Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42d96165-2b1c-38bd-95f0-8c06ac45d072.roa
File: 42d96165-2b1c-38bd-95f0-8c06ac45d072.roa (raw, json)
Hash identifier: Hx1tI6eK3V39tbyKbGvlVwcI4bwdZXFVOkMq1u6WWSU=
Subject key identifier: 98:49:4C:57:C5:74:4E:44:9E:B3:74:56:BA:CE:47:E1:43:9B:D5:E5
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584830461D89B4BCF4A609127410
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42d96165-2b1c-38bd-95f0-8c06ac45d072.roa
Signing time: Fri 13 Dec 2024 03:06:58 +0000
ROA not before: Fri 13 Dec 2024 03:06:58 +0000
ROA not after: Thu 13 Mar 2025 02:06:58 +0000
asID: 13335
IP address blocks: 172.71.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:46:1d:89:b4:bc:f4:a6:09:12:74:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:06:58 2024 GMT
Not After : Mar 13 02:06:58 2025 GMT
Subject: CN=92daad24-0c7a-4e4d-ad74-1c2ac4b767cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d9:b5:6b:a7:1e:32:6f:15:93:93:08:a7:27:
e7:9e:45:e6:4d:6f:6b:e2:a2:48:b1:6b:f7:34:42:
8b:0d:72:ed:05:85:98:16:a0:a4:5f:9d:d2:37:d1:
62:aa:cc:26:4e:0f:8b:81:6f:a3:2c:16:a3:1c:31:
54:cb:f0:82:36:9a:bd:77:cf:74:74:81:96:5f:44:
53:a3:1a:8f:a1:13:98:9e:f3:4c:84:5a:00:a1:2d:
61:7f:da:d7:c2:3a:c6:8e:f5:8a:cd:8c:12:8d:e6:
17:bc:56:40:42:b5:1a:e2:d8:f5:57:71:b9:88:16:
d4:bb:5b:51:4e:a7:ec:69:d6:b0:02:cd:b7:89:cf:
17:94:a3:fc:4f:94:f9:fc:b0:7b:5c:fb:33:40:a3:
23:49:ad:92:a7:c1:e0:7b:4a:b4:b4:e4:86:eb:c8:
7d:68:88:21:79:53:f8:bc:9a:51:e5:91:12:97:a3:
50:b2:a6:15:4a:09:e3:b1:09:02:05:b8:c5:31:9a:
f6:69:ee:b2:ec:e8:11:ab:cf:49:c6:2b:35:fd:c1:
1b:ea:77:de:dc:1a:cb:78:b9:b5:92:30:59:aa:e1:
61:7a:c7:ce:87:30:4b:7e:f3:db:bc:be:47:c8:4d:
8d:c8:e0:96:62:30:80:c5:66:73:9e:c0:e7:c9:97:
d4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:49:4C:57:C5:74:4E:44:9E:B3:74:56:BA:CE:47:E1:43:9B:D5:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42d96165-2b1c-38bd-95f0-8c06ac45d072.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:3d:14:72:d1:d9:c5:a6:cc:0e:67:27:9d:c0:bd:be:b0:31:
e9:3f:33:c1:0a:26:53:e1:58:73:2f:35:84:58:f3:dd:62:ac:
e5:7a:30:3a:46:8a:1d:e0:13:bd:bc:47:08:e6:36:26:cc:61:
c3:46:62:33:08:4d:d6:67:9f:bb:09:2c:35:e6:26:71:b7:17:
ec:15:e3:ea:78:5a:fc:75:bc:30:95:24:a2:8e:b9:a6:0f:34:
26:ba:47:07:18:51:93:40:93:6e:28:bc:42:aa:10:50:a9:8e:
65:10:ec:48:53:65:d5:4d:fd:e3:3d:35:4f:0f:89:2c:84:ca:
e9:39:8d:4d:0f:61:59:84:43:31:d0:39:e0:32:03:ed:29:db:
c6:29:9f:f7:ee:74:79:66:1f:1d:3e:15:dd:b1:72:0e:e6:ed:
ea:08:7f:7c:e2:65:8f:5b:8b:1a:67:de:0b:a1:f8:b3:67:19:
c3:d6:16:31:7d:db:49:ff:ad:6d:39:bb:b9:5f:22:f0:de:91:
67:8b:1d:01:4e:0b:ac:c1:74:65:d5:03:a9:18:08:0d:94:f4:
6c:40:52:66:1f:0d:37:4c:29:14:2e:fa:3d:6d:70:e1:a1:77:
74:d8:31:2f:b5:ca:7c:5e:a7:19:7b:6c:27:e3:65:65:f6:98:
86:5f:ee:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:58:33 2025 by rpki-client