Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c0e2604f-e28a-3702-9217-08bd59e7c604.roa
File: c0e2604f-e28a-3702-9217-08bd59e7c604.roa (raw, json)
Hash identifier: Nu0TN9TtMaWYyT3BM/cUfVkmLVzmz7c1Lu2VKSG+SFI=
Subject key identifier: 61:EF:25:E9:52:B7:4C:FC:7C:C7:A8:07:17:11:6E:82:A4:77:59:01
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584910E16B41CFF32F967A8CDC40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c0e2604f-e28a-3702-9217-08bd59e7c604.roa
Signing time: Mon 03 Mar 2025 14:00:53 +0000
ROA not before: Mon 03 Mar 2025 14:00:53 +0000
ROA not after: Sun 01 Jun 2025 13:00:53 +0000
asID: 13335
IP address blocks: 172.70.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:e1:6b:41:cf:f3:2f:96:7a:8c:dc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 14:00:53 2025 GMT
Not After : Jun 1 13:00:53 2025 GMT
Subject: CN=ea7f666b-856a-429b-b78e-9bf7d1574b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:eb:63:db:29:20:6e:99:de:8c:34:1f:94:94:
92:98:7a:4a:a0:46:b9:91:7a:26:83:b1:26:07:34:
6c:57:b3:41:ab:3c:b4:b0:5b:45:a4:25:6c:ec:16:
0b:14:27:fe:66:7a:76:0c:ad:26:55:a1:0b:7b:f2:
be:3c:c0:a4:c7:e0:29:05:5a:6c:03:07:a5:e5:8e:
ab:89:dc:9e:6a:13:51:a0:b0:9e:78:2e:d5:03:e5:
f0:57:a3:2d:78:e2:7c:65:d3:bd:da:6c:7c:e6:f3:
c5:60:3e:43:02:0f:67:85:2d:3d:60:5c:a5:01:41:
e7:e9:b3:03:bc:aa:16:fb:e3:ab:a1:ee:25:31:fa:
b5:f4:40:a6:89:30:26:a1:d3:3b:be:16:7f:59:54:
64:d8:86:46:ed:40:45:36:95:a7:b5:ab:62:44:6c:
47:ec:b7:c5:a4:f3:09:b7:f1:66:18:b0:65:d0:90:
ba:97:a3:57:48:4b:4c:2f:7a:a6:02:55:65:56:0b:
01:80:e0:08:48:a4:57:79:a4:61:90:90:81:ac:d9:
c3:51:ce:2b:6b:9d:d6:7a:b9:6a:3a:43:97:eb:11:
01:6b:79:e6:9d:61:83:78:12:bc:ed:c0:14:54:7a:
8c:47:b5:2e:64:bc:84:e4:0d:d9:c1:3e:29:08:db:
26:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EF:25:E9:52:B7:4C:FC:7C:C7:A8:07:17:11:6E:82:A4:77:59:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c0e2604f-e28a-3702-9217-08bd59e7c604.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:86:86:d5:f4:9e:e5:6b:7c:5c:17:81:45:59:b8:2d:20:94:
4b:0b:82:2c:79:89:e5:24:89:ee:5c:8d:be:5b:e6:31:52:07:
ad:53:d5:cb:33:bb:d7:ed:0c:99:8e:be:aa:2f:e1:7f:61:e6:
e7:cf:94:c1:c1:e9:87:b3:33:c3:2e:03:0c:40:d4:bf:84:ce:
f5:b3:be:1d:05:13:86:20:27:43:41:6c:7e:21:50:96:55:9e:
9f:cc:bb:36:e0:bc:3a:c7:f8:10:2d:b2:47:65:2b:7c:6b:a0:
b4:97:54:71:58:c9:88:d3:47:c5:06:55:9e:b4:eb:ae:35:af:
cc:de:8a:ba:65:bd:27:33:a5:72:91:07:c8:1a:3a:9b:e2:68:
4e:5d:c7:b3:b0:18:6b:8d:0f:e4:6f:b0:49:ba:07:b9:62:d0:
7e:67:b3:39:14:7f:c8:39:4e:73:21:b9:a9:8e:3c:2c:18:4f:
14:9c:73:86:b4:5c:42:4d:92:8f:1d:30:07:84:51:c2:ad:ae:
0a:68:2c:47:e8:c6:ea:17:2e:66:38:c4:10:a1:8f:a5:b1:f2:
3c:51:f6:56:d6:2e:88:18:4d:6a:81:bd:a3:ac:b1:12:c8:87:
79:94:ce:ab:e3:6f:73:ca:bd:7e:1b:3c:ce:6e:d3:be:8e:b2:
25:4c:e5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:43:08 2025 by rpki-client