Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1dbcfc8e-8f4b-38ff-afcd-88bb11ab0a49.roa
File: 1dbcfc8e-8f4b-38ff-afcd-88bb11ab0a49.roa (raw, json)
Hash identifier: R+t99ed5TbOpikumu/S1LWpD13o8V4+w9UvaA76cugg=
Subject key identifier: 2F:2B:0D:A0:95:CE:81:AC:29:81:B4:C0:40:47:9B:44:DA:91:A9:62
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848280DEE309ACA399F82F6B800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1dbcfc8e-8f4b-38ff-afcd-88bb11ab0a49.roa
Signing time: Tue 10 Dec 2024 04:27:17 +0000
ROA not before: Tue 10 Dec 2024 04:27:17 +0000
ROA not after: Mon 10 Mar 2025 03:27:17 +0000
asID: 13335
IP address blocks: 172.71.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:0d:ee:30:9a:ca:39:9f:82:f6:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 04:27:17 2024 GMT
Not After : Mar 10 03:27:17 2025 GMT
Subject: CN=772346d2-a476-452a-a22e-8b3a4499e8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d3:4d:6f:26:fa:76:4f:f7:fa:e7:19:c7:5c:
79:4d:59:0e:71:b8:3c:6f:87:f2:59:f7:4c:cd:24:
c3:bd:bc:f8:66:fd:5e:c0:47:2b:6f:fe:85:c4:4c:
2c:ec:24:e7:0e:7f:34:00:24:03:a9:c3:d0:91:2e:
d9:ef:6b:14:9e:8a:f5:2c:c3:71:35:04:a5:44:1b:
a3:c4:1e:ec:1d:dd:b7:ea:0b:b5:7a:35:c0:ea:69:
da:95:86:ee:6e:c1:12:d4:91:11:2d:08:9e:da:e4:
49:46:72:0b:cc:ba:d3:a4:30:d7:54:78:1b:91:7d:
04:6b:75:16:14:7b:8f:3f:a8:b8:3e:73:28:b7:df:
c4:6d:bd:23:fd:82:d0:ba:b6:bc:04:6e:3a:11:c5:
72:e0:b0:f5:e7:83:d3:2d:31:72:84:02:b4:c2:d6:
31:6f:59:89:cd:33:98:0c:cd:98:19:e1:8d:29:db:
18:e6:c4:8e:47:51:a4:ac:86:7c:69:12:60:7d:b1:
ad:9d:f7:6f:ab:48:21:a2:b0:81:15:67:5c:31:73:
53:95:25:39:e3:1c:dc:f7:b1:f5:d2:1c:20:19:b7:
c1:37:05:3a:ba:bd:e4:40:54:c1:ca:39:84:14:36:
05:28:14:4b:71:73:07:7c:a0:de:83:b3:c5:99:d7:
28:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2B:0D:A0:95:CE:81:AC:29:81:B4:C0:40:47:9B:44:DA:91:A9:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1dbcfc8e-8f4b-38ff-afcd-88bb11ab0a49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:9e:4c:e6:76:b7:07:07:b4:57:e4:8b:c4:36:04:77:ee:1a:
37:00:80:77:c9:72:1e:f4:2d:4c:6a:09:82:95:67:21:39:4d:
71:7f:58:d7:30:39:54:b6:55:d3:8d:89:d8:9f:1b:fe:1f:42:
91:c4:22:35:2c:72:66:ab:6e:f2:3d:bb:3c:4b:47:e8:b3:da:
51:d0:74:b1:c4:76:01:d6:cc:c1:10:07:6e:3f:30:6b:31:f1:
dd:42:fe:b1:5c:ed:6a:ed:b6:90:27:81:95:ff:3a:9f:2d:23:
db:2a:08:cf:ab:6f:91:bd:db:35:c0:03:f9:08:1e:1f:cb:1b:
c1:31:b2:87:fe:90:f1:42:ba:3e:48:e7:42:ab:ea:db:cb:8e:
99:a8:a9:49:be:bd:33:ef:19:e5:77:54:73:cc:de:5d:5a:29:
94:0a:e7:cf:c1:38:26:1c:4b:1a:fc:0b:1e:58:3a:5b:33:1e:
c6:b3:bc:a5:91:e6:53:02:e7:56:62:b0:a7:43:00:21:f1:43:
10:34:7d:b6:65:00:5f:c5:66:04:dc:e8:c6:ce:bb:a2:96:f8:
61:d3:fe:17:e9:89:2f:b8:8c:30:1d:e1:c5:42:3f:0b:dd:91:
37:d5:db:fa:10:b7:13:3c:4f:d9:d6:9f:35:82:50:db:7c:15:
c3:bd:aa:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:56:24 2025 by rpki-client