Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8c21bddb-7daa-34c4-b5a6-4bdeb7098fa7.roa
File: 8c21bddb-7daa-34c4-b5a6-4bdeb7098fa7.roa (raw, json)
Hash identifier: RzkvK5HET8bpYxfnu3PeGx3fXw23+kAAN2gomOSEXpY=
Subject key identifier: 77:DC:16:A0:29:E6:95:5F:23:22:C1:31:2F:B0:7D:48:5C:8A:13:B4
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584910E16F01DEE36D6DCD314280
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8c21bddb-7daa-34c4-b5a6-4bdeb7098fa7.roa
Signing time: Mon 03 Mar 2025 14:00:53 +0000
ROA not before: Mon 03 Mar 2025 14:00:53 +0000
ROA not after: Sun 01 Jun 2025 13:00:53 +0000
asID: 13335
IP address blocks: 172.70.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:e1:6f:01:de:e3:6d:6d:cd:31:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 14:00:53 2025 GMT
Not After : Jun 1 13:00:53 2025 GMT
Subject: CN=54b402d3-e714-46ef-ab37-0ba4a32658f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6d:cf:84:39:ef:16:3f:c9:0e:1f:8a:0c:32:
0f:0e:df:4c:86:f2:df:40:2f:e1:ae:9a:6d:fb:13:
e9:c5:5d:c1:ca:e6:c2:be:5c:87:d0:31:59:ef:7c:
ae:d2:16:d8:02:57:ea:51:2b:cc:be:05:43:c9:26:
13:00:05:09:57:ee:90:59:2e:12:a3:f7:4c:2b:07:
3a:74:1a:b4:f3:15:89:1c:66:b3:84:af:bd:02:5e:
fc:20:63:a1:ce:00:84:9c:ae:ee:34:0d:82:e9:02:
d5:f8:c2:44:4c:ac:d3:f0:5d:ed:f7:e2:c7:1a:41:
29:c4:66:d1:37:4e:54:d9:de:a0:9a:a0:ba:cf:ca:
0f:35:6f:02:38:83:31:ea:1f:17:8d:79:e8:3d:ce:
ee:d7:d5:e3:bb:a4:6f:f4:c4:f0:ff:ba:dd:f2:e0:
49:6c:46:01:3f:fb:06:f5:71:b8:56:2d:66:02:45:
f1:e0:ac:3a:6d:7d:ad:0c:82:23:87:e9:15:5e:cf:
27:af:08:79:83:d0:cc:19:32:f9:3d:5e:7c:6a:77:
88:d9:83:50:2f:f4:88:b0:59:51:70:42:4d:c4:c5:
73:da:3f:92:f8:9e:c8:ac:f5:c2:07:59:96:a4:2d:
98:da:8b:f0:90:ef:3a:f1:be:f9:a3:f2:9e:a7:00:
17:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DC:16:A0:29:E6:95:5F:23:22:C1:31:2F:B0:7D:48:5C:8A:13:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8c21bddb-7daa-34c4-b5a6-4bdeb7098fa7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:a6:e8:53:89:57:d4:9e:fc:a4:f4:b5:19:3c:47:7f:d3:e6:
c9:fc:94:25:ca:17:ac:f5:06:ab:c9:1c:5b:f4:29:b3:28:9b:
d8:59:ac:99:80:f1:fb:45:a0:a2:26:b9:d5:20:f7:3f:66:72:
d4:56:e2:7c:2c:fe:f3:10:d0:12:0c:78:48:95:5a:bb:ff:8d:
19:aa:3a:ef:ad:9f:0e:51:bf:15:a8:f5:6c:d1:03:0a:f3:97:
a1:7b:8b:3e:61:c7:4b:bf:05:f4:07:ea:fd:a4:18:42:1c:36:
e5:84:bf:74:2e:bc:e4:2b:3d:7e:89:f5:38:1b:b1:7a:47:39:
fc:dc:6d:6d:c8:79:4a:c6:be:ed:24:94:6b:f6:91:48:e8:d7:
98:0d:a4:4c:98:18:52:02:09:4c:87:ac:11:21:e4:0e:65:38:
1d:18:39:9a:98:b4:5c:52:39:65:7e:f7:f8:70:96:e1:19:7b:
f4:76:9f:55:b4:24:21:4c:02:8d:1c:b4:b8:02:af:8d:03:72:
2e:21:01:53:4b:6b:24:c1:e3:ce:70:59:b4:5d:b7:74:b1:bc:
e7:01:f2:0d:55:cb:f3:28:5f:8d:cf:23:33:1b:17:c0:a6:3a:
32:aa:84:15:de:8b:c0:ad:cb:42:2e:7a:0a:cc:e7:ed:dd:e7:
88:1d:74:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:48:08 2025 by rpki-client