Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/718f4ab1-4303-3639-ab85-9c7874df9151.roa
File: 718f4ab1-4303-3639-ab85-9c7874df9151.roa (raw, json)
Hash identifier: 0boHxlSzDysxwth2diAiPSd5U60nQomhmTlvLqCF+zE=
Subject key identifier: 74:34:4B:EF:16:53:46:21:05:65:EA:F0:3A:86:02:81:7F:09:B9:83
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584830587C0C81B4B9495EB665D0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/718f4ab1-4303-3639-ab85-9c7874df9151.roa
Signing time: Fri 13 Dec 2024 03:43:58 +0000
ROA not before: Fri 13 Dec 2024 03:43:58 +0000
ROA not after: Thu 13 Mar 2025 02:43:58 +0000
asID: 13335
IP address blocks: 172.71.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:58:7c:0c:81:b4:b9:49:5e:b6:65:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:43:58 2024 GMT
Not After : Mar 13 02:43:58 2025 GMT
Subject: CN=f0d943c5-395c-42f1-909b-270bcb0f4e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:fd:8e:26:20:34:c9:1d:47:bd:d8:7a:22:
cf:ed:6d:72:e6:2d:04:9d:6d:e6:2f:0b:8c:b4:a0:
df:4b:1c:81:2e:70:68:58:3b:19:53:a8:f5:6a:7c:
37:93:ea:cd:a5:50:1b:95:16:40:b7:6a:5b:d0:d8:
2b:58:44:13:6d:81:5b:43:d5:b4:fd:5d:d5:0b:58:
0e:3a:d7:f7:ef:51:e3:bd:3c:bd:d5:38:0c:6e:5f:
6f:fe:8a:71:23:84:32:83:6d:03:5e:b7:2f:35:c3:
66:19:3e:8a:10:16:27:4c:b0:27:3c:95:c9:fb:42:
03:9d:e5:af:c9:7d:99:af:d1:e6:0f:87:dc:d4:83:
cd:2a:99:14:1b:3c:04:cf:20:d2:fe:0c:b5:d7:9c:
1e:79:08:e5:3c:b8:b4:47:f7:e9:c4:cd:f4:36:ab:
58:26:86:e8:c2:d3:c6:c0:f6:03:38:ee:27:df:ea:
58:8c:8d:f5:e5:7b:e4:fa:54:e4:ff:69:ba:59:b8:
fb:cd:f0:89:ca:75:d0:54:56:51:63:2a:d4:cd:4d:
12:41:38:41:d3:d4:47:1b:28:48:7f:40:10:2d:8c:
70:d3:54:f0:5f:15:ab:00:e8:57:16:18:1d:97:9e:
38:40:5f:9b:63:56:21:00:64:f0:c0:40:c4:87:c3:
87:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:34:4B:EF:16:53:46:21:05:65:EA:F0:3A:86:02:81:7F:09:B9:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/718f4ab1-4303-3639-ab85-9c7874df9151.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:98:5e:5f:17:be:e1:a9:2b:8a:4c:e8:68:42:54:db:f7:36:
5d:90:11:6b:dc:1a:a4:6f:fb:68:e1:4a:81:18:e6:7b:d0:32:
97:f8:d2:06:2f:73:d3:1a:e8:92:95:87:a0:85:e2:4d:67:14:
2b:1d:3e:ae:7d:7c:f4:3f:4b:26:b7:6e:01:38:8f:53:80:32:
d3:48:b5:b2:a0:b2:43:49:ab:12:db:e6:83:f8:2b:e1:a2:8f:
c5:f7:33:3e:05:c6:6f:f5:e4:02:93:4e:72:9f:5d:e0:87:80:
53:08:f9:0f:92:fd:ba:4f:47:d0:cc:f1:8e:81:5d:de:e2:3d:
49:b5:ed:63:74:3b:5e:10:47:31:49:9c:82:dc:e6:f4:48:22:
3b:43:9e:5a:e6:34:75:e9:05:ec:78:58:9f:2a:4a:97:64:48:
a8:3a:0a:b2:57:48:a3:6e:80:26:5e:eb:12:ad:83:aa:f5:9f:
66:61:7e:52:42:fd:7c:47:ff:5e:59:40:58:79:fb:fc:a9:44:
dd:55:ed:41:ec:fa:2a:f6:23:be:14:2f:c0:ca:df:a5:a3:60:
5c:bd:df:80:13:51:b8:10:32:95:59:ec:cc:7b:a3:ce:58:0c:
a5:2c:8b:6d:21:18:57:95:ec:d0:c8:fb:3c:6f:56:13:00:73:
79:63:7f:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgwWHwMgbS5SV62ZdAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMzAzNDM1OFoXDTI1MDMxMzAyNDM1OFowLzEtMCsGA1UEAxMk
ZjBkOTQzYzUtMzk1Yy00MmYxLTkwOWItMjcwYmNiMGY0ZTdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHz9jiYgNMkdR73YeiLP7W1y5i0EnW3mLwuM
tKDfSxyBLnBoWDsZU6j1anw3k+rNpVAblRZAt2pb0NgrWEQTbYFbQ9W0/V3VC1gO
Otf371HjvTy91TgMbl9v/opxI4Qyg20DXrcvNcNmGT6KEBYnTLAnPJXJ+0IDneWv
yX2Zr9HmD4fc1IPNKpkUGzwEzyDS/gy115weeQjlPLi0R/fpxM30NqtYJobowtPG
wPYDOO4n3+pYjI315Xvk+lTk/2m6Wbj7zfCJynXQVFZRYyrUzU0SQThB09RHGyhI
f0AQLYxw01TwXxWrAOhXFhgdl544QF+bY1YhAGTwwEDEh8OH1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHQ0S+8WU0YhBWXq8DqGAoF/CbmDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzE4ZjRhYjEtNDMwMy0z
NjM5LWFiODUtOWM3ODc0ZGY5MTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADKYXl8XvuGpK4pM6GhCVNv3Nl2QEWvcGqRv+2jhSoEY5nvQMpf40gYv
c9Ma6JKVh6CF4k1nFCsdPq59fPQ/Sya3bgE4j1OAMtNItbKgskNJqxLb5oP4K+Gi
j8X3Mz4Fxm/15AKTTnKfXeCHgFMI+Q+S/bpPR9DM8Y6BXd7iPUm17WN0O14QRzFJ
nILc5vRIIjtDnlrmNHXpBex4WJ8qSpdkSKg6CrJXSKNugCZe6xKtg6r1n2ZhflJC
/XxH/15ZQFh5+/ypRN1V7UHs+ir2I74UL8DK36WjYFy934ATUbgQMpVZ7Mx7o85Y
DKUsi20hGFeV7NDI+zxvVhMAc3ljfwY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:18:47 2025 by rpki-client