Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0609dc2c-a297-30a4-9540-f6701a40773e.roa
File: 0609dc2c-a297-30a4-9540-f6701a40773e.roa (raw, json)
Hash identifier: UCcXo1k7bD6C8swFBIRdEB6pWS2dc2LnfAtPgAFKAHk=
Subject key identifier: 45:57:B0:D7:C4:C8:14:4E:7A:F5:C5:87:1B:AB:32:F4:C5:3E:7D:BA
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584830440DEA2FF6A6DD8F2D28C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0609dc2c-a297-30a4-9540-f6701a40773e.roa
Signing time: Fri 13 Dec 2024 03:02:49 +0000
ROA not before: Fri 13 Dec 2024 03:02:49 +0000
ROA not after: Thu 13 Mar 2025 02:02:49 +0000
asID: 13335
IP address blocks: 172.71.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:44:0d:ea:2f:f6:a6:dd:8f:2d:28:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:02:49 2024 GMT
Not After : Mar 13 02:02:49 2025 GMT
Subject: CN=8360268d-99c3-4dc6-bb26-1185786fd83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:33:ee:d5:d0:22:4e:2c:61:5d:5b:a0:69:7e:
59:70:48:64:42:84:63:3b:e8:c4:c4:2c:97:47:98:
ba:7c:66:a7:ec:12:36:1f:24:d7:94:ab:d7:07:6c:
ff:9a:70:dc:a6:66:b4:e5:3e:11:39:94:d8:57:6a:
35:8e:8a:6a:7e:06:9c:76:8b:9b:6b:c7:1e:ab:cd:
22:f4:dd:fd:68:a1:3d:e1:eb:f3:c5:ce:82:c3:ee:
f4:25:ef:a0:24:4f:1f:51:32:fb:7c:f8:88:d5:3a:
24:86:d9:cd:59:0b:b8:9f:d3:59:5e:30:b4:1f:8d:
69:d4:c9:50:09:cd:ec:90:11:7d:bf:0b:34:4e:dd:
fc:d0:47:dd:d5:8a:64:67:f6:25:10:3f:f5:82:07:
25:86:f3:ef:d5:43:41:34:e6:ef:ec:25:ed:a0:7c:
63:d1:50:d5:4b:77:f4:1a:71:d8:7f:39:ca:3f:eb:
64:b4:de:7b:32:b1:c7:5d:8e:21:e1:66:9e:33:94:
9c:fc:b1:bd:f9:e5:84:83:55:1b:ea:58:98:b3:d6:
76:d6:3a:d2:dd:05:09:47:cc:1c:7c:09:dc:47:3b:
f2:fa:ac:3f:d1:f6:c1:f6:09:a1:28:07:b2:a9:fe:
98:1e:ac:52:84:61:c7:3c:ee:0f:af:de:f2:01:08:
e8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:57:B0:D7:C4:C8:14:4E:7A:F5:C5:87:1B:AB:32:F4:C5:3E:7D:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0609dc2c-a297-30a4-9540-f6701a40773e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:fe:18:6a:ed:dc:cd:6f:4c:91:2d:34:b1:a5:91:21:4f:10:
ee:19:c3:f2:21:52:c8:98:c5:1b:0f:12:6d:63:37:2a:60:da:
13:e5:a1:ad:c1:6d:3a:3b:93:47:d9:0f:45:30:52:8a:c8:dd:
fc:88:f9:88:9a:af:ca:dc:ca:46:60:dd:0c:73:43:1a:93:c4:
44:b5:eb:1c:86:16:a2:fd:05:2f:ec:89:ce:6d:9c:b9:61:a7:
10:09:9e:7d:38:00:b8:df:4a:9f:e9:33:7b:f5:9a:f8:74:e9:
ad:a7:aa:99:ed:71:2a:ac:ff:eb:92:4a:4d:f6:85:8c:b3:f1:
2b:bd:0a:f7:67:99:54:e8:21:dd:1b:98:c4:50:9d:0a:15:f6:
29:1f:64:64:fe:8a:38:9a:a9:a9:40:f0:90:9c:b1:63:80:7b:
86:47:ea:f8:b7:c2:8f:6f:4f:1f:b9:20:07:d9:34:72:e4:88:
67:7c:7a:73:8f:91:19:8a:42:33:ac:d1:58:74:04:1d:35:5a:
ed:94:3f:4e:41:6a:31:5e:72:17:2c:19:72:ef:0a:19:a5:c2:
8c:63:83:00:f0:90:53:04:62:7c:52:95:90:b5:0a:57:d2:f4:
66:30:58:da:16:ad:99:5c:47:a0:e5:97:c6:50:18:05:48:d4:
ed:0b:2d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:11:19 2025 by rpki-client