:2a:
e4:50:c4:66:75:de:b6:a8:93:02:37:11:ca:1a:1e:9d:08:97:
07:fd:fd:a3:f5:6e:7d:59:e4:7d:95:53:ad:fb:dd:b4:1a:06:
06:bf:71:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:12:03 2025 by rpki-client