Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0da6d8fd-8256-3417-8ced-8017e077244e.roa
File: 0da6d8fd-8256-3417-8ced-8017e077244e.roa (raw, json)
Hash identifier: FkoTI1kTMeuAM8Q1UlM4hvjutv1dDIA5h2Uz8EK03A8=
Subject key identifier: 30:12:85:B7:BB:43:19:7D:E4:2B:46:A8:77:7F:39:D2:A6:40:48:04
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584825661CD8952FDF5839B96F80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0da6d8fd-8256-3417-8ced-8017e077244e.roa
Signing time: Mon 09 Dec 2024 05:37:32 +0000
ROA not before: Mon 09 Dec 2024 05:37:32 +0000
ROA not after: Sun 09 Mar 2025 05:37:32 +0000
asID: 13335
IP address blocks: 172.71.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:66:1c:d8:95:2f:df:58:39:b9:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 05:37:32 2024 GMT
Not After : Mar 9 05:37:32 2025 GMT
Subject: CN=fa68df0a-1618-4734-ba9a-cc08b179055f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8c:cf:52:c6:e5:01:13:2a:51:2b:39:a3:8a:
f1:57:0c:85:59:05:cb:69:89:6c:99:41:c4:22:d8:
bc:68:3e:21:6f:3c:16:2f:6a:8a:10:25:34:55:ee:
32:ab:b1:c8:50:76:14:08:f1:b7:fe:d4:45:10:be:
a3:74:f3:37:34:6e:bf:68:0d:72:d5:4d:0e:87:6f:
0b:b1:a6:16:1b:fe:a1:de:79:e9:5b:01:11:b8:a1:
94:40:84:88:cf:e3:71:0d:79:33:10:88:a6:1f:f9:
8d:e1:bd:e8:a9:f4:03:e0:42:54:a6:86:ac:e7:d4:
ce:79:ec:41:56:2b:ca:3e:ee:26:bb:e2:e9:b4:31:
06:59:59:28:52:1c:bb:cc:04:76:9d:e5:2e:7b:fa:
0a:b3:19:dc:97:09:95:37:0d:37:e8:ff:92:f9:42:
b4:7e:ee:de:29:7e:71:8d:19:e0:89:de:c2:49:ea:
bf:49:fb:85:18:8b:fb:e6:2d:64:02:2d:5e:d3:7f:
75:c6:29:61:dd:ae:e9:23:7e:84:2b:95:75:fa:bf:
94:61:61:e7:a0:cd:6e:b6:e0:2f:a8:7f:a5:ad:52:
ba:aa:ce:68:72:75:e3:bc:3b:ee:38:62:11:9d:d6:
79:30:79:32:09:98:32:4b:da:ac:2a:27:be:ae:d3:
b5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:12:85:B7:BB:43:19:7D:E4:2B:46:A8:77:7F:39:D2:A6:40:48:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0da6d8fd-8256-3417-8ced-8017e077244e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.167.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:a0:2b:1b:6b:c0:23:b4:04:28:c7:8f:41:88:aa:4b:60:1f:
78:5e:2e:ef:a1:45:84:a6:8c:11:dc:6d:cf:d6:3a:9b:37:f1:
da:73:10:6e:17:9c:26:20:ca:3b:ab:8b:71:c4:5e:f5:17:c5:
c5:5c:62:dd:15:d9:29:3c:a1:2b:3b:61:7f:32:51:cd:a4:94:
d3:4f:0e:3b:ec:26:61:84:b9:74:33:d3:6e:3d:45:9f:af:fd:
07:4c:0e:63:03:e9:b0:ce:98:e1:8e:c2:0f:49:ab:cc:86:88:
38:1d:1c:d5:d7:7c:89:53:d0:04:8e:fe:f1:40:a7:78:e4:8c:
d7:a2:33:3a:73:6f:99:73:d7:35:a8:6f:21:7f:26:33:97:5e:
d3:f8:16:e7:30:c6:93:83:c5:54:07:87:6b:8a:a5:61:41:8f:
1d:28:8c:5e:3b:19:c6:40:6e:34:7b:98:bb:8d:c2:55:14:ae:
41:df:06:77:74:1c:3c:27:20:9f:b5:bc:dc:8b:71:08:1c:75:
87:3d:a8:c7:32:11:02:90:11:48:ee:66:5f:29:6f:a9:a2:0f:
84:e7:c8:12:08:6b:12:ec:c9:1d:52:b8:9e:1d:56:1b:dd:00:
da:47:df:aa:b3:92:cd:cd:03:0b:53:22:80:28:b6:70:b4:95:
d0:7a:ed:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:11:26 2025 by rpki-client