Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8400bcb8-69f0-3aaf-9266-e93b38bf894a.roa
File: 8400bcb8-69f0-3aaf-9266-e93b38bf894a.roa (raw, json)
Hash identifier: ATKK1b0fD5AEaC7suYf6sjhvhNMfC2e3rnqzzsfLAw0=
Subject key identifier: 54:85:FD:CC:0A:EB:50:7B:EE:DF:50:3E:8D:46:D7:39:55:93:4E:EB
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490F7BF98A553DCEA421CD8500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8400bcb8-69f0-3aaf-9266-e93b38bf894a.roa
Signing time: Mon 03 Mar 2025 02:00:39 +0000
ROA not before: Mon 03 Mar 2025 02:00:39 +0000
ROA not after: Sun 01 Jun 2025 01:00:39 +0000
asID: 13335
IP address blocks: 172.70.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0f:7b:f9:8a:55:3d:ce:a4:21:cd:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 02:00:39 2025 GMT
Not After : Jun 1 01:00:39 2025 GMT
Subject: CN=664dd8f2-8522-4938-8352-7391658efcf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2e:3a:c5:9e:02:24:a8:3f:98:1a:4b:c9:7c:
dd:63:8b:d3:97:05:28:02:cc:0e:93:c1:87:bc:5c:
7e:d1:8c:6a:a6:06:47:aa:9b:d5:61:98:23:f9:31:
af:17:2e:c6:c8:4a:ff:8d:8a:50:f9:18:2d:10:43:
69:09:81:d3:25:bf:6c:dd:29:cd:d8:c9:33:ab:18:
8e:31:43:c8:74:1b:aa:03:01:46:52:8c:b3:1a:41:
c8:26:5e:85:2c:03:99:06:3a:5a:36:7c:da:0c:36:
c5:94:88:67:5d:79:bf:57:17:01:f4:71:1c:6b:ec:
f1:fa:92:c9:f3:1b:e3:1a:85:ad:3e:25:a6:81:39:
71:37:0c:aa:c6:36:a9:2e:b2:e1:83:70:8f:c9:37:
a1:6b:74:ff:6d:47:4d:5d:14:87:b5:7b:58:a6:0c:
39:d4:73:16:39:ac:78:d2:30:b1:66:78:68:1a:81:
31:66:56:c5:eb:0a:be:e4:3b:05:11:f6:21:47:77:
ab:6d:8b:82:47:cc:1a:22:56:c0:bd:f4:b8:09:19:
a6:61:91:89:fc:4f:78:d7:b1:9a:73:4a:71:1a:41:
28:98:cf:ca:95:b6:e7:c1:ce:a5:47:31:a2:dc:62:
a6:ea:0e:3b:b1:32:eb:2d:91:d3:2d:fe:a7:47:83:
46:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:85:FD:CC:0A:EB:50:7B:EE:DF:50:3E:8D:46:D7:39:55:93:4E:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8400bcb8-69f0-3aaf-9266-e93b38bf894a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:54:7d:6a:1d:09:62:82:b8:89:84:47:08:70:2c:c5:8d:c5:
5d:c3:99:ce:45:0d:58:86:77:bb:8b:44:4f:4b:f3:2b:29:4c:
08:ac:31:cb:ae:ab:7d:c8:f3:07:4d:65:bc:24:e0:cc:e5:8d:
e2:fa:c6:5c:a0:ed:22:a3:bf:92:38:0b:5d:c9:db:96:42:c4:
ad:ec:f3:0f:35:2f:9d:89:2d:e6:e2:7e:58:2a:4b:b9:7e:1f:
49:48:61:66:55:74:23:38:4e:f5:96:02:0a:73:dc:8d:2c:6c:
9f:74:5e:81:b9:e0:c5:b2:2d:b2:8f:0d:c6:57:e6:0f:46:6b:
96:6d:c5:86:04:4a:66:ff:cb:f6:d7:f8:de:df:9f:ef:f0:4b:
b1:c4:ba:73:ec:bf:c5:79:5a:9f:d3:1e:22:f7:2c:2b:eb:29:
8d:d9:5c:eb:aa:91:5d:2e:7b:8b:6e:f7:34:2e:75:28:bd:60:
29:79:f5:9d:0c:f1:d6:e9:1b:89:02:e1:89:55:4b:d8:67:df:
ac:64:47:a0:63:9e:be:4d:0b:81:98:8d:d7:9d:0f:b1:ee:c8:
c0:13:64:79:18:fe:de:c7:7f:eb:ea:44:d5:c2:a4:64:d8:8c:
0d:ae:b1:99:e1:e1:e4:dc:f9:76:11:b7:a8:c4:49:64:65:eb:
92:5f:b2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 08:44:40 2025 by rpki-client