Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e8a77b5c-7e2e-3a2b-a3a2-06136f351fb7.roa
File: e8a77b5c-7e2e-3a2b-a3a2-06136f351fb7.roa (raw, json)
Hash identifier: Suc3Xbl56sTdeP85mNeQWhKmM+BVLI7mD9mIU6XbE0Q=
Subject key identifier: 8A:51:30:52:52:A4:71:D1:CB:69:55:03:79:B6:CB:22:D4:F7:00:88
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848302E099F3E10C794EFBFAA00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e8a77b5c-7e2e-3a2b-a3a2-06136f351fb7.roa
Signing time: Fri 13 Dec 2024 02:18:27 +0000
ROA not before: Fri 13 Dec 2024 02:18:27 +0000
ROA not after: Thu 13 Mar 2025 01:18:27 +0000
asID: 13335
IP address blocks: 172.70.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:2e:09:9f:3e:10:c7:94:ef:bf:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 02:18:27 2024 GMT
Not After : Mar 13 01:18:27 2025 GMT
Subject: CN=415c2850-fa8c-4aa8-b146-71a31771ac94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:64:84:73:da:66:af:d5:53:61:72:38:ff:0b:
95:e9:57:e5:2f:c3:a4:13:12:3e:fc:a5:64:f1:3a:
97:6e:a1:e8:c6:d2:a3:d9:9e:66:4e:ee:60:95:dd:
d0:be:90:0c:03:a2:52:f3:4a:85:92:37:21:6a:28:
d9:c9:26:55:98:9c:40:73:f2:34:ea:8c:62:7e:bc:
44:ed:26:69:64:55:f4:e2:1f:10:95:08:f8:48:62:
bb:92:55:f7:e4:bd:a2:6d:cf:0c:72:68:8c:27:d5:
7d:67:31:7c:b7:79:7c:d4:f2:46:cb:65:c2:55:6d:
4f:c6:4c:f5:8d:c3:e9:32:4d:9e:96:be:a6:07:58:
f3:ed:a4:19:10:5d:81:48:50:e6:6a:dd:df:f5:cc:
e4:98:75:ac:6c:26:0a:7d:fe:c6:83:57:e2:3f:6b:
6c:97:53:2d:11:7e:ee:9d:e0:fa:c0:37:66:1e:50:
0f:74:06:eb:6f:7a:ee:c5:02:b2:4f:69:9c:eb:63:
99:ec:a5:90:a2:95:69:8a:2f:e6:5a:f8:c6:cf:2c:
b7:67:49:6d:b5:2c:a7:1b:e1:56:c3:e1:ea:a4:f2:
f3:4d:5a:5a:47:c1:fa:cc:3f:1a:e4:91:29:bc:ff:
92:8d:c8:86:8c:cc:08:c4:b5:d1:7c:7e:9d:d8:54:
6f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:51:30:52:52:A4:71:D1:CB:69:55:03:79:B6:CB:22:D4:F7:00:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e8a77b5c-7e2e-3a2b-a3a2-06136f351fb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:ca:b2:3d:21:2d:89:da:d2:07:aa:51:e0:04:e2:f4:60:eb:
8b:8d:25:b9:bb:1a:27:c2:e2:35:0b:40:61:54:78:93:37:54:
b5:dc:d9:48:de:37:41:49:00:86:31:db:62:d4:6f:5e:2a:77:
d1:58:50:c9:dd:ed:53:e1:4c:46:85:0b:0d:0e:21:16:67:6b:
86:4c:9f:19:2c:43:07:c9:d4:fa:12:c8:c9:9d:70:48:dd:be:
e8:59:86:57:1f:4c:32:32:81:66:79:3d:17:f4:ca:73:ea:6c:
44:66:4d:90:e6:bc:63:21:4f:1f:a3:96:b2:aa:3c:06:1d:f9:
7e:e9:71:a2:69:7c:af:50:85:43:67:fa:05:28:17:5d:7d:8f:
e1:2a:cc:dd:c2:b9:2a:80:f3:15:53:b7:ad:52:da:4b:d5:e0:
80:76:d4:ed:84:ca:ef:fb:b4:1b:cb:3c:12:c9:01:63:66:15:
10:d1:96:8a:16:14:c6:40:87:73:46:9b:f1:98:44:31:b8:41:
bb:59:db:b0:2c:53:d8:10:e6:48:88:46:65:07:4a:15:30:83:
28:77:c9:71:eb:4a:a6:ef:aa:b9:98:a5:7b:3c:33:ff:76:c9:
e6:d0:e7:48:0c:73:d9:e0:6b:f9:8e:dc:a3:70:5f:ee:76:a6:
1f:f7:9c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:35 2025 by rpki-client