Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cad82e11-bd65-357b-97b0-8c531326d16c.roa
File: cad82e11-bd65-357b-97b0-8c531326d16c.roa (raw, json)
Hash identifier: ZGBrzFBkdDcH1rY67+xHAacgKcyCougLgbZhCCUbbO0=
Subject key identifier: 04:4A:AC:EF:B7:3E:A8:02:E9:8C:BE:71:6F:40:45:2E:3F:FD:91:14
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848302D4D0B82C66E9B3ECA1080
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cad82e11-bd65-357b-97b0-8c531326d16c.roa
Signing time: Fri 13 Dec 2024 02:16:58 +0000
ROA not before: Fri 13 Dec 2024 02:16:58 +0000
ROA not after: Thu 13 Mar 2025 01:16:58 +0000
asID: 13335
IP address blocks: 172.70.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:2d:4d:0b:82:c6:6e:9b:3e:ca:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 02:16:58 2024 GMT
Not After : Mar 13 01:16:58 2025 GMT
Subject: CN=4fbb7cb3-a61e-41d5-adf9-d9f1f85a07a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f9:ea:fe:b9:0f:1c:cc:33:9f:4c:a9:f5:a0:
5b:d0:b5:cb:7c:68:c0:ee:9a:d4:ac:d6:b9:c7:ca:
97:3a:66:52:9f:18:dd:d5:c2:11:65:c0:e7:35:d6:
b7:35:37:51:4b:70:7b:8a:ab:af:7f:1d:9b:23:91:
2d:35:dc:37:ad:98:82:3e:27:6e:b6:0e:33:51:b5:
7d:86:c4:84:58:d0:71:63:4b:7b:01:13:5d:b3:85:
ed:2a:3d:74:29:37:c5:2b:05:e4:06:85:a5:6b:74:
8c:6e:bc:4b:2c:27:82:31:c2:48:cc:8f:e4:66:d1:
27:b7:24:b2:55:54:01:9e:33:fb:03:b5:7d:75:49:
78:71:90:3a:8d:d6:c0:46:24:f3:29:21:6e:fd:78:
aa:b5:aa:af:fa:0c:3b:c4:8a:f2:39:ac:b8:83:e1:
6d:b3:e3:1d:59:ab:4e:60:8c:85:b2:5c:62:13:eb:
e1:a6:cc:a2:85:d6:f7:8b:41:4e:7b:f5:ad:06:14:
07:c2:f5:26:4f:71:1c:31:e8:f6:7a:e2:08:05:29:
21:d8:d0:9d:a4:7d:4f:1e:6c:84:f7:ea:2a:7e:90:
8f:44:24:e2:d0:e7:21:87:50:ee:6b:ff:60:ff:c8:
b0:22:08:d3:4a:b4:5f:a8:bc:d6:72:f6:78:27:b4:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4A:AC:EF:B7:3E:A8:02:E9:8C:BE:71:6F:40:45:2E:3F:FD:91:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cad82e11-bd65-357b-97b0-8c531326d16c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:89:9f:f4:68:be:ed:b2:29:d7:6d:38:78:68:86:0a:c0:f8:
d7:83:4e:59:51:33:69:5d:07:d2:ef:1a:ff:d9:20:7d:92:f2:
66:47:d8:4c:a5:0c:d9:00:29:a6:1f:1e:0c:25:15:9b:8c:12:
a7:58:3f:f4:c8:5b:06:90:22:05:0c:a2:57:d4:94:14:ef:80:
dc:25:36:48:c0:a2:37:be:06:4e:ef:a6:fa:e7:9e:44:48:3e:
a6:2a:62:9a:ae:d7:89:ff:06:88:73:9c:3a:cd:a9:80:8f:6a:
64:fb:9e:8a:a5:b4:d1:10:41:95:da:30:37:ce:f0:ee:63:82:
8f:74:06:a1:3c:a6:33:b4:e9:af:5c:13:59:36:3d:9b:11:15:
cc:48:c4:83:2b:6c:10:72:11:f7:ec:75:01:5d:a8:a7:b7:d2:
f2:e7:67:12:af:fa:2c:04:98:28:3d:83:ab:2f:35:17:a1:e1:
b2:73:48:66:8a:23:41:56:d9:db:00:8b:dd:b4:dd:c9:8b:0d:
9e:82:d9:b3:d5:e1:63:79:1b:f3:1b:f5:e6:16:ba:da:bd:a2:
c4:dc:95:26:e5:12:f0:16:b3:f8:13:7c:f5:af:c5:17:20:4f:
cd:29:9c:0a:ed:8a:4b:64:8e:a5:c1:e4:a1:bb:1d:1b:fb:9a:
b8:c8:f4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:41:46 2025 by rpki-client