Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5be2aeea-d732-35da-97e8-2d320af6755c.roa
File: 5be2aeea-d732-35da-97e8-2d320af6755c.roa (raw, json)
Hash identifier: fSkBTJ70LJwHvlKp+m7ahuOFukgcNIQk0ByyqlLNhd4=
Subject key identifier: 76:2B:00:6B:1D:52:73:3F:E1:D4:65:2D:34:E6:E9:9D:1C:2C:F1:F7
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858483058F7D735D065BE7CD43600
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5be2aeea-d732-35da-97e8-2d320af6755c.roa
Signing time: Fri 13 Dec 2024 03:44:57 +0000
ROA not before: Fri 13 Dec 2024 03:44:57 +0000
ROA not after: Thu 13 Mar 2025 02:44:57 +0000
asID: 13335
IP address blocks: 172.71.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:58:f7:d7:35:d0:65:be:7c:d4:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:44:57 2024 GMT
Not After : Mar 13 02:44:57 2025 GMT
Subject: CN=f51566be-a0b8-48e7-bdff-840ceae52c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:04:ba:61:bc:d6:8b:be:85:8c:36:d4:5e:
1d:22:e9:fd:21:6b:ae:b7:04:52:1e:42:c4:ec:df:
34:3c:52:73:e1:df:28:a3:aa:b1:5e:3e:00:0c:d1:
a6:57:e4:78:3b:dd:ec:df:37:5d:c6:ce:d8:fa:52:
11:df:92:c6:c0:c0:fe:86:bf:3b:a9:42:65:70:ed:
e8:96:e3:ac:42:fb:32:6c:21:c4:ec:e8:ec:e4:49:
3a:0c:5b:1c:09:b6:1b:40:3d:84:28:11:b6:82:61:
af:e2:bd:3d:e9:bc:10:76:58:19:ca:63:eb:d4:06:
4f:94:44:4a:71:81:69:12:2d:12:b1:f7:d6:04:98:
50:45:52:b1:bc:90:fc:35:98:97:a9:2f:ee:7f:cc:
04:c9:43:d6:94:28:bd:0e:6e:ff:72:2c:4a:a9:c3:
f4:18:e7:61:8d:6b:03:60:41:69:a7:aa:eb:e9:a8:
e9:a4:55:6b:c4:cc:af:d6:8a:64:e3:ef:8e:49:36:
f5:b0:96:5e:84:f6:7a:1d:37:73:43:3c:44:af:a4:
8d:af:c0:ad:40:d8:e7:9f:0c:b5:ab:f2:d0:b0:4a:
1f:4a:85:db:de:7f:65:bb:23:0b:58:4e:22:af:1d:
6f:0a:ed:39:86:08:2c:e9:3c:01:c6:cc:66:49:4e:
37:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2B:00:6B:1D:52:73:3F:E1:D4:65:2D:34:E6:E9:9D:1C:2C:F1:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5be2aeea-d732-35da-97e8-2d320af6755c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.227.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:6e:91:ce:39:93:34:fe:db:cb:6b:12:9b:08:e4:ad:c9:d5:
96:89:e0:d8:e1:fe:97:e5:9a:2f:16:d3:b9:48:6e:ab:99:6e:
66:57:bd:15:f7:c4:76:c0:e1:c5:c9:59:8e:3f:71:3a:c2:46:
81:78:83:d4:6e:b7:c2:79:72:87:40:25:dc:da:8f:0f:69:3f:
e6:64:41:fe:02:a5:1e:9f:0c:e6:b6:40:df:19:ae:5a:04:b4:
d6:84:8c:16:5f:6f:9b:7c:f6:6d:66:2b:fa:21:33:33:42:28:
b1:5e:18:19:6c:a9:04:bd:d3:c6:01:ed:d6:0c:13:cf:17:ac:
6b:63:e2:d3:11:bf:d3:0a:0b:8c:8f:33:9e:0f:1a:02:bc:eb:
e6:d9:1b:ac:20:1d:56:cc:95:64:c3:08:28:37:c1:c7:e5:ff:
c6:44:b2:b9:7c:27:c1:a6:f3:6e:c9:cd:a6:f9:22:15:6c:ae:
4d:33:d7:aa:ae:5b:2e:16:02:15:fe:84:b2:f0:78:2f:b5:89:
4d:92:b2:33:4f:e3:97:cd:ae:a2:18:25:66:59:59:d9:e5:24:
c4:75:5a:1d:90:b8:ee:95:c3:c5:6f:21:a2:88:ab:38:2b:c3:
cf:82:f5:d0:2a:2c:58:25:6b:87:7b:b2:4d:c5:79:b2:fe:40:
2b:0d:95:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:00:24 2025 by rpki-client