Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5821854a-b87c-3ce0-91e0-20156ceb09ee.roa
File: 5821854a-b87c-3ce0-91e0-20156ceb09ee.roa (raw, json)
Hash identifier: ZJ+ybJyb69RopbbciCaqytpL5/EGjn8gAxKQB7xFBFg=
Subject key identifier: 16:B4:0A:6E:E2:7E:37:B6:D5:6D:A1:6F:1B:50:7C:C6:EF:A9:C7:96
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848304499C886A3872D3A7B3980
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5821854a-b87c-3ce0-91e0-20156ceb09ee.roa
Signing time: Fri 13 Dec 2024 03:03:55 +0000
ROA not before: Fri 13 Dec 2024 03:03:55 +0000
ROA not after: Thu 13 Mar 2025 02:03:55 +0000
asID: 13335
IP address blocks: 172.71.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:44:99:c8:86:a3:87:2d:3a:7b:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:03:55 2024 GMT
Not After : Mar 13 02:03:55 2025 GMT
Subject: CN=d4e96b7e-d56d-4d63-92a5-77c9e39c5656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:09:f8:1b:47:a3:0b:19:89:98:a1:35:a8:ff:
cc:72:34:72:12:1c:f8:e8:ea:2a:20:2e:32:70:6d:
77:11:8a:25:fe:7b:ed:47:11:2f:38:66:15:31:b6:
a8:e6:25:da:5d:09:11:eb:17:e1:af:9a:47:25:99:
ab:9f:78:cc:d4:f3:52:2d:82:3f:47:ba:76:a7:51:
5c:11:ca:9c:71:c3:0a:9e:9b:a1:04:82:36:0a:22:
93:74:66:a1:f1:6e:d4:8b:cb:e3:03:11:13:29:9c:
ac:7a:fc:76:d8:20:35:aa:fd:db:c0:96:ce:6b:b4:
b5:05:2c:e7:64:68:1a:37:9f:87:99:c6:87:3a:9d:
79:fc:ae:da:dc:8e:59:4a:92:ef:df:2d:fd:09:e3:
fa:4f:ab:10:04:a8:3c:5c:86:fb:d8:7c:55:a8:91:
87:d8:53:2b:d9:e4:64:b1:fd:4a:41:c8:ad:84:a5:
28:b1:75:41:e0:b2:60:b2:52:26:31:76:38:ff:59:
7a:b3:57:12:9f:f7:2d:06:a9:37:d2:32:a7:66:fa:
7f:9a:bf:d6:d9:56:b5:cd:1a:03:72:e6:a8:a7:84:
bd:5d:13:c2:9b:37:19:30:d7:53:03:ee:37:6a:23:
2d:aa:1d:72:b1:b2:f6:82:83:1d:34:65:79:8e:2e:
d1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B4:0A:6E:E2:7E:37:B6:D5:6D:A1:6F:1B:50:7C:C6:EF:A9:C7:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5821854a-b87c-3ce0-91e0-20156ceb09ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:1b:2b:07:8c:53:a6:36:60:6f:ee:1f:29:72:d2:d7:38:7b:
11:e6:ae:a6:f3:75:8e:99:cf:68:60:fc:0f:24:fd:ac:02:cd:
e9:58:88:95:82:97:d1:0b:5d:05:14:15:cf:3a:16:d6:14:dd:
ad:99:9c:43:da:4a:90:44:cb:91:a5:fc:14:f7:a5:4e:9f:03:
89:e7:48:5e:b3:0c:b6:b5:70:f6:ca:dc:93:52:c6:d2:fd:23:
51:96:da:fa:4c:31:94:14:26:86:e4:ca:f8:b7:86:18:7b:f6:
dd:cb:3b:ac:8d:a6:69:f8:47:b6:2c:d9:af:93:5e:72:ea:04:
a7:49:81:2e:ad:94:ba:fd:df:9d:84:49:20:5f:25:98:be:28:
02:eb:99:eb:f0:75:9f:70:5b:c0:00:6b:0e:22:bf:1a:27:46:
4a:be:52:b6:b0:c9:b5:cf:13:57:65:f3:3b:89:9c:b9:58:6e:
41:f9:1d:6d:93:ed:85:c0:fd:a6:67:bd:81:9e:cd:4c:05:ba:
d4:84:0d:b0:23:b5:4b:98:28:15:ff:2e:a8:67:d6:39:3a:22:
a6:a0:17:14:3e:3d:d7:76:21:14:63:a5:ab:ab:61:94:e5:44:
98:c9:12:3d:27:2b:3c:21:01:29:c4:2f:98:85:ef:7f:93:43:
29:94:a6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:38 2025 by rpki-client