Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/edcf4ba5-9834-38e0-962c-efa04589eaa8.roa
File: edcf4ba5-9834-38e0-962c-efa04589eaa8.roa (raw, json)
Hash identifier: 4f6izlALJ6TQe7clTpJVN+lpsMpDVV1JUSZ+VLX5I7o=
Subject key identifier: E3:CA:52:79:13:F1:B8:4D:81:1D:72:AC:12:AD:20:DD:75:21:7F:A5
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827B024C852D7C08B03CB2320
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/edcf4ba5-9834-38e0-962c-efa04589eaa8.roa
Signing time: Tue 10 Dec 2024 01:18:19 +0000
ROA not before: Tue 10 Dec 2024 01:18:19 +0000
ROA not after: Mon 10 Mar 2025 00:18:19 +0000
asID: 13335
IP address blocks: 172.70.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:b0:24:c8:52:d7:c0:8b:03:cb:23:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:18:19 2024 GMT
Not After : Mar 10 00:18:19 2025 GMT
Subject: CN=7ad70df6-4f7c-4060-b3e3-4909b4247283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:c1:50:8b:8c:dc:e2:34:47:49:cc:6e:52:
bb:e0:bf:ba:c4:e6:d4:ee:e5:ac:f5:f0:91:9c:a9:
48:b1:05:1c:59:90:82:0a:9b:b2:6f:a9:e6:4a:73:
4c:46:67:85:ff:ea:46:ad:f1:a5:e0:12:93:65:07:
c7:f1:32:07:45:b4:49:86:31:5d:1b:e9:5e:3a:f8:
69:8e:77:d2:a7:12:ce:6b:a7:fb:ae:6b:dc:c6:c1:
48:eb:b4:9a:1e:a3:14:ff:7e:45:25:7c:37:82:af:
8f:ac:55:94:e1:92:eb:33:87:9f:62:f3:29:d9:5a:
39:2b:b8:14:15:50:2a:ff:d3:09:c9:ba:03:23:5c:
3c:80:b1:f0:9c:c9:a9:14:33:f3:1f:38:cf:4c:77:
5e:52:e9:3a:cd:d3:95:a6:a1:59:ad:6c:84:80:72:
d2:3d:0a:f6:02:10:42:5c:fb:27:a9:06:bc:79:f4:
ac:d7:f3:20:32:d5:9e:a1:09:f8:b8:c2:da:5e:b9:
34:e1:cf:4d:6a:7f:d4:7b:9f:5b:0c:0f:81:42:49:
fe:cd:b3:70:0c:8c:64:57:cb:87:15:a1:80:6d:28:
a1:db:12:4f:5c:8b:8e:15:3c:ae:e1:8f:b9:ff:d8:
35:26:95:94:51:cd:49:e7:5e:20:1f:3a:65:bd:21:
85:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CA:52:79:13:F1:B8:4D:81:1D:72:AC:12:AD:20:DD:75:21:7F:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/edcf4ba5-9834-38e0-962c-efa04589eaa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:49:68:07:f1:08:18:2f:09:94:92:b8:05:aa:1e:3a:01:bc:
69:5c:16:1d:80:fd:a7:82:8d:6b:9f:9f:8e:5b:b8:fd:63:41:
e6:9b:ab:4d:b7:81:ff:76:a7:12:d1:1f:56:70:e7:8c:94:88:
de:6f:d1:f2:6f:91:20:a4:10:7c:1c:85:eb:69:79:1e:b5:e5:
fc:d8:64:6b:60:d1:98:00:c3:f4:2b:c4:4e:98:5a:a9:45:b3:
1a:de:b7:cc:7a:9f:5c:4f:b1:dc:69:08:9f:de:0a:e7:81:74:
57:83:98:ca:ef:ca:96:34:24:b9:ef:4a:61:9a:08:80:0b:d0:
78:05:09:14:dd:fb:be:6b:d0:51:ea:41:87:71:ea:b8:15:9b:
4e:5a:42:8a:49:60:39:cb:00:55:c5:ec:67:9c:2b:2f:3d:a2:
eb:19:86:c9:cb:9e:42:42:c1:39:79:b4:cb:47:94:66:f6:14:
d4:d9:e7:6a:88:2a:dc:34:52:8b:e3:8a:c4:20:16:9d:5f:ad:
71:39:a6:e0:43:09:0d:ff:47:18:a9:0b:91:2e:52:a8:5e:e3:
80:36:83:e0:43:08:f8:8f:b4:64:d6:7e:1a:07:26:62:3a:b9:
95:55:d7:1e:4c:df:34:95:83:11:19:a8:94:3e:19:e9:34:4f:
2e:fc:ca:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:10:56 2025 by rpki-client