Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7b9f9361-e3e0-3af5-8eb5-c1cdb2f6606b.roa
File: 7b9f9361-e3e0-3af5-8eb5-c1cdb2f6606b.roa (raw, json)
Hash identifier: rqkt3aDHMv016+bidLWRm55NH1eKFqJ0Cw9GAj1hi6o=
Subject key identifier: 1A:CB:10:44:9F:44:F7:F3:44:49:A6:47:C4:97:E3:9B:50:B8:AC:68
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490F7BF97981161FA79A964E80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7b9f9361-e3e0-3af5-8eb5-c1cdb2f6606b.roa
Signing time: Mon 03 Mar 2025 02:00:39 +0000
ROA not before: Mon 03 Mar 2025 02:00:39 +0000
ROA not after: Sun 01 Jun 2025 01:00:39 +0000
asID: 13335
IP address blocks: 172.70.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0f:7b:f9:79:81:16:1f:a7:9a:96:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 02:00:39 2025 GMT
Not After : Jun 1 01:00:39 2025 GMT
Subject: CN=74a00336-d4fe-4a79-83dd-fc132f08e15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9c:68:36:11:e6:c4:d4:f7:43:e9:ac:71:5e:
fd:a8:b5:3e:55:d2:3f:c7:6f:bd:f8:f8:98:c8:5a:
8a:85:69:d0:11:4c:49:0b:62:9d:60:66:61:0e:6c:
1c:04:48:12:e3:7a:19:cf:ef:d0:5a:c2:14:d7:f6:
1e:32:41:eb:9c:18:38:7b:b5:34:1c:5e:fe:18:ce:
44:1b:37:6e:c8:de:dc:4a:33:1a:f7:4a:7b:e3:8e:
44:5a:82:b3:29:ac:90:8e:06:af:51:cb:27:4b:77:
1d:10:6f:04:a9:1e:77:e1:30:d7:0b:04:f6:7d:e3:
77:ab:46:ac:74:37:03:8b:ec:5c:53:31:db:05:c5:
31:f3:6a:0d:0b:ae:b7:49:12:c7:6a:04:96:41:72:
75:04:ca:6b:ef:72:e8:d4:72:85:85:4e:82:d7:83:
e0:5c:10:cd:2a:46:12:67:90:5d:61:5a:ed:b0:0e:
18:ae:40:cf:2b:92:29:5f:f1:46:38:70:12:b4:3c:
96:f8:a3:fc:03:11:e8:e9:aa:a5:e5:3d:df:d1:eb:
b4:28:f3:25:23:53:77:7f:10:29:16:c2:3c:2c:24:
2c:b8:a8:d1:dd:64:bc:4b:b1:f3:9a:02:3c:3d:b7:
30:a9:cb:10:41:75:98:14:9f:6e:62:ba:85:19:32:
59:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CB:10:44:9F:44:F7:F3:44:49:A6:47:C4:97:E3:9B:50:B8:AC:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7b9f9361-e3e0-3af5-8eb5-c1cdb2f6606b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:d9:03:d0:19:65:9f:eb:43:40:e3:5d:db:c6:c1:62:5e:ed:
1a:45:1e:a5:fd:f2:78:b9:5c:eb:51:01:73:28:13:10:15:9f:
39:f7:a1:b7:4c:80:c2:a2:b5:d4:02:53:67:71:22:33:74:02:
bc:24:c9:89:fe:eb:81:94:7e:9a:ae:28:01:0d:a2:5d:31:4b:
d7:6c:6b:b5:92:8b:2a:c3:da:25:c8:b6:4f:32:cb:a3:f9:13:
54:bd:50:fe:0c:f8:d0:7b:16:4f:60:1e:47:01:13:ce:64:b7:
ad:cf:a1:fe:de:ae:d5:a4:17:c6:39:c3:47:2f:ef:f1:11:df:
86:b1:86:7a:fc:0d:3a:75:a3:10:6a:b9:cf:f2:a8:e1:b9:c0:
99:13:9e:05:4b:94:21:ef:1b:21:75:6b:60:48:4d:98:df:14:
53:13:b1:a9:73:fd:e2:d4:55:f0:00:f6:a1:12:d0:0c:07:0b:
b8:c3:45:3f:80:b3:62:57:2f:79:77:11:e9:d3:01:57:e7:93:
68:07:1e:22:d4:59:32:3a:20:80:28:d8:d9:16:77:ef:26:b8:
fb:6b:59:4d:50:b7:0a:81:15:80:73:2a:03:30:84:0e:72:23:
c4:09:c3:13:19:24:95:c7:26:1c:81:3e:39:aa:a9:99:28:bb:
1d:ca:a3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:42:35 2025 by rpki-client