Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f401d20b-b849-33ad-af73-dd3bd8f91b11.roa
File: f401d20b-b849-33ad-af73-dd3bd8f91b11.roa (raw, json)
Hash identifier: TVzaaEK4JA9S+UBl81vgIF+AKkjS+7lZUXcxnOnaBqo=
Subject key identifier: 9F:75:43:95:3E:5F:11:C6:8B:6F:85:22:01:53:DD:6B:95:5F:C1:30
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858483022B92FBF650EFE3660D840
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f401d20b-b849-33ad-af73-dd3bd8f91b11.roa
Signing time: Fri 13 Dec 2024 01:55:39 +0000
ROA not before: Fri 13 Dec 2024 01:55:39 +0000
ROA not after: Thu 13 Mar 2025 00:55:39 +0000
asID: 13335
IP address blocks: 172.70.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:22:b9:2f:bf:65:0e:fe:36:60:d8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 01:55:39 2024 GMT
Not After : Mar 13 00:55:39 2025 GMT
Subject: CN=de7897dd-68cd-4515-8715-dda9c446caba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:62:1d:f3:d9:44:2d:1b:a5:05:84:f9:62:39:
07:48:be:eb:31:9d:a0:7c:1d:0f:5f:0f:ca:cc:2b:
83:eb:9d:5c:62:a5:68:12:12:fc:0c:10:67:19:8e:
3a:05:30:c2:72:b7:a1:52:a9:ce:45:3b:24:8e:d2:
51:48:30:6e:13:db:24:d7:de:33:71:41:0c:c3:ad:
b2:b9:5c:88:c5:3f:fa:0d:58:6b:ee:3c:38:8e:eb:
65:6e:50:48:54:b1:75:b9:fe:c7:c5:81:6f:6a:7c:
17:c2:9f:6a:1d:a4:e4:30:e4:f4:35:31:39:e8:18:
1d:1d:15:cb:a5:6f:d2:d9:75:21:c8:0a:dc:d6:21:
5d:c1:91:fb:ec:a5:7a:fa:38:ba:c8:e4:8b:09:d5:
35:f5:59:ca:da:d9:06:1b:80:bb:9f:a3:fe:f8:c2:
d2:e3:12:13:74:85:05:64:d9:76:68:74:9d:9c:d4:
b2:1b:ab:11:ad:78:f3:ba:e9:9a:da:b4:ba:b1:65:
dc:82:84:77:d6:31:b5:f3:65:9c:17:a6:55:37:ce:
6d:11:96:6d:18:b5:ea:bd:19:7d:58:eb:56:38:94:
d7:da:31:06:ec:5e:2a:1d:03:d2:c8:2c:b9:5e:fd:
f9:70:f3:af:88:32:97:cf:b0:6b:31:fc:be:eb:38:
1e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:75:43:95:3E:5F:11:C6:8B:6F:85:22:01:53:DD:6B:95:5F:C1:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f401d20b-b849-33ad-af73-dd3bd8f91b11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.163.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:1d:d0:3c:ae:3b:31:96:d7:2f:ec:f5:4c:e1:8d:8b:4b:00:
eb:ce:0a:65:81:c4:21:14:f7:9b:86:1b:57:15:fd:8f:9f:fe:
f5:2b:4a:f7:0c:2d:3c:cc:3b:d8:54:ee:35:0e:ad:ca:4c:d3:
3e:2e:ee:d4:b1:18:9a:5b:95:d1:9b:1d:b2:04:62:6d:f9:cf:
1a:3e:fa:24:68:8c:17:90:c5:f5:3c:bf:b4:d9:65:8f:75:17:
58:e5:d1:00:41:c1:b1:d7:ec:da:49:83:a5:bb:57:3e:a6:75:
0a:57:81:95:ab:dd:14:a1:d7:3d:f3:d3:7c:aa:93:e8:87:d0:
59:c6:21:ab:73:56:4c:61:e3:fc:5b:31:98:b0:d8:ff:91:4a:
dc:75:90:79:c2:05:9f:4b:d8:b0:60:0a:8e:db:be:7f:ee:d7:
68:1f:f3:72:45:8b:48:b7:3b:68:1e:a2:87:b8:f2:0d:57:40:
e2:64:d5:97:b3:6e:53:91:01:a0:a6:94:4d:e2:cc:53:83:81:
1f:a9:f0:84:8b:1c:fe:68:44:8c:85:b0:4a:dc:7d:ee:50:a7:
56:ac:5a:ce:c3:ea:c1:bd:6e:dd:74:82:43:5b:d5:45:c9:e4:
6b:6f:bf:55:13:82:0e:76:2d:eb:c6:e9:61:01:d4:58:46:cd:
0f:bf:ce:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:58:21 2025 by rpki-client