Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7fad9b23-4779-30e6-a138-18cb124dd0c3.roa
File: 7fad9b23-4779-30e6-a138-18cb124dd0c3.roa (raw, json)
Hash identifier: wuxWl/i/ngHiJorqNKgCzedg2lDLRkWBHrJUvpPpuOw=
Subject key identifier: 34:32:E6:19:BD:E9:5C:40:08:3D:28:89:F8:C5:D9:78:B2:18:F3:74
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584908817EF7873E972DEAD8F340
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7fad9b23-4779-30e6-a138-18cb124dd0c3.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 13335
IP address blocks: 172.70.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:7e:f7:87:3e:97:2d:ea:d8:f3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=c9929463-4fb5-4a12-a479-5ff7393d9c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fc:c0:23:98:f6:97:90:4d:a9:7a:a5:b0:77:
98:fc:4a:aa:63:63:b2:13:84:95:27:86:0a:fe:94:
4a:4b:85:0b:07:18:bd:39:e8:d6:39:72:68:67:a7:
5c:79:38:2e:da:bd:4b:92:fd:a7:04:65:f1:80:25:
70:77:91:52:2d:37:87:b0:12:59:94:91:6c:85:fe:
82:23:3f:ea:4e:8c:0a:47:52:2d:9e:9e:2a:f8:6d:
5d:ef:5e:f6:3b:a4:47:aa:fa:cc:3e:ff:b8:52:3e:
58:9f:17:47:6b:0f:ff:ff:c1:dc:0f:54:35:db:56:
54:72:84:5c:2e:b8:50:dc:1d:d3:c5:a6:31:48:61:
3a:7a:bf:55:82:cb:17:b7:5c:fb:af:88:4c:6b:60:
d4:59:40:cf:b4:5c:08:4b:49:c8:11:76:3d:5c:29:
c8:20:d0:7f:77:b9:31:b3:98:35:07:1b:51:c5:94:
86:3d:08:f1:96:cd:1c:3c:4d:45:b2:f4:69:46:e8:
50:99:29:a4:02:88:96:49:20:0c:69:9e:ee:17:85:
ce:74:75:cc:5e:14:ec:a4:86:4e:97:57:4f:e9:71:
3f:c3:eb:f1:6a:cc:b6:e4:72:d5:dc:1a:18:40:48:
33:a5:49:11:89:55:85:09:17:e2:cd:64:ea:e5:a9:
d6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:32:E6:19:BD:E9:5C:40:08:3D:28:89:F8:C5:D9:78:B2:18:F3:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7fad9b23-4779-30e6-a138-18cb124dd0c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.122.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:83:de:6c:27:94:85:8a:b0:c1:60:13:a0:ee:d0:35:3e:b3:
e4:c1:a8:88:3a:03:f8:bf:94:42:4e:f1:d6:59:c8:75:59:09:
dd:91:77:59:a2:b6:aa:52:1d:c3:c7:18:c1:6d:93:d4:27:94:
ff:d1:d1:4a:55:81:24:8c:f3:3d:8d:d8:d1:0e:ad:73:ea:ae:
68:56:6b:c2:b4:2d:d8:06:52:59:e0:ae:7d:08:10:6a:f9:93:
80:83:77:8b:3c:ed:52:55:f7:d7:ff:17:76:ad:76:4f:a6:d3:
84:2b:d0:23:33:d0:93:28:2e:8d:66:99:78:7d:a7:e0:b4:ef:
d5:dc:67:d3:bb:e8:ac:f1:cb:f2:08:61:81:1a:63:08:17:a9:
d0:0f:b1:da:21:42:8f:02:8d:d2:98:28:08:2c:bb:5f:de:91:
59:18:5b:23:50:fa:41:fe:ac:aa:db:2b:01:67:0d:0b:d7:11:
20:eb:80:32:d0:8a:09:74:aa:0d:79:a6:e2:c1:51:b8:5c:00:
f4:8c:b6:55:b9:1f:e7:4d:28:35:b2:b7:b8:d0:ae:d9:83:88:
54:66:96:f5:b9:2b:7b:4c:63:fc:3e:42:53:75:56:ab:7f:13:
41:72:94:d2:7a:3a:39:09:53:af:82:18:cb:3b:a0:bc:bd:c1:
5c:4e:60:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:13:19 2025 by rpki-client