
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b43cc595-c740-3ee2-8352-31616405c44a.roa
File: b43cc595-c740-3ee2-8352-31616405c44a.roa (raw, json)
Hash identifier: YQTODrop5Pf+Kpmh5HjzWIogWBf47KHNqfW5CA2TCU0=
Subject key identifier: 48:7D:2E:93:84:42:4D:0B:33:25:C5:EE:B7:DF:DC:C2:64:62:C1:70
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071BF6E73C83450391F4DF00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b43cc595-c740-3ee2-8352-31616405c44a.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 172.70.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:f6:e7:3c:83:45:03:91:f4:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=b3917272-26bf-446e-b745-9207f9239765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:32:15:1c:46:fb:8a:9d:8d:83:63:04:7c:85:
a1:f3:2c:df:5e:dc:1d:ea:d9:7f:cd:6e:b1:2a:87:
78:c2:c1:dc:81:f5:ab:73:11:08:89:c9:c5:4d:0d:
f5:fd:40:d4:75:03:f7:69:5a:1d:cc:e6:a8:4e:51:
1f:2c:bc:1c:45:78:30:98:a2:98:72:42:1c:54:77:
0b:41:d7:74:59:b4:57:e1:42:d7:bd:68:2d:7a:f8:
8a:05:54:d1:d4:1b:e1:fe:3e:43:7f:6e:47:2d:d1:
f4:58:2a:7e:59:09:3a:b7:1d:88:22:58:f9:38:58:
0f:aa:69:9e:d2:50:46:94:76:84:31:70:45:3c:00:
a6:24:ab:fa:f4:bc:1e:61:2f:e6:29:e9:98:f7:f8:
c9:df:5a:aa:49:c1:2d:31:60:0d:95:97:b6:f5:70:
cc:b0:75:27:38:0e:03:31:84:10:76:99:2f:bd:1d:
61:8a:3c:ff:31:57:27:55:07:66:57:f2:08:70:78:
ec:0f:b9:7f:e6:87:46:37:b3:40:3e:7c:c2:96:63:
bd:c8:6a:d3:04:93:9e:07:80:97:54:4b:ec:5f:65:
d9:02:90:9f:eb:4f:1a:78:b4:9a:cd:0b:c4:be:41:
94:59:7b:de:8c:44:50:fb:3f:b4:41:f6:27:a3:8b:
19:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7D:2E:93:84:42:4D:0B:33:25:C5:EE:B7:DF:DC:C2:64:62:C1:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b43cc595-c740-3ee2-8352-31616405c44a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.175.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:60:51:4c:79:c7:77:fd:34:41:cb:c5:95:e1:73:67:02:77:
0e:6b:4e:b6:e3:17:28:af:43:9b:d5:2e:bc:7d:23:2c:ea:86:
b2:c5:f1:be:fe:f3:e1:ae:e6:d9:56:27:c5:c0:40:ab:7c:9d:
3d:43:a4:05:ef:68:04:82:7e:53:47:34:4a:a5:fe:53:6a:54:
2b:36:b5:56:96:3f:7c:3a:ed:2e:7c:16:eb:24:25:fb:d3:47:
3b:21:ae:92:f7:3b:b1:16:e4:60:5d:e5:05:7f:cc:07:ea:f5:
81:77:d3:2a:71:81:60:8b:76:95:b0:a0:c2:79:3d:5a:57:51:
42:76:d2:7f:03:90:08:7c:f5:58:50:bc:7f:71:0d:23:88:c0:
7a:24:39:6a:0c:cf:d2:c8:5d:b8:62:95:cd:c1:c2:ba:14:c9:
5d:96:0a:83:45:55:f0:c8:c7:e7:bc:dc:4d:67:92:31:e8:c2:
ce:c8:75:29:ba:d4:a3:8f:59:7e:85:28:07:d3:df:9d:a5:a7:
7e:63:b2:cc:3d:2a:4b:a7:17:c3:4a:20:b6:c1:a4:87:bd:9a:
53:20:a9:d1:9e:ad:01:69:b6:3d:8c:11:ce:d3:de:7f:e8:91:
1f:b1:3a:22:37:cc:a7:12:b5:5d:40:92:4e:b8:9c:53:d2:14:
8d:ae:33:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:57:11 2025 by rpki-client