Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d76467d-0d4d-3e2b-ad26-dd2ed8276f21.roa
File: 0d76467d-0d4d-3e2b-ad26-dd2ed8276f21.roa (raw, json)
Hash identifier: 6fiFmxgAIOJP23ob2Vflemo7lgNJkjmnMIuzAC93GYQ=
Subject key identifier: A0:77:E7:D6:25:12:A2:5A:87:6E:6F:CB:7F:A5:35:14:C5:EB:1A:E2
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858483057F06945911FD94FAEC604
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d76467d-0d4d-3e2b-ad26-dd2ed8276f21.roa
Signing time: Fri 13 Dec 2024 03:42:52 +0000
ROA not before: Fri 13 Dec 2024 03:42:52 +0000
ROA not after: Thu 13 Mar 2025 02:42:52 +0000
asID: 13335
IP address blocks: 172.71.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:57:f0:69:45:91:1f:d9:4f:ae:c6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:42:52 2024 GMT
Not After : Mar 13 02:42:52 2025 GMT
Subject: CN=f3479944-1bda-49ad-a2cd-dd36c5648678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:77:12:b3:5c:8f:4d:1c:b9:e2:a7:27:56:95:
1c:53:bb:f3:df:91:38:b4:33:f9:ee:c6:d4:0a:02:
a7:c3:88:65:1c:a8:46:a3:be:fa:10:78:c2:a4:04:
71:09:17:5d:d6:50:ee:fd:ae:9a:f6:3f:32:f7:c1:
a5:2b:56:da:da:3a:7b:d5:18:75:9a:8b:ad:44:0e:
45:ff:d7:e6:74:2a:76:93:20:1d:59:41:7d:00:07:
bd:56:91:0b:9d:30:08:13:2c:47:6a:b8:29:d7:b3:
c4:57:3a:79:ba:b7:b0:6f:49:aa:14:ba:89:dd:3f:
3e:26:3c:dc:de:fe:fb:6b:48:6c:46:61:40:f6:33:
2a:de:f8:45:d0:fd:66:0e:2a:85:ff:be:79:d1:a4:
fa:b1:49:69:0e:06:18:22:72:00:be:7d:27:0a:7f:
a6:7c:c2:0f:15:e9:f0:aa:ad:7b:cd:fb:01:f1:8f:
32:d1:46:ec:f3:4d:90:6d:f3:5a:24:ad:af:52:45:
53:f3:02:4c:20:27:c7:ab:09:c0:ce:d2:b0:c4:2f:
10:ab:52:11:23:d4:5a:11:8c:eb:ce:4a:d1:15:32:
78:76:4a:12:e2:d8:41:39:1b:ef:f0:de:13:99:c9:
2c:cd:a1:50:ce:dd:55:42:89:86:36:5e:37:70:0e:
26:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:77:E7:D6:25:12:A2:5A:87:6E:6F:CB:7F:A5:35:14:C5:EB:1A:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d76467d-0d4d-3e2b-ad26-dd2ed8276f21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:2b:97:ee:6b:e1:9c:8f:dd:d1:db:d0:f7:d7:56:ab:a6:7c:
3c:2c:34:0f:55:10:f7:e6:fd:f5:7f:34:64:cb:a6:61:7c:9b:
f8:55:f3:43:75:26:6b:af:3d:ca:79:3b:4a:43:6c:5d:50:2d:
bf:d0:08:e4:31:87:ad:2a:ab:01:0d:fe:af:8f:89:89:b7:46:
9a:f1:7f:15:c2:52:c3:99:59:86:ef:c4:79:5b:d1:3c:00:5c:
9e:ec:aa:da:d6:cc:40:0a:37:df:99:35:06:99:e7:6e:c1:67:
52:55:38:12:11:c0:07:da:0b:f7:d1:21:3e:23:f7:f1:9d:63:
43:f2:b4:6a:50:aa:9c:89:86:84:72:e6:70:2c:00:2d:b3:b9:
d0:a4:5f:66:15:af:ac:02:7d:42:a5:11:ee:ae:eb:b8:96:ff:
03:62:24:f0:a9:9b:ab:21:4c:f9:89:50:cc:2f:86:a2:2f:83:
98:6e:9d:47:a5:8a:0a:4d:e9:31:0b:f2:70:a9:2b:99:b2:44:
d5:d7:9a:09:aa:15:c9:a0:b9:c3:b5:d3:8f:ad:c9:94:82:02:
57:0b:b8:e6:b7:22:ed:1d:9b:cd:0f:ba:91:ff:dc:22:f3:29:
1d:5f:47:17:0d:10:82:11:6f:3a:fb:d9:f7:6c:c4:71:a2:30:
61:4e:aa:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:45:58 2025 by rpki-client