Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f9e68cbd-1e77-3abe-a86a-ada579c2a056.roa
File: f9e68cbd-1e77-3abe-a86a-ada579c2a056.roa (raw, json)
Hash identifier: 3uDZC80T3/S1AMpB7iODZUaTf057U/wOMYFD2TGcDGA=
Subject key identifier: 7E:64:89:18:ED:35:04:22:D8:CD:0B:43:F1:CA:1C:E6:96:2A:0E:57
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584828047159B2B4E0B90249E300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f9e68cbd-1e77-3abe-a86a-ada579c2a056.roa
Signing time: Tue 10 Dec 2024 04:08:10 +0000
ROA not before: Tue 10 Dec 2024 04:08:10 +0000
ROA not after: Mon 10 Mar 2025 03:08:10 +0000
asID: 13335
IP address blocks: 172.70.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:04:71:59:b2:b4:e0:b9:02:49:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 04:08:10 2024 GMT
Not After : Mar 10 03:08:10 2025 GMT
Subject: CN=c99de875-2cfa-4605-a542-5da8513b0893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:0a:d4:56:f7:03:08:f1:2c:a7:41:37:ae:
23:34:58:2f:06:ba:ba:64:94:b9:03:42:3e:61:f1:
db:b4:4e:75:99:4c:82:7e:37:f8:89:99:f8:97:69:
24:1e:94:33:1a:a8:6c:ae:c2:7d:52:09:fe:a4:34:
0d:d6:f4:3d:9e:2e:fc:ae:98:22:62:02:dd:48:30:
0a:72:28:b6:d5:b9:7d:18:74:d5:6d:2c:d1:1f:56:
b0:6e:7b:9e:d6:fd:67:50:79:ae:86:37:04:57:88:
a9:1a:16:c4:1e:0b:85:e1:a4:00:90:0d:e6:45:67:
dd:4d:59:f0:e8:d4:46:93:98:8b:4e:71:be:35:62:
03:73:01:b7:ce:b8:d2:d2:4e:a7:e0:34:f9:08:2c:
af:3d:d4:52:8e:91:a3:18:ff:91:9a:ed:3f:6f:58:
a5:92:5b:47:d0:58:d6:d3:74:37:cd:cc:35:ef:c2:
c4:d8:68:13:c6:72:7b:75:fc:dd:2d:bc:d3:b6:0a:
55:18:16:25:30:f4:e8:36:5b:ce:a2:2c:88:3f:21:
ba:ab:20:9d:3b:e0:cf:93:25:b4:f8:7f:c4:29:9c:
d7:50:fa:6e:62:66:b7:4d:e6:59:4b:75:7d:0e:6b:
f0:58:00:47:70:a5:44:94:86:4b:56:83:80:9d:ee:
ff:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:64:89:18:ED:35:04:22:D8:CD:0B:43:F1:CA:1C:E6:96:2A:0E:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f9e68cbd-1e77-3abe-a86a-ada579c2a056.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:4c:e5:30:8c:b0:f6:e3:65:3d:cc:4f:3b:83:ec:19:d2:1e:
f7:76:c2:c4:e7:59:a3:17:da:9c:ae:f2:bd:a5:8d:1a:75:9b:
31:8c:d1:01:c3:02:c0:51:4c:c3:6d:c5:d6:c8:4d:4d:db:79:
87:55:23:3b:f9:31:21:06:32:0e:a2:80:01:53:cc:69:5e:51:
44:53:fc:10:90:45:c1:f4:94:f7:4a:8e:db:fb:30:7d:65:dd:
51:ae:24:3e:f7:b0:09:3a:a4:48:f6:1e:5b:30:b4:21:00:05:
bf:73:a5:7b:5f:5c:60:8e:8a:41:b2:58:8e:24:40:eb:6e:b7:
8f:fe:76:62:aa:a3:ab:d7:c9:e7:89:0c:8b:fd:b2:13:62:61:
f9:0f:92:73:7f:84:c0:80:dd:0a:96:17:21:a5:19:00:a8:8a:
85:02:3e:ae:b8:2e:28:39:3f:28:6c:6d:e3:12:8d:51:3f:f8:
fe:8a:67:66:ad:2c:f4:d7:b7:e8:71:33:8d:9e:fd:d0:84:e9:
02:3f:57:1e:8e:76:ec:b3:c6:64:0c:21:e7:c4:ef:b6:ef:71:
f6:c2:f9:14:98:34:a8:5e:8a:86:25:d7:3c:93:ae:d0:e8:25:
f9:b6:fc:88:97:98:be:b8:18:ef:cb:7a:34:a5:f3:2a:05:8e:
16:31:2f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:42:54 2025 by rpki-client