Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b2ebbe8-0b6a-3db2-ae9c-b3c9f78e0059.roa
File: 2b2ebbe8-0b6a-3db2-ae9c-b3c9f78e0059.roa (raw, json)
Hash identifier: TuNyN3GBMz8I7OMaj3Eq9XICz6WSDOb1tr/3XyNyEk0=
Subject key identifier: 69:B3:A8:83:42:7F:CE:9A:BE:0A:8E:1F:59:3B:46:11:2F:87:10:58
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827B0E39775367ABE4A81FE00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b2ebbe8-0b6a-3db2-ae9c-b3c9f78e0059.roa
Signing time: Tue 10 Dec 2024 01:19:49 +0000
ROA not before: Tue 10 Dec 2024 01:19:49 +0000
ROA not after: Mon 10 Mar 2025 00:19:49 +0000
asID: 13335
IP address blocks: 172.71.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:b0:e3:97:75:36:7a:be:4a:81:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:19:49 2024 GMT
Not After : Mar 10 00:19:49 2025 GMT
Subject: CN=9f544efc-df08-49d8-a68b-dbcbfd5ce72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:76:9e:58:ac:31:14:56:cd:93:22:61:69:19:
a2:0b:1e:95:61:de:84:0c:73:cc:8e:60:4d:49:f3:
e0:60:cd:50:fb:a3:aa:63:1d:0f:30:17:8c:08:fd:
df:e2:38:d4:56:b6:e9:19:ce:4e:ad:64:d2:9d:e3:
ee:e3:f9:80:15:05:9d:7f:94:3e:c4:da:f1:3d:a3:
73:b3:5e:77:ad:5d:97:0d:aa:a0:e6:30:94:98:b9:
da:56:b6:ab:79:5c:6e:a0:24:be:90:fd:5e:23:d9:
e5:cc:b3:61:37:61:af:1d:c6:54:21:0c:ad:66:13:
b3:7f:7e:f2:18:ae:94:ec:a8:92:06:ef:5e:12:24:
58:a5:b0:86:82:f7:14:b2:4e:2c:2c:d9:ad:0e:22:
6c:d5:8c:4d:85:23:4b:fb:7d:66:ee:15:7c:96:d4:
a2:3a:9f:e3:b9:3d:50:fa:78:71:4d:94:09:3f:38:
54:b1:14:d9:65:e8:af:d3:d8:fa:d2:42:39:d6:90:
95:ca:f3:58:64:65:75:29:3d:60:42:47:15:b6:2f:
67:ae:fd:4f:a6:f7:ce:e2:32:aa:e2:73:8f:db:78:
74:59:e0:12:af:a4:7c:61:d7:fc:fa:32:b3:e1:c3:
b0:70:b8:a3:93:26:ba:0d:4a:77:e0:b6:f4:34:ad:
d9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B3:A8:83:42:7F:CE:9A:BE:0A:8E:1F:59:3B:46:11:2F:87:10:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b2ebbe8-0b6a-3db2-ae9c-b3c9f78e0059.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:34:79:8a:31:d6:44:3f:42:1b:b7:1c:8c:dc:36:44:fd:d5:
ad:03:d5:65:29:48:5a:bd:81:a7:34:94:8b:b2:3e:25:59:64:
95:8a:ed:72:8e:2e:4c:02:cc:85:7b:8a:2d:77:84:c7:94:60:
ce:59:7c:e0:40:1d:1f:75:ce:30:18:7a:31:c9:2e:72:e4:69:
49:21:c9:63:93:09:78:23:85:03:0f:f5:69:dc:ea:bf:93:32:
5d:5b:bc:f4:08:3b:1a:77:c1:a5:6e:e4:15:3b:a7:f6:b2:31:
9c:61:3d:a5:7b:a0:5d:ab:25:95:eb:90:ee:74:d9:50:90:12:
96:96:6d:b3:4f:7f:f2:c7:9a:0e:e3:71:f3:a4:65:5b:ff:7f:
77:48:26:95:67:59:8e:c4:2e:b3:98:1c:5d:4a:ba:81:e1:7e:
1c:1b:64:9c:08:4f:a9:cb:bf:cb:45:44:f1:b7:21:5b:9b:f4:
c6:68:d4:b7:23:93:eb:53:ee:df:8a:cb:13:1c:89:dd:da:36:
4b:e0:ff:5c:97:a0:50:46:cc:ed:73:3f:a5:7e:c0:46:90:2a:
19:18:6a:24:a7:56:83:a4:06:f1:64:1f:5a:14:66:a6:b1:43:
9e:b5:a5:19:b5:95:f0:1c:bf:0f:00:1b:c8:48:41:05:47:78:
8a:fd:22:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:42:51 2025 by rpki-client