Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aba1fd4e-6af5-3eee-932f-3a9019337603.roa
File: aba1fd4e-6af5-3eee-932f-3a9019337603.roa (raw, json)
Hash identifier: 2eGJoCypuTJBkQSJiDlLBp9lrwru7ejjyFXVaXOesSs=
Subject key identifier: 67:0A:1B:C4:58:C8:1E:B1:17:B5:DA:BB:A4:B3:B4:18:98:B8:CD:56
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490F7BF887B9B3FDD68B431080
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aba1fd4e-6af5-3eee-932f-3a9019337603.roa
Signing time: Mon 03 Mar 2025 02:00:39 +0000
ROA not before: Mon 03 Mar 2025 02:00:39 +0000
ROA not after: Sun 01 Jun 2025 01:00:39 +0000
asID: 13335
IP address blocks: 172.70.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0f:7b:f8:87:b9:b3:fd:d6:8b:43:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 02:00:39 2025 GMT
Not After : Jun 1 01:00:39 2025 GMT
Subject: CN=c7c3e74a-266c-4a7e-ba87-e1481a8c6e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:2f:fc:c4:a5:23:88:40:9c:62:a2:f8:f6:
c3:0f:01:8e:73:82:ff:4c:ea:f5:a7:4b:c4:6d:a6:
6f:67:6b:a7:73:b8:f2:6f:5b:82:a3:31:ac:3a:6c:
ff:da:06:c3:b4:15:43:06:50:31:d0:52:48:3b:23:
ea:aa:38:66:ce:56:fa:79:d9:4c:f4:f2:64:25:eb:
8f:a1:33:3f:14:13:90:b9:4a:8d:dd:1f:43:fa:d6:
47:d9:20:4b:23:43:48:1c:92:29:54:98:1b:bb:5c:
5d:22:9c:43:3c:aa:ac:fb:32:1c:d6:7f:9f:18:62:
53:b6:dc:eb:8b:7b:99:cc:c2:48:56:26:b1:e5:58:
ca:63:9e:95:df:0f:56:0f:c7:f4:99:2e:75:92:b2:
34:66:fd:7a:9d:54:92:fd:a0:5c:dc:f5:64:a6:9b:
fd:ed:71:e7:4a:62:c9:f3:be:ed:4e:0a:8b:95:6a:
e5:e1:e0:3a:a2:bc:8e:00:86:d0:2d:5f:73:81:e9:
e6:73:3d:13:25:0f:8c:e8:95:82:28:92:2b:68:24:
ac:6e:ca:c5:9f:52:16:84:40:de:b2:c2:43:84:98:
26:52:12:cf:88:a3:36:6d:92:a1:5f:88:26:6b:36:
03:4e:2d:50:01:69:40:27:9c:d4:52:e4:67:2b:9f:
e4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0A:1B:C4:58:C8:1E:B1:17:B5:DA:BB:A4:B3:B4:18:98:B8:CD:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aba1fd4e-6af5-3eee-932f-3a9019337603.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:91:ef:74:e2:2c:30:01:f5:20:84:81:59:f0:6c:be:ae:a8:
e8:a2:8c:be:07:ab:34:dd:41:e2:f7:f5:bb:cf:58:3b:49:e6:
b4:ae:1d:30:a2:d8:00:ea:a5:ab:c7:f5:89:1a:8d:27:be:e0:
81:3e:54:b1:62:2a:c0:10:1d:35:66:0f:99:d0:ac:63:e2:6c:
31:b5:bf:69:e7:8b:05:16:48:a7:4a:17:59:6b:8d:99:6c:97:
39:b1:93:9b:04:65:8e:2d:21:e1:bb:f3:d1:65:d6:aa:4b:ff:
7a:07:cd:24:f3:57:a9:54:d4:c0:b3:30:1b:f2:33:ca:b4:41:
0f:2c:cf:5f:3e:44:74:8a:d6:4f:b4:70:14:fb:12:c3:63:80:
f1:95:c2:5d:41:6c:1e:57:97:d0:2d:24:b8:57:ab:88:5a:8d:
4a:73:ed:4e:eb:2d:82:8c:d4:40:95:72:2b:8a:35:88:dc:b3:
e0:22:d6:41:b4:07:55:60:1e:43:f4:c3:90:27:08:a9:db:33:
1c:8d:69:15:d7:d6:88:f5:d0:f2:27:ab:1a:2b:f0:ef:b5:c0:
1e:55:c4:e6:86:08:6b:2f:98:a6:56:d6:b7:16:27:23:ba:9c:
65:23:ca:05:b9:cd:ad:23:0d:1e:ae:21:05:ef:54:7b:63:b5:
ef:24:fb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:54:51 2025 by rpki-client