Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f63d7787-fffd-3d30-9344-e3bddc802a79.roa
File: f63d7787-fffd-3d30-9344-e3bddc802a79.roa (raw, json)
Hash identifier: QDlaeKa7NifOPhipkYRTLM5py9L3tFEEYvaeR/LcrWc=
Subject key identifier: 13:14:A7:42:EA:63:BE:1F:FF:BA:CB:1B:C3:F2:10:EF:0A:FD:C2:5F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584830229694C2A930CB3A76CF80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f63d7787-fffd-3d30-9344-e3bddc802a79.roa
Signing time: Fri 13 Dec 2024 01:55:23 +0000
ROA not before: Fri 13 Dec 2024 01:55:23 +0000
ROA not after: Thu 13 Mar 2025 00:55:23 +0000
asID: 13335
IP address blocks: 172.70.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:22:96:94:c2:a9:30:cb:3a:76:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 01:55:23 2024 GMT
Not After : Mar 13 00:55:23 2025 GMT
Subject: CN=95f3c6bb-f9dd-4778-9ab8-22e5b56d56fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d0:66:b8:83:8f:6c:e3:54:95:f0:38:25:f3:
e3:82:40:69:51:f6:f2:82:56:e9:88:19:2d:7e:a8:
ba:82:4a:4c:1e:f9:bc:3d:00:f6:ea:83:96:16:34:
7b:ff:88:fd:13:19:40:27:aa:2e:5d:9a:35:30:25:
fb:f2:f5:e8:13:a2:ed:41:bb:5a:4e:78:30:b6:48:
2e:a5:37:e2:0e:ba:81:88:ac:be:9e:4b:0b:69:4d:
93:69:41:d5:43:fe:89:c9:7b:3d:35:92:b7:a9:4d:
99:29:ad:96:25:41:d2:b6:55:f3:7d:fb:73:32:9f:
b0:18:82:98:93:78:d7:6b:9b:a2:d3:2c:a0:c1:01:
08:9c:44:e2:8c:6e:ec:23:b6:96:4f:73:ee:85:d1:
e5:95:f0:0e:28:21:ab:51:46:bd:90:11:2b:eb:8d:
c9:f0:4d:03:d0:24:b4:a4:ce:a6:63:34:e2:04:be:
4a:e2:4f:ea:81:74:ca:f1:8b:ab:8e:ab:c4:9c:22:
d5:6d:00:d0:89:d7:12:7c:87:bc:13:8e:1f:63:e0:
87:b7:cf:ea:91:2b:0a:a5:f8:be:69:f9:e7:c6:d8:
9c:81:dc:f3:e0:6a:20:74:ef:fa:64:dd:a0:7d:1b:
9f:b0:d3:24:14:d9:f4:3a:4e:a2:9c:db:e8:f2:21:
51:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:14:A7:42:EA:63:BE:1F:FF:BA:CB:1B:C3:F2:10:EF:0A:FD:C2:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f63d7787-fffd-3d30-9344-e3bddc802a79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:1a:21:96:30:31:dd:9c:2a:ed:7c:33:19:13:fe:02:6d:33:
a5:35:09:a4:e7:f5:68:3f:8e:b1:73:a2:38:f4:9e:4f:57:21:
56:ae:87:10:a1:4d:04:6d:b1:a4:5f:b6:a9:6d:a8:f6:e6:67:
a2:42:4b:04:dd:35:86:8d:cd:63:f8:99:a2:fc:05:7e:62:70:
da:2d:44:8f:dc:69:40:54:0a:5f:80:f3:dd:b3:60:8c:13:53:
fe:b6:05:ab:98:0d:3b:9a:10:e1:ab:62:43:1e:33:56:80:14:
8c:73:83:c5:ed:2d:ad:0b:9a:6f:47:a4:ab:07:61:2f:9d:aa:
52:f2:6f:6b:3e:ba:ad:cc:dd:15:0c:29:9e:cb:cf:57:4c:0e:
37:1c:90:8c:78:e7:89:31:37:f6:fe:f0:c7:01:a7:ae:21:c7:
97:36:81:1c:e2:91:e9:cc:68:ca:27:8c:f9:45:c2:3c:8c:93:
7b:b4:35:71:23:1e:e6:bd:cd:35:ab:ee:7b:73:ec:67:81:d1:
01:49:56:e5:dd:d1:e3:84:ed:20:ab:1a:f3:c3:96:e4:72:6d:
a6:12:89:20:7d:2e:0e:ce:6b:e2:20:b8:4a:75:68:9b:74:d2:
3a:37:be:a5:22:08:c8:e0:6f:9b:f7:6d:c4:9f:c8:72:b5:8d:
91:ef:ff:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:49:07 2025 by rpki-client