Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e3a3a86-0bc2-3922-af5f-5d6e5fd98603.roa
File: 3e3a3a86-0bc2-3922-af5f-5d6e5fd98603.roa (raw, json)
Hash identifier: ETkqh6+Mwl6czW3rQOEYT8wiXIYgAzyNVnNFCKpEFBs=
Subject key identifier: 8B:56:79:42:F3:B0:BE:9B:10:2C:A0:EA:CB:FE:90:AA:6F:22:C4:5A
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584910E16E7BF72B19F2B07FA980
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e3a3a86-0bc2-3922-af5f-5d6e5fd98603.roa
Signing time: Mon 03 Mar 2025 14:00:53 +0000
ROA not before: Mon 03 Mar 2025 14:00:53 +0000
ROA not after: Sun 01 Jun 2025 13:00:53 +0000
asID: 13335
IP address blocks: 172.70.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:e1:6e:7b:f7:2b:19:f2:b0:7f:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 14:00:53 2025 GMT
Not After : Jun 1 13:00:53 2025 GMT
Subject: CN=062ed92c-4bc9-4d30-8e28-6e406dbd7688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9a:9a:c3:c4:b8:6a:0c:58:65:87:88:6d:d9:
3d:73:92:de:a5:bf:aa:3e:78:c5:c9:da:6f:77:ca:
c6:0d:35:f5:62:2d:b8:6b:d1:a9:27:7d:5a:ab:30:
60:b5:42:54:b6:d8:a7:f7:39:a8:f7:5e:7e:74:91:
3e:25:96:04:6f:7f:c4:c9:71:95:90:9d:33:0b:0e:
d9:de:24:f4:9d:e0:10:15:83:43:04:d2:db:d8:0d:
cd:f6:7f:52:f9:86:b1:1d:34:e4:41:1f:95:35:4b:
84:a5:1a:aa:a0:76:a4:00:42:8f:7b:dc:fd:80:66:
f1:d1:df:9f:23:db:1a:c5:22:fb:51:20:fd:0f:94:
bc:1f:cb:73:02:72:16:c7:a1:5f:15:25:db:8f:3c:
c2:00:b9:1b:9c:2f:5b:81:b0:e2:2e:f9:9c:13:33:
96:0f:f7:8a:eb:16:7d:b3:c8:f7:90:1a:e0:be:c3:
10:6c:07:80:09:49:86:e2:8b:8f:88:b7:be:36:0c:
78:5d:45:c5:68:08:fb:6a:d4:4f:66:42:1d:0e:30:
2b:86:d3:01:8a:95:fe:66:c6:36:f5:d5:c3:01:70:
f4:b0:3a:af:dc:70:f1:81:53:9c:21:b9:e4:8e:38:
4b:e9:09:5f:1b:1a:c1:ec:56:f6:14:7d:f4:55:83:
3b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:56:79:42:F3:B0:BE:9B:10:2C:A0:EA:CB:FE:90:AA:6F:22:C4:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e3a3a86-0bc2-3922-af5f-5d6e5fd98603.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:7c:f2:21:68:ab:cb:8c:22:ad:e1:6f:f7:ae:c3:29:16:f0:
f8:5a:78:12:32:f3:ed:58:7c:91:dd:8f:e0:ce:b6:39:02:22:
df:5b:c0:ca:6e:ff:26:8c:0c:87:30:4e:54:1d:b5:39:10:18:
a9:be:23:24:d3:4a:46:b4:fd:ad:5b:b4:33:21:53:24:b4:d7:
7d:a5:ce:82:4f:db:6b:f8:91:8e:fd:51:68:ea:5e:16:92:3f:
86:de:b8:0e:0d:14:96:af:e9:67:9d:55:6b:ca:f3:18:d3:88:
9e:c9:e9:aa:37:fa:d6:59:9e:3f:80:f6:ef:d6:d3:2a:ee:ba:
06:0c:a1:01:4c:28:06:7b:67:e3:4a:ba:e3:00:92:57:3d:ae:
c8:fa:85:06:db:aa:0b:31:d9:55:29:04:01:d7:38:b1:90:18:
3d:ec:c6:ec:a6:b4:d9:ad:99:88:3b:5d:74:70:38:d1:7a:7f:
e4:da:3d:9d:ed:47:3e:27:39:b3:8f:36:86:51:5e:70:3a:be:
fc:7a:00:10:4c:3d:ff:8c:bd:31:e9:f8:78:7f:ed:12:f7:e1:
b1:6e:97:91:25:15:6b:df:81:b3:bf:02:6c:f7:b2:48:d6:d3:
58:26:b0:4a:e8:b3:72:02:2f:12:b0:a4:e8:6f:28:40:f5:e9:
1d:31:c4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:57:16 2025 by rpki-client