Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/13212b3f-38ca-3114-af9b-4d50d22a06ea.roa
File: 13212b3f-38ca-3114-af9b-4d50d22a06ea.roa (raw, json)
Hash identifier: 4kUxq4oTNCG6lN72Kz6na95uAocIx6SZe7KHPvlt9fs=
Subject key identifier: 77:D1:52:C7:82:3A:25:1C:59:CC:77:59:AA:65:DF:22:E8:74:E8:C2
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584910E16D6E8965BA2105593D40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/13212b3f-38ca-3114-af9b-4d50d22a06ea.roa
Signing time: Mon 03 Mar 2025 14:00:53 +0000
ROA not before: Mon 03 Mar 2025 14:00:53 +0000
ROA not after: Sun 01 Jun 2025 13:00:53 +0000
asID: 13335
IP address blocks: 172.70.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:e1:6d:6e:89:65:ba:21:05:59:3d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 14:00:53 2025 GMT
Not After : Jun 1 13:00:53 2025 GMT
Subject: CN=e267e364-962b-4eb0-b439-36ee4ff5bec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ab:76:a7:3b:61:b3:a8:01:06:17:09:94:09:
cc:41:c9:01:e6:72:80:18:ad:e0:44:54:e8:1c:62:
80:5d:ca:5d:7b:60:d4:69:05:ae:33:58:91:44:e2:
64:1f:43:b5:95:43:02:d6:a5:c8:64:d2:7b:01:b7:
25:89:f4:7f:ea:e0:d7:b0:65:0f:79:33:ac:a7:4e:
b7:39:de:25:dd:ca:58:96:78:23:85:34:8a:f9:4d:
1e:33:88:20:83:f5:d0:93:7f:70:f2:3b:a0:12:c9:
ae:c6:f1:c4:55:7f:51:f0:91:05:1d:97:e9:88:1f:
81:98:5c:c6:1c:ce:63:25:2d:38:70:36:00:de:4c:
d4:22:14:fc:32:02:63:fc:3e:b5:dc:1a:3a:55:95:
2d:a8:d2:b4:be:a8:e4:a6:37:ce:08:65:28:a7:c4:
05:ec:5f:9a:46:e3:c0:0f:24:40:6b:91:eb:6d:cc:
d9:77:a5:9d:f3:78:50:ad:b3:73:b8:54:1c:58:6c:
47:86:8a:87:0b:73:3f:27:10:21:d6:ca:46:b8:63:
2b:aa:31:cf:4d:8c:98:19:35:45:25:b4:bb:b9:f6:
3d:cc:49:e2:31:84:33:3c:58:7d:ac:0a:18:49:5b:
07:b9:7c:d0:10:a4:4e:4a:21:5e:6a:02:c5:40:ff:
29:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D1:52:C7:82:3A:25:1C:59:CC:77:59:AA:65:DF:22:E8:74:E8:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/13212b3f-38ca-3114-af9b-4d50d22a06ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:88:ec:6b:0d:92:ad:c8:bc:b4:9b:24:06:2b:4d:80:d2:4e:
9b:67:4a:5b:e0:fa:46:74:72:75:29:b6:42:00:d3:a0:39:dc:
9f:6a:e1:4e:75:d1:1b:d2:af:bc:a8:02:58:93:09:84:a3:eb:
16:d1:ce:da:15:44:a4:94:db:dd:39:ed:f4:9c:c0:32:24:10:
50:99:f6:0f:63:59:0d:75:8f:9d:0e:8d:7c:de:f1:3b:7a:c0:
1a:f5:35:03:e6:e0:5d:80:15:01:ea:33:1b:c2:41:30:34:18:
81:76:a3:fd:b1:a7:0b:46:7d:a1:6b:27:46:97:f0:14:00:9e:
ab:95:44:b3:d5:75:b7:e1:20:d1:56:c8:cb:60:2b:7c:b8:6b:
e9:a5:da:8b:51:3a:1f:ad:72:50:44:ce:55:77:b2:c5:e2:86:
a8:96:87:7e:3d:f7:5b:ea:81:ba:2b:a4:67:d8:e1:b1:56:18:
1b:a9:8d:c2:dc:01:dd:4d:40:11:e6:6c:9f:4e:e2:24:98:5c:
e6:05:62:21:2c:41:f3:79:00:43:df:d1:e5:36:17:b5:4c:bf:
4c:cd:0e:42:0b:a3:3d:a0:e7:e2:d4:3b:5b:82:92:d1:b3:ea:
66:89:4f:75:2c:d1:3a:1d:49:9d:79:8f:24:dc:65:84:6c:38:
7f:37:08:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:56:57 2025 by rpki-client