Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09169042-bdfd-309c-8a6a-c175c945019e.roa
File: 09169042-bdfd-309c-8a6a-c175c945019e.roa (raw, json)
Hash identifier: fJIwJ2VUmE+XAgXtCVlacjBTTAQkXXmq+2jqb7nl0mc=
Subject key identifier: 76:08:D6:6A:F0:0F:38:65:32:61:8E:CA:45:C0:C2:4E:18:58:68:34
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858483043C50EAC2EEE9590EC3F80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09169042-bdfd-309c-8a6a-c175c945019e.roa
Signing time: Fri 13 Dec 2024 03:02:14 +0000
ROA not before: Fri 13 Dec 2024 03:02:14 +0000
ROA not after: Thu 13 Mar 2025 02:02:14 +0000
asID: 13335
IP address blocks: 172.71.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:43:c5:0e:ac:2e:ee:95:90:ec:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:02:14 2024 GMT
Not After : Mar 13 02:02:14 2025 GMT
Subject: CN=a0b46686-36b3-4c7d-a866-25efe7fc581a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5d:9b:a8:d0:d1:7a:4f:c8:de:9e:65:e5:b1:
fb:6a:c4:7d:99:7f:a4:de:a1:08:f7:30:28:6d:66:
d1:03:2f:c3:25:81:92:82:98:04:3d:c0:e9:eb:c1:
15:a5:9c:ce:5e:00:79:e4:f2:d4:94:e0:a4:a9:04:
8e:e5:9d:64:f6:3b:2d:ba:8d:b1:a3:e5:8e:a1:b1:
84:a1:20:11:bd:f0:b3:0b:9e:6c:d3:7d:a0:28:e8:
e4:81:db:69:9b:1f:e3:93:cf:bf:f3:01:42:fb:6f:
68:31:f1:3c:78:0c:55:e8:6a:c2:59:aa:1b:eb:7c:
95:66:33:e1:4c:c2:0d:bb:90:03:dd:94:f4:c9:e0:
9b:28:57:62:55:5d:f2:f1:37:18:a6:18:90:f0:7f:
95:63:cd:4d:1d:49:2b:5e:ac:98:8b:52:49:21:a8:
68:92:5d:bd:8c:dc:29:6f:50:86:f8:36:05:21:ac:
b1:d4:d7:04:2e:1a:39:ca:45:02:8d:09:d5:20:50:
8f:8e:d0:9a:ba:4e:33:93:c1:80:b9:d9:0b:d5:fb:
2a:1f:27:d8:a3:66:b4:8c:53:49:70:6d:ce:71:f5:
30:48:81:75:6a:44:09:65:0b:8b:a4:24:08:0e:7a:
c4:62:ae:7e:12:00:8b:32:74:b6:13:76:24:ec:38:
0a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:08:D6:6A:F0:0F:38:65:32:61:8E:CA:45:C0:C2:4E:18:58:68:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09169042-bdfd-309c-8a6a-c175c945019e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:3a:b5:cc:0c:cc:34:35:13:e2:5d:fc:eb:41:ef:88:dd:74:
25:81:1e:c6:16:db:c0:41:a5:75:ee:5f:83:1f:7e:72:77:a9:
41:10:e0:90:c6:8f:f2:90:b2:4d:93:c9:26:16:8b:da:62:ad:
71:38:67:d8:05:a2:47:ae:e8:ba:ae:82:09:6a:3c:94:18:23:
ef:6b:f8:cd:e6:76:c3:77:30:e0:a3:9d:96:03:38:9c:e8:25:
e6:aa:05:4f:ff:a6:b6:67:4f:e8:20:8b:b3:a9:f1:d9:21:13:
d0:80:82:6c:16:75:74:e6:49:5e:e1:e8:f1:01:a1:cc:19:65:
9d:31:26:ce:cd:e2:b9:9d:22:a7:36:69:2e:b7:f4:b0:26:28:
80:70:93:49:43:08:2a:7c:ec:69:13:b1:4e:46:d5:c5:e1:10:
f9:e8:66:9f:c6:e2:98:af:34:ab:f2:23:6d:6d:51:e4:b1:04:
20:73:71:17:58:83:9f:0f:d7:55:0a:d0:c7:a0:8f:14:c1:9f:
c2:23:ac:65:8d:80:21:90:9c:63:87:e6:1b:b4:12:bf:6c:0d:
1d:da:77:cf:3e:6f:84:c6:34:fb:6d:48:33:58:b6:5c:9f:0b:
c7:7c:47:42:50:6f:4a:a5:ab:5b:ee:fc:fb:e9:f6:a8:56:1f:
de:c8:87:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:12:12 2025 by rpki-client