Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbc3d250-01d9-3b52-8510-66a53acb449e.roa
File: dbc3d250-01d9-3b52-8510-66a53acb449e.roa (raw, json)
Hash identifier: kxkleRTJED12OiA4VSP0aDJAp5pylaQ4IxNkKHCJoNo=
Subject key identifier: D8:71:B6:61:6C:A9:C0:2F:1B:6D:A1:D0:53:51:B4:B8:4C:77:35:68
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848278D4AE6E9930F43940D3500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbc3d250-01d9-3b52-8510-66a53acb449e.roa
Signing time: Tue 10 Dec 2024 00:08:06 +0000
ROA not before: Tue 10 Dec 2024 00:08:06 +0000
ROA not after: Sun 09 Mar 2025 23:08:06 +0000
asID: 13335
IP address blocks: 172.70.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:8d:4a:e6:e9:93:0f:43:94:0d:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 00:08:06 2024 GMT
Not After : Mar 9 23:08:06 2025 GMT
Subject: CN=5b367598-fde6-443d-8739-2959bf370006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2d:3e:c9:6d:3a:cc:51:5f:f9:1a:21:16:16:
26:8e:d9:76:a7:11:9e:6b:12:97:86:6f:dd:1b:5b:
2f:75:a2:1b:c2:dd:b6:09:dc:3a:f0:0e:b7:65:b2:
13:04:94:c1:d9:f1:e6:c5:71:24:7f:f5:e1:ea:13:
88:e5:d2:ff:31:6f:72:05:2d:e8:51:e8:d1:2a:6e:
f7:ba:d6:9d:2c:37:ca:cf:3d:9c:00:2b:6e:3e:73:
d2:17:f3:7e:b2:d6:42:b5:3c:b8:91:71:32:ee:45:
75:60:8f:47:6d:93:d7:9d:73:75:f0:b8:cd:16:2f:
6b:f7:44:aa:0a:76:db:3a:5b:f2:bd:4a:5a:51:e6:
d3:c2:24:7f:e7:93:56:ab:6c:25:55:03:09:8b:42:
3e:be:3f:db:68:c8:29:c2:e0:95:75:60:60:d0:6d:
2c:65:37:e3:16:ec:93:7a:28:55:b2:92:ac:2b:89:
6b:c7:60:42:64:53:3e:07:ef:03:5e:ca:3a:ae:90:
d2:b9:44:43:4a:fd:19:fd:ac:6b:03:29:21:ec:9e:
63:b2:56:78:77:7b:9b:96:2b:3e:a6:3d:09:d8:19:
14:9e:0c:dd:14:04:be:c1:7c:d9:f5:13:20:27:65:
24:c1:64:cd:46:62:fd:2d:8b:df:79:94:ae:b5:31:
0c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:71:B6:61:6C:A9:C0:2F:1B:6D:A1:D0:53:51:B4:B8:4C:77:35:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbc3d250-01d9-3b52-8510-66a53acb449e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:dd:5a:b0:6b:98:c7:8a:51:ab:54:c2:40:30:63:3a:db:1e:
0c:8e:ef:e1:90:eb:da:16:aa:db:ca:43:cc:a9:84:0d:48:6a:
f3:76:39:38:d5:fb:52:d1:e0:61:e9:a8:1c:67:d4:83:b3:83:
e4:59:42:4c:23:5a:94:83:37:ed:fd:3b:4b:2c:31:d4:cc:4f:
82:50:e1:00:10:c7:3d:bf:b6:f4:2b:6b:7a:3c:09:60:77:bc:
46:b1:2a:e3:62:6e:36:fd:55:aa:55:66:a0:54:83:92:67:0e:
c1:d7:dc:ca:f0:99:1e:ce:82:f8:a3:64:36:f6:a9:3b:14:3a:
f9:a0:23:ac:06:b0:c3:99:39:bf:9d:9c:2f:71:a6:9c:bb:92:
27:62:e3:de:c6:c0:9e:29:60:3a:bd:25:0c:77:32:08:cd:e3:
10:25:c9:49:d0:42:9a:57:af:69:8a:d0:7f:ab:df:4c:6d:9f:
17:a5:23:55:2e:35:85:0e:0a:7d:04:50:da:eb:89:f1:63:b2:
1f:d6:38:a5:e0:80:d0:ae:54:5b:ef:21:7a:90:8d:72:60:e4:
b5:86:72:41:8e:0b:97:8f:f0:5d:8a:22:79:f5:a3:50:6e:96:
3d:26:a4:37:e2:69:fc:cf:73:ec:c0:67:70:e7:fa:1f:95:3f:
25:ab:b3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:15:46 2025 by rpki-client