Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd4c4c9c-37ed-34a8-b22f-e16dbb8a35fd.roa
File: fd4c4c9c-37ed-34a8-b22f-e16dbb8a35fd.roa (raw, json)
Hash identifier: VFTv+CRKo0a8r/5dTWu+aR9NpO7gs76vK42M1bjtQeE=
Subject key identifier: 50:33:24:6A:43:39:0A:A7:65:14:38:B9:91:A1:64:46:D2:D6:AE:8C
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328583BFBCB00B9C6D5FB95A9CC4D00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd4c4c9c-37ed-34a8-b22f-e16dbb8a35fd.roa
Signing time: Fri 19 Nov 2021 05:00:00 +0000
ROA not before: Fri 19 Nov 2021 05:00:00 +0000
ROA not after: Mon 20 Sep 2027 04:00:00 +0000
asID: 13335
IP address blocks: 172.70.216.0/24 maxlen: 24
172.70.217.0/24 maxlen: 24
172.70.218.0/24 maxlen: 24
172.70.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:fb:cb:00:b9:c6:d5:fb:95:a9:cc:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Nov 19 05:00:00 2021 GMT
Not After : Sep 20 04:00:00 2027 GMT
Subject: CN=fec67803-946f-4b16-a48f-c70514521274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4f:2b:66:10:f3:7a:f6:51:88:47:85:e2:e3:
ee:5f:0a:b4:05:62:ce:53:c8:22:10:4a:f6:8d:92:
32:05:d0:2a:61:13:8c:d3:7b:d8:91:db:7f:e7:8d:
a6:19:18:60:4e:69:01:7b:e7:c9:1f:46:d8:c5:9b:
39:37:3e:7e:95:8e:da:90:09:9e:fa:27:91:ac:19:
6b:a4:62:c3:85:ef:45:d2:9d:b5:14:61:c2:4f:f2:
2d:87:94:93:05:3f:42:da:cd:88:9c:91:ac:19:b5:
d7:de:97:64:86:90:53:d2:cc:5c:fc:b2:d5:01:cf:
c2:32:c0:d5:45:59:0d:d8:a2:08:22:0c:3f:4b:1e:
2e:41:c3:2d:c6:3f:90:04:67:0a:bd:b6:2c:32:f4:
48:47:40:49:10:fb:cc:96:8b:f7:d8:65:89:9f:ce:
37:cc:f9:e3:64:a9:bd:b6:f5:88:2e:78:8f:46:65:
5e:15:79:7b:5c:3b:c6:77:40:78:d9:31:f1:7c:31:
0b:4b:81:2f:d0:13:8c:20:a8:8e:ca:43:6b:af:84:
6d:7b:b1:bd:c1:ec:cb:c7:bd:d8:aa:c9:f5:d1:4f:
ba:42:c3:4c:89:be:2c:39:1f:65:ec:44:66:27:e2:
81:9d:23:7e:b2:cf:04:e9:fb:95:0a:1f:3d:05:66:
10:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:33:24:6A:43:39:0A:A7:65:14:38:B9:91:A1:64:46:D2:D6:AE:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd4c4c9c-37ed-34a8-b22f-e16dbb8a35fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:56:bf:ad:e3:9e:93:4b:e6:ce:ee:23:aa:aa:a3:58:73:b7:
31:da:29:39:25:e9:12:09:43:c3:e8:90:c8:22:ea:7a:3e:f6:
a1:c7:68:93:d8:e3:8d:21:77:ef:5d:75:d1:39:c5:9a:68:f1:
aa:4f:63:71:7d:8e:88:29:75:d9:e9:e6:4a:7c:c4:87:85:5c:
0d:2f:5f:99:8c:87:3c:b8:04:d6:1c:03:b9:76:8e:b5:30:81:
b4:90:aa:e2:17:00:03:6d:81:09:61:24:4d:6e:67:fe:68:da:
57:7f:10:82:70:03:67:77:0f:b3:9d:fc:ea:9f:af:fd:b9:69:
3a:ed:20:2c:db:c3:65:40:f7:b9:6e:7f:9f:08:68:76:70:a0:
8e:9f:54:ce:02:b3:39:d4:23:4e:74:74:af:bc:b7:0f:d0:e7:
e5:d4:64:6e:70:5a:2e:b9:d9:c7:2d:c0:91:43:0c:93:10:d9:
20:a4:ce:68:6a:26:7e:a8:3b:ef:d1:28:dd:4d:0f:37:fc:2e:
4c:58:4f:eb:d3:9a:bb:05:25:6c:4a:4c:4b:b1:5e:00:b2:76:
38:2b:f1:94:d6:7b:e0:5d:93:64:d0:b0:49:65:0c:97:3a:53:
03:63:9b:4e:80:bf:55:3a:9b:fd:35:70:71:89:e4:91:80:bb:
f4:1b:35:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:10 2025 by rpki-client