Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/40674d13-34cd-3c86-af0c-6dca7c56efd7.roa
File: 40674d13-34cd-3c86-af0c-6dca7c56efd7.roa (raw, json)
Hash identifier: ZGvTzGyZetUF7+LepmI3pNGp/MwqlrLeA6cTAgF2MH0=
Subject key identifier: 8A:91:13:A6:2A:22:8B:96:31:E4:CD:62:CB:62:19:12:43:56:20:A8
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490F7BF7F4D083EE1F2A38BE00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/40674d13-34cd-3c86-af0c-6dca7c56efd7.roa
Signing time: Mon 03 Mar 2025 02:00:39 +0000
ROA not before: Mon 03 Mar 2025 02:00:39 +0000
ROA not after: Sun 01 Jun 2025 01:00:39 +0000
asID: 13335
IP address blocks: 172.70.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0f:7b:f7:f4:d0:83:ee:1f:2a:38:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 02:00:39 2025 GMT
Not After : Jun 1 01:00:39 2025 GMT
Subject: CN=979a9486-560a-4832-ad8c-02ecf1fae661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:57:6b:7f:7b:61:0d:24:75:ce:4e:ed:5c:37:
95:58:5b:aa:0f:dd:a6:24:2a:e6:9b:32:5e:c3:7b:
ed:ba:d5:44:87:e5:a9:2f:18:46:04:cd:9b:c0:7d:
92:da:95:ba:06:76:5e:a6:2e:d1:3b:4d:97:54:52:
39:af:51:77:80:a1:9c:9d:21:8a:01:ba:c8:ad:77:
ae:ac:ee:98:76:d8:1e:76:49:0a:35:ce:cc:99:d5:
28:a7:47:ce:e7:56:e5:2d:ac:a3:97:a0:df:87:12:
31:cd:45:15:f4:ff:7b:51:5c:fa:d2:da:66:90:d7:
91:d6:d4:92:f2:c9:7c:bf:74:14:55:11:92:e7:0f:
20:78:fe:7f:9c:fc:fe:5f:3e:08:da:05:cb:a3:fb:
ac:a9:88:1a:14:6d:cb:8e:01:2f:25:5c:45:1f:93:
ec:29:95:79:43:f7:e7:ee:6c:a9:d0:9a:2f:5b:8d:
74:88:3c:d9:b2:9b:32:10:bc:ae:2b:0e:f9:bb:4a:
37:43:c8:77:ae:ae:47:84:e2:fb:1d:6f:c2:6b:28:
e7:1d:9d:23:29:c7:17:9e:e5:4e:da:ba:5a:de:f1:
85:d8:9c:1e:cf:7e:ed:7b:60:d0:3c:68:c9:69:ea:
67:21:f2:57:6c:71:84:b1:b7:6e:3a:a9:0a:60:58:
93:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:91:13:A6:2A:22:8B:96:31:E4:CD:62:CB:62:19:12:43:56:20:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/40674d13-34cd-3c86-af0c-6dca7c56efd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:41:39:b1:d7:e4:3a:59:2f:f0:f9:26:bd:aa:2e:f2:4d:6c:
4f:da:90:59:aa:96:85:f3:d5:7a:68:2f:40:3b:2c:0e:66:08:
c4:dc:e5:a0:28:c4:69:91:39:11:e6:64:d3:98:5a:c8:7e:81:
0a:17:b0:38:d1:54:08:00:f8:85:90:d4:2c:d1:d6:9c:15:7b:
dc:a6:df:4f:b6:a6:7a:8c:7d:a8:57:15:83:28:30:45:60:56:
05:76:63:8f:bc:53:73:96:5c:20:c3:ef:9c:8e:e2:4a:a7:c5:
81:4a:b9:51:9e:76:fa:96:e0:d0:e9:c9:96:09:c6:c4:ac:81:
99:86:cc:26:cf:27:3c:72:72:cf:4f:d1:f4:ec:ed:f1:06:62:
90:ba:a3:f0:1e:0c:5e:58:c1:41:50:95:b9:02:f1:d8:4f:45:
a8:c2:78:ce:3d:05:0c:9a:fb:6e:3b:cf:12:6e:a4:09:24:47:
2d:b3:c6:c7:0a:b8:12:71:3e:ed:54:5a:90:28:d2:bb:5c:6d:
97:72:2b:92:d9:57:c2:30:f3:2e:7a:6e:f0:21:1a:cd:a1:89:
98:a6:7f:10:0f:73:64:b5:09:0f:84:83:89:48:3e:00:23:8e:
5f:de:f6:ae:c4:0d:50:55:89:33:e1:ac:3f:03:bf:ed:07:3c:
b1:e3:7a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:31:30 2025 by rpki-client