Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e3777d93-39f5-3743-b23b-1a2a92b00a7f.roa
File: e3777d93-39f5-3743-b23b-1a2a92b00a7f.roa (raw, json)
Hash identifier: dx5mA+0AX/r5CXtEBX3qWXnM8apUCR2XkyJfOscHnVE=
Subject key identifier: F9:B2:A8:EA:AA:BB:45:F0:91:32:44:26:DA:77:7E:A1:69:6B:2F:B9
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584917DC21C88E459ACA49E58A00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e3777d93-39f5-3743-b23b-1a2a92b00a7f.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 132892
IP address blocks: 172.70.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:21:c8:8e:45:9a:ca:49:e5:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=ddd46274-160f-489a-b117-e3c5616a3170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:90:96:46:d7:59:47:d6:1c:fe:14:d6:8e:dd:
c0:0d:60:3d:87:30:3a:a8:d4:23:f8:56:3f:0c:d7:
f5:d1:48:30:40:86:e0:d9:65:7b:13:38:1a:fc:ff:
29:63:7c:a5:ff:1a:fd:a5:0f:a8:5a:3f:38:47:ad:
75:fc:69:cb:f5:b5:1e:1d:ca:2b:95:3d:91:f4:7f:
d2:e0:5e:ac:e4:93:26:26:54:8b:11:1e:79:5e:e5:
e2:02:85:11:61:64:74:c9:5e:bd:4e:7b:0d:a0:3f:
07:4b:75:b0:80:1e:0e:d3:83:05:c1:ee:35:db:8e:
67:75:d4:24:ad:77:24:89:57:80:b0:0b:92:82:05:
e7:45:6a:f7:30:49:f4:50:ba:83:b7:11:39:d0:18:
c6:40:0e:41:75:59:21:f2:fd:e8:09:a0:9e:e8:06:
86:52:17:84:ed:ac:79:78:99:7f:14:02:8c:c8:e1:
0e:db:84:38:6f:b3:71:bf:de:05:8d:44:6d:32:2a:
5e:a2:31:f0:8c:dc:aa:c8:19:55:f8:1f:db:db:09:
8e:cd:e9:c4:37:8f:0c:eb:2b:ea:7c:53:6b:19:94:
42:e0:ec:6a:40:73:74:e4:0d:ba:63:e6:86:c6:46:
8e:46:71:a1:c7:fa:6e:8b:fa:4a:f8:7b:46:8a:e9:
11:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B2:A8:EA:AA:BB:45:F0:91:32:44:26:DA:77:7E:A1:69:6B:2F:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e3777d93-39f5-3743-b23b-1a2a92b00a7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:97:73:0f:62:8e:bf:0a:ef:7b:88:f7:4e:a5:e5:1f:59:6a:
88:38:1e:9f:a1:29:2c:e7:2a:c7:1a:11:b7:7a:76:d7:11:03:
10:8f:8c:02:bd:a5:ec:5c:87:72:ce:01:1c:7d:21:64:80:1b:
af:b5:e8:9e:e9:28:e4:d7:cc:11:16:49:34:d5:83:7e:21:46:
d0:dd:73:28:66:93:f5:15:0e:a5:30:8c:eb:91:0d:6b:0a:b6:
35:0e:02:2d:aa:9f:3c:75:12:b3:94:1e:81:94:7e:92:9e:a3:
f7:9c:6c:88:d7:7f:c9:08:d5:73:7f:10:f4:8f:33:b2:a6:f6:
7a:e6:bb:92:74:87:30:01:cb:94:45:57:9b:75:69:f4:67:29:
e2:08:19:49:0a:dc:f0:e8:c1:7e:ae:f4:3d:0f:0f:8a:31:ed:
83:74:7c:f3:86:04:12:f7:83:1e:3b:4c:40:40:bc:8f:4d:f7:
99:1a:fe:52:c4:eb:4e:af:c2:b7:0b:46:7b:61:0c:92:ae:90:
99:c8:7a:0e:5a:8e:ea:1b:2b:bd:99:34:3e:9a:f8:73:de:bd:
00:34:8d:54:bb:21:3a:0c:fa:61:16:2a:d6:bf:23:56:e9:8e:
3a:de:2f:3d:8c:9e:39:82:17:5a:04:0c:71:49:25:3b:8a:5d:
9a:b2:1e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:44:57 2025 by rpki-client