Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb2a4200-7976-329a-8820-412eb82b7286.roa
File: cb2a4200-7976-329a-8820-412eb82b7286.roa (raw, json)
Hash identifier: qhnmTau3lhEBdERuV83lycvUTa+ExlWqkKbuR43sl6I=
Subject key identifier: 3B:B3:0D:8F:1D:55:C5:0F:4B:35:6B:17:7D:55:B5:97:AE:33:20:32
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858483024BED8B1C9B229F25B2180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb2a4200-7976-329a-8820-412eb82b7286.roa
Signing time: Fri 13 Dec 2024 01:59:44 +0000
ROA not before: Fri 13 Dec 2024 01:59:44 +0000
ROA not after: Thu 13 Mar 2025 00:59:44 +0000
asID: 13335
IP address blocks: 172.70.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:24:be:d8:b1:c9:b2:29:f2:5b:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 01:59:44 2024 GMT
Not After : Mar 13 00:59:44 2025 GMT
Subject: CN=3de8c17f-8350-4589-81e8-60823f55d09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a4:1c:5e:3d:60:fb:e1:af:12:43:f2:2e:50:
18:77:8a:61:62:2f:7e:75:c9:3b:7d:f4:ef:d1:88:
26:f5:f4:6f:81:06:ad:b2:ee:9c:2b:aa:8d:8f:b4:
40:21:f2:b6:7a:9d:49:d8:22:6f:46:5e:33:2d:d2:
6f:4d:b3:a4:29:36:86:a5:21:fe:a2:0c:bd:24:81:
0e:e1:81:93:50:1f:fd:dd:e6:7e:73:74:bc:d6:f0:
fa:f4:99:26:88:42:c6:ff:9d:6a:39:49:61:ac:6e:
bf:69:ff:8c:7b:8b:b5:f6:6a:1f:65:5e:80:79:0f:
be:8f:a6:5d:40:ad:5b:4e:26:f4:05:14:0b:51:cd:
d3:e9:1d:80:ed:98:0c:ba:ee:c5:c0:ae:f3:ad:b2:
30:1e:7f:a3:67:df:cc:fa:1b:82:7c:8b:ad:d4:85:
7f:a1:cf:11:a8:fd:ad:2d:dd:b1:bf:ec:0b:c9:0b:
9e:d3:11:76:17:40:e1:5d:87:89:a0:20:d8:01:1f:
da:39:fd:7d:b3:44:75:45:a7:d7:4c:a0:f8:eb:e1:
cd:30:4a:06:ba:b2:fe:ea:10:e5:fc:6e:9c:cc:fd:
60:77:f8:2e:96:f4:eb:a3:58:13:7a:4e:0d:87:e6:
a5:40:35:d5:cf:98:08:cf:b5:17:4a:24:20:cb:0a:
5f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B3:0D:8F:1D:55:C5:0F:4B:35:6B:17:7D:55:B5:97:AE:33:20:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb2a4200-7976-329a-8820-412eb82b7286.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:b8:4d:b2:64:ad:40:d0:c6:42:3e:03:ca:b4:bf:74:12:73:
b1:e6:80:17:a8:39:1e:7f:cf:13:6b:a2:05:41:b5:b6:6a:b5:
da:ed:02:1b:3c:9a:9e:51:5c:ed:e6:5c:3e:d8:6c:20:9b:c1:
13:5c:92:6c:8d:c0:b4:c6:93:27:0f:c7:27:d8:e2:7c:68:6e:
de:e8:d5:d4:4e:53:5b:66:67:58:3f:32:76:bf:be:5f:bb:87:
13:77:fa:2d:1a:d8:d7:74:5c:67:c3:13:af:19:77:9b:1e:7f:
b4:6d:ee:e0:a1:8f:74:ed:69:15:e0:c9:dd:d9:93:f9:b3:08:
40:e3:d7:6d:0e:c0:09:bf:f6:cc:fb:48:e9:2e:df:a9:e7:66:
0b:00:c3:65:e5:c1:4f:e4:ac:c9:30:8a:6c:2e:b5:bb:07:bc:
3b:5c:47:6a:57:f0:76:f4:92:07:0a:4a:a2:fd:fa:5e:c9:6c:
b9:80:24:9f:33:40:3c:3c:b2:c7:e8:3d:38:5d:19:2b:c0:fc:
d9:a1:ca:56:b1:cc:fd:6e:18:76:6a:45:6d:ef:f9:d8:50:50:
13:44:e7:54:bb:e5:db:ff:9a:25:cb:bf:02:5d:77:db:ed:6c:
1a:48:df:fb:81:78:9e:27:c1:05:7b:3a:7e:15:4c:41:fd:e5:
15:0d:c6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:19:14 2025 by rpki-client