Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a0b08bf-c8f1-3930-97e9-8d2af5d6756b.roa
File: 4a0b08bf-c8f1-3930-97e9-8d2af5d6756b.roa (raw, json)
Hash identifier: ELiNB6Ftec7mVctrNHe7+pE3Cv3XaeAUKya1gZIt1aM=
Subject key identifier: 98:2B:B2:BF:CB:F3:0B:EF:E7:11:86:2D:19:22:21:20:46:C7:F5:A1
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482798DC7D3763B57C401B3FC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a0b08bf-c8f1-3930-97e9-8d2af5d6756b.roa
Signing time: Tue 10 Dec 2024 00:31:25 +0000
ROA not before: Tue 10 Dec 2024 00:31:25 +0000
ROA not after: Sun 09 Mar 2025 23:31:25 +0000
asID: 13335
IP address blocks: 172.71.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:98:dc:7d:37:63:b5:7c:40:1b:3f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 00:31:25 2024 GMT
Not After : Mar 9 23:31:25 2025 GMT
Subject: CN=3bc95152-a2d1-4e23-abf5-38a8722853ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d7:1c:8e:05:b7:30:b5:0f:28:0a:e6:d0:4f:
1e:01:f7:ff:47:5f:34:f6:e1:49:87:70:be:a1:a4:
dd:28:c8:b5:01:50:87:3e:16:67:8d:54:2c:54:5e:
72:10:ec:68:f0:8b:e1:ae:e2:fc:d3:5a:91:f6:47:
cd:f0:73:42:14:c0:1c:06:23:0f:1e:24:61:af:22:
3f:60:eb:c3:89:3d:7e:97:08:78:28:95:75:72:a4:
68:0a:67:4d:e0:72:d7:81:75:df:4f:64:72:ce:d9:
86:5e:9f:24:94:dd:53:ce:1c:0b:7a:71:93:0b:73:
92:56:80:1f:ec:7e:96:2a:32:74:cf:e9:c5:9c:13:
03:ce:0a:d1:6c:35:e1:3f:a3:99:47:e6:3f:11:ad:
f1:05:64:a4:66:9e:3d:9b:d7:c4:bb:f2:02:c7:b5:
b3:28:ee:ed:7a:99:3b:d1:60:2a:d0:09:2d:15:2a:
05:49:9a:07:20:1a:fa:01:0a:80:a6:1a:82:5b:24:
d7:23:96:93:07:89:2f:8a:cb:2a:65:27:bc:7d:23:
a3:34:c4:db:4b:d0:63:8f:b3:6e:18:18:91:7c:97:
59:cf:3f:b3:f3:60:80:32:2e:74:70:c2:c5:6b:65:
b7:40:09:9b:c1:61:4f:34:5b:67:69:a6:44:e9:27:
4c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2B:B2:BF:CB:F3:0B:EF:E7:11:86:2D:19:22:21:20:46:C7:F5:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a0b08bf-c8f1-3930-97e9-8d2af5d6756b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:67:7e:ae:80:da:80:da:93:c9:2d:59:f7:a5:83:2e:f7:cf:
e4:18:3e:7a:1b:39:c6:7e:66:d0:c6:97:b8:f2:b6:d8:2c:a3:
9e:69:db:e4:a4:45:63:d0:46:74:31:2a:d0:f0:c1:68:c8:18:
8e:93:d3:62:02:7b:ac:52:02:55:85:9d:39:02:6f:29:17:a4:
93:56:47:b7:0c:fc:02:26:8f:ec:59:b4:e2:1e:c2:0a:b4:e9:
7f:03:27:31:bb:1a:de:9f:9b:b5:aa:56:4c:8d:aa:35:58:c3:
cc:90:aa:51:a5:b2:7d:b2:c1:70:5f:0e:a7:34:7a:d6:47:17:
c8:ad:c2:9c:5c:ad:82:ce:04:94:ec:ad:22:81:6e:4f:9f:48:
6f:b5:a2:75:21:6d:e7:da:5f:78:6a:04:e9:31:1c:09:2a:ef:
e7:1e:34:b9:7c:8f:6d:20:15:bb:35:df:d0:cc:ee:5b:e4:72:
f3:41:23:c0:8d:7d:40:4a:77:c7:05:1f:b6:36:1d:71:fd:7c:
e7:eb:47:bc:eb:77:df:67:2e:e5:1b:3a:3b:b3:a5:26:75:b6:
1f:d6:b5:41:d5:ee:20:1e:ce:d1:d3:9a:87:1a:d9:cf:3f:52:
14:d5:2b:01:d0:40:a3:45:76:df:dd:07:d3:ae:f6:da:cd:e8:
df:89:60:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:03:36 2025 by rpki-client