Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a931268-42a2-37de-83f2-7c24bc4eaa9c.roa
File: 5a931268-42a2-37de-83f2-7c24bc4eaa9c.roa (raw, json)
Hash identifier: Yiw8aCAFOu2CiKrOe+grmqENBPPK684MpuxhA49XLmY=
Subject key identifier: 6F:4F:75:79:F8:DA:9C:76:AD:D3:C8:BF:6F:5B:69:1E:C4:51:97:74
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858483045CA68794C76A7690E4600
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a931268-42a2-37de-83f2-7c24bc4eaa9c.roa
Signing time: Fri 13 Dec 2024 03:06:18 +0000
ROA not before: Fri 13 Dec 2024 03:06:18 +0000
ROA not after: Thu 13 Mar 2025 02:06:18 +0000
asID: 13335
IP address blocks: 172.71.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:45:ca:68:79:4c:76:a7:69:0e:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:06:18 2024 GMT
Not After : Mar 13 02:06:18 2025 GMT
Subject: CN=b0b4dba9-5423-4fd9-a680-c98d911f7517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b6:7f:34:c6:59:0a:c4:1f:35:ff:54:82:38:
ac:5d:c9:3a:1f:fc:da:95:ce:51:8c:57:48:37:8d:
2c:da:d1:83:86:5d:cc:f6:16:23:ca:5e:00:37:d8:
ee:bf:30:2e:36:c0:28:df:dd:46:cd:2e:16:5e:40:
4e:0f:f4:a4:5a:dd:af:7d:1c:21:26:45:4a:65:9a:
5e:f1:9c:19:4b:e8:04:0c:3e:75:90:2b:c5:4f:30:
f6:b5:8a:74:5a:47:3f:f0:1f:b2:1c:49:b5:31:3d:
49:b3:80:19:01:18:a2:c0:fa:ef:43:77:92:e8:43:
6e:9c:48:24:de:88:16:78:e4:86:85:50:d2:56:21:
d7:7e:e6:6a:98:64:da:7b:de:02:b8:de:68:49:3b:
e7:96:8b:89:40:4c:8d:dc:f0:75:80:37:5a:d8:09:
08:57:d9:0a:f6:f4:53:1a:4a:09:90:36:f0:c5:7b:
c8:03:17:6a:7a:13:08:6e:67:b8:ff:26:d8:62:7d:
f2:5c:bc:98:4e:71:83:d0:a3:88:ca:85:11:6b:e0:
14:f4:6c:26:c9:e9:71:aa:f7:a9:48:4d:62:32:4a:
a3:33:6c:3b:ba:02:9e:f5:e6:81:d5:73:06:39:3a:
c0:c6:77:5e:85:a0:ea:b6:82:db:fb:d5:02:d3:bc:
7a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4F:75:79:F8:DA:9C:76:AD:D3:C8:BF:6F:5B:69:1E:C4:51:97:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a931268-42a2-37de-83f2-7c24bc4eaa9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.155.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:e3:42:49:28:8f:28:b7:f2:53:aa:d5:50:22:cd:b8:68:17:
12:de:ae:0e:4d:40:c9:ea:93:2e:4d:45:39:68:8a:bc:0f:fc:
8a:25:33:50:71:9d:fa:ef:c6:29:2c:d8:92:de:fb:fd:6b:da:
57:06:3c:f9:ec:a2:51:ef:f0:cd:18:e7:10:14:5a:77:d6:db:
4e:5a:8d:5b:6d:2d:d4:d4:fb:5b:8c:6c:44:ff:58:1c:c7:77:
76:87:ae:f7:b0:fd:37:3c:0d:20:1c:bc:34:b4:93:44:93:4b:
e7:c5:9e:5f:e3:10:16:a7:4f:d5:8d:97:68:d2:68:c5:b6:d9:
34:00:6f:f5:71:2c:8f:b6:f0:74:c9:84:1c:ae:cb:b4:ea:6a:
ad:49:4c:16:e0:b8:08:d1:fd:45:37:d2:c9:49:63:34:1a:a6:
90:72:47:8f:d8:5a:cd:bf:83:72:bc:86:6d:d0:23:b0:56:88:
bc:f7:6c:e9:64:00:6e:de:03:4b:1b:68:78:e6:56:52:9d:5b:
c0:3c:87:10:6a:ea:ce:ae:6f:85:aa:c4:6f:d1:f2:6f:d1:aa:
11:1b:c0:ca:3b:e3:45:74:99:4e:54:f1:68:2b:cb:ca:fa:ad:
f1:4f:59:d2:7d:a3:4e:51:bd:86:05:8a:03:b6:f1:c2:31:66:
cc:31:fd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:09 2025 by rpki-client