Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2af91c13-374b-3444-b28d-e3d1c4cd66ac.roa
File: 2af91c13-374b-3444-b28d-e3d1c4cd66ac.roa (raw, json)
Hash identifier: CCOzyCBbtrWNbIMhiTwWerPJYqgP2qM7ezpy9sLVj+A=
Subject key identifier: 0F:8F:BF:7F:87:6E:63:CB:45:D7:89:45:B5:96:E0:0A:1A:4B:0A:0A
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584917DC21A914FA055DFCFC32EF
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2af91c13-374b-3444-b28d-e3d1c4cd66ac.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 132892
IP address blocks: 172.70.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:21:a9:14:fa:05:5d:fc:fc:32:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=f0ea1b4b-971e-4ddc-a461-974d9a377b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6c:9f:34:00:30:1f:95:e1:b2:49:1f:01:6f:
8f:d5:8e:90:d7:e7:b7:64:3d:88:a2:ee:1d:3c:45:
b5:7a:f5:c4:c4:62:34:52:e1:06:77:7c:49:2f:0d:
8a:cb:4f:62:4d:01:09:05:ca:c0:74:2f:9a:4d:47:
17:1a:3e:df:7a:80:79:ca:ba:87:f9:de:9e:63:61:
97:4e:43:de:b9:88:94:80:3e:96:44:b0:7a:2b:ad:
9c:bf:84:87:ef:87:0a:02:97:0b:ac:39:1b:4a:a0:
22:07:fa:a5:02:18:21:f2:ce:64:98:0e:6b:41:0c:
32:d2:f7:69:47:b0:34:c4:79:5c:d1:1e:a3:d9:23:
09:ac:15:6d:d7:37:f7:e4:65:b8:3a:57:ad:76:88:
9b:fb:61:93:af:2e:07:a5:00:c0:cd:fe:94:32:ff:
f8:fc:a3:60:22:04:61:9d:78:5a:98:64:49:27:2a:
1b:b7:38:d4:f2:a9:cc:d6:d8:d7:69:a3:38:91:14:
7b:7e:84:e1:eb:13:8a:b9:c7:db:07:7d:a9:20:8c:
e0:a2:6c:40:9d:f0:2b:c7:b5:6b:47:31:ab:15:57:
5e:96:c9:48:7e:9e:d2:06:21:69:4c:52:61:17:b6:
48:1c:86:58:fd:0f:75:eb:6d:f3:82:57:77:10:2a:
2f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8F:BF:7F:87:6E:63:CB:45:D7:89:45:B5:96:E0:0A:1A:4B:0A:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2af91c13-374b-3444-b28d-e3d1c4cd66ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:12:48:cb:bc:0d:d9:21:ba:ea:dd:c2:41:05:4a:2a:e1:bd:
de:6e:12:c3:62:55:e8:93:93:0a:33:f1:13:db:e0:ca:ce:45:
b3:8b:45:11:08:76:47:e4:9b:49:ce:e6:ee:ff:4e:83:79:6d:
6b:f5:04:83:a0:a8:40:cf:b9:ae:b3:d8:b4:08:e6:cc:f3:59:
4b:d8:48:ec:51:f6:cf:25:5b:8c:18:2e:7f:cc:36:76:27:55:
71:87:d7:1c:ab:85:33:eb:03:e4:d8:ea:93:ba:fb:8a:ff:46:
14:b7:25:6e:6b:b0:44:46:b2:8b:14:30:bd:97:75:51:70:87:
07:f8:10:09:bb:3d:88:3a:84:fe:39:67:e8:e8:84:09:c4:db:
a2:ec:dc:2c:1b:42:c5:65:86:bc:1b:d6:cf:58:e8:9f:23:77:
ee:c6:0c:be:50:78:af:28:fc:e4:c7:d6:67:f8:f7:68:e2:44:
16:e6:68:2b:b5:93:46:7b:98:d9:a6:8e:81:fe:03:d8:db:43:
80:fd:a9:8d:48:6d:28:05:c6:54:db:c6:ef:36:b6:93:3f:51:
bc:41:f8:cc:3f:ab:7e:69:5f:ec:bc:d1:59:56:40:01:f4:dc:
20:8c:da:36:34:cf:6b:d1:4f:68:9b:63:ab:ac:2b:1e:46:50:
03:dc:cc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:44:02 2025 by rpki-client