Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae9e1a0a-a915-3ecb-a55d-7d1a820c119e.roa
File: ae9e1a0a-a915-3ecb-a55d-7d1a820c119e.roa (raw, json)
Hash identifier: rBzlH065j1P4gmVT7rNL0rjkIYlL+m7RVZJYPItcEHA=
Subject key identifier: 58:5A:30:C4:70:98:A1:04:E4:B7:2E:BB:11:AF:17:B9:46:CF:75:51
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584910E16CDDD2F71992C2DF4280
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae9e1a0a-a915-3ecb-a55d-7d1a820c119e.roa
Signing time: Mon 03 Mar 2025 14:00:53 +0000
ROA not before: Mon 03 Mar 2025 14:00:53 +0000
ROA not after: Sun 01 Jun 2025 13:00:53 +0000
asID: 13335
IP address blocks: 172.70.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:e1:6c:dd:d2:f7:19:92:c2:df:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 14:00:53 2025 GMT
Not After : Jun 1 13:00:53 2025 GMT
Subject: CN=739656e2-1067-4606-a504-6197987a5969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5c:c0:c5:8b:78:43:1a:bd:78:a4:f2:ed:82:
66:ec:2d:53:ed:ba:06:e3:a2:b9:fb:2d:3e:50:43:
a4:e5:7c:fb:93:c1:f0:71:bc:35:57:34:21:0a:4f:
68:8d:30:c2:38:aa:fe:e8:37:76:13:d3:bf:34:45:
35:bd:05:fe:4d:c8:05:2d:e8:d8:cf:c0:86:2b:0f:
43:53:2d:f6:b3:ad:2d:b3:12:53:21:f3:a9:d3:aa:
b5:30:a3:88:c6:24:5d:2a:a0:b8:aa:6d:3b:2e:5a:
10:5e:28:35:e4:ce:29:3b:71:05:66:ca:9e:0c:37:
57:7d:e1:00:e1:e0:31:06:4d:a5:24:09:5e:dd:b7:
0e:23:ee:25:10:5a:2e:9e:68:6a:6d:db:db:94:17:
50:09:e1:51:38:80:96:67:5b:bf:96:e6:65:e0:13:
ea:c4:d8:5e:63:83:75:eb:b3:85:11:98:4f:35:ca:
36:f7:6c:13:51:8e:11:e2:0f:05:a4:9d:86:65:67:
27:3c:72:90:7a:e2:a7:51:48:99:23:83:ba:7d:a6:
7a:24:1e:dc:94:bc:7b:bd:e5:10:51:b0:94:36:b3:
de:63:ad:ba:b6:6d:3a:bb:79:37:93:a7:d8:79:90:
83:a8:39:28:47:9c:09:86:ae:84:79:e5:41:22:2d:
08:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5A:30:C4:70:98:A1:04:E4:B7:2E:BB:11:AF:17:B9:46:CF:75:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae9e1a0a-a915-3ecb-a55d-7d1a820c119e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:39:b9:fd:aa:68:15:ed:b1:d0:a5:8b:b4:42:bd:25:bd:71:
85:5e:77:22:d7:77:d2:9b:74:a5:4b:65:43:72:0c:7c:52:29:
51:df:88:ce:eb:06:ad:22:14:ed:9f:18:ed:6e:a9:7b:8b:e7:
58:83:89:6c:39:61:68:f7:be:ea:b0:89:bb:90:2c:f6:86:e8:
fd:a3:b7:4c:65:76:2f:f4:78:33:d5:17:a3:ec:c9:eb:14:49:
47:69:45:a1:c6:55:cd:2b:82:e8:64:13:67:64:af:ed:4c:aa:
10:b5:46:cf:8b:40:19:56:f5:b4:6a:7d:a3:d6:bb:78:48:60:
6e:23:4e:b7:9a:9c:30:38:22:99:b2:e4:26:2a:20:8d:70:4e:
c0:86:74:59:fe:ff:f8:bf:ba:9b:ab:cc:e2:5b:41:0e:77:29:
75:1d:76:d0:1c:7d:40:29:14:d5:7d:35:1b:3d:bf:68:b6:c5:
05:56:71:87:a6:45:52:c1:b3:17:77:dc:0a:c9:d2:28:3c:50:
74:54:00:32:29:3b:fa:4c:7a:2e:d0:53:43:39:2d:e7:94:ab:
d8:45:cf:3f:88:97:89:cb:0f:e9:1f:15:ef:72:da:98:57:e1:
e0:17:8a:62:82:56:3e:ac:2c:0f:28:f7:1b:08:c8:16:0b:30:
56:14:dd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:25 2025 by rpki-client