Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7471f609-4e4f-3a7a-984d-a655e565f544.roa
File: 7471f609-4e4f-3a7a-984d-a655e565f544.roa (raw, json)
Hash identifier: UkkBVhxxNVlv64eawZUv2h8pbztorxjQt+qYsZaBqy8=
Subject key identifier: F6:69:16:92:76:31:58:CF:6E:62:0E:67:FA:B3:84:49:C6:D7:46:80
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285847E0D1C2557AC33762FADCBF40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7471f609-4e4f-3a7a-984d-a655e565f544.roa
Signing time: Thu 14 Nov 2024 16:03:40 +0000
ROA not before: Thu 14 Nov 2024 16:03:40 +0000
ROA not after: Wed 12 Feb 2025 16:03:40 +0000
asID: 13335
IP address blocks: 172.71.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:d1:c2:55:7a:c3:37:62:fa:dc:bf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Nov 14 16:03:40 2024 GMT
Not After : Feb 12 16:03:40 2025 GMT
Subject: CN=4d599576-e3e2-4e3a-9a24-f7b1ccdc3031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:55:8d:81:5e:3c:ea:cd:97:6a:72:89:80:4e:
0e:07:90:48:a5:b0:d8:14:da:f7:09:5f:55:28:78:
44:57:50:04:7d:15:98:f8:6a:b8:88:7a:1e:7e:d8:
14:d6:ad:9f:61:57:e7:47:b6:17:d4:7d:c4:ce:fd:
ed:bc:c4:12:7f:56:85:bc:80:58:b7:d3:98:02:e2:
af:a3:d7:89:42:ca:fb:dd:09:9d:2b:85:4e:01:ba:
de:5b:66:c1:42:7a:1d:e6:62:c5:99:b2:c8:09:0d:
c5:59:69:d7:2c:7a:15:b0:d9:38:4f:3f:f4:d5:70:
c7:2d:8c:7c:2a:38:1a:c0:58:ef:c2:74:f0:5a:91:
e3:37:bd:ed:d5:a1:67:b6:67:7d:97:8d:4a:ca:85:
b9:5a:42:10:5e:d0:93:47:01:f0:66:5b:ea:3a:0a:
e5:83:32:53:54:58:51:7b:f0:6c:f4:b1:23:6e:5f:
bc:fb:06:da:4d:ff:9a:e6:55:da:7f:87:4b:89:aa:
83:04:9d:d5:c5:18:4b:95:bd:0e:3e:c3:71:f2:94:
91:09:91:94:8b:bf:3b:4d:ec:d3:31:58:03:3c:ac:
a4:f2:5c:a4:f2:31:e5:f5:f1:45:06:0c:dc:4b:f3:
60:c7:4b:af:a8:4a:ba:02:3c:ba:d3:fe:9e:d2:a4:
cd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:69:16:92:76:31:58:CF:6E:62:0E:67:FA:B3:84:49:C6:D7:46:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7471f609-4e4f-3a7a-984d-a655e565f544.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:55:82:df:d5:e4:3a:b5:b1:ba:8c:2e:41:b1:97:b0:f9:c0:
19:48:fe:2e:d1:0c:ee:6c:be:95:37:af:3d:86:12:0a:1c:ab:
8a:bd:f0:a6:9d:1e:8e:71:94:20:40:17:5f:d1:b2:0b:61:77:
8c:5e:27:51:f3:b9:0e:22:df:9a:1d:2a:0f:c7:d8:37:fa:bd:
cb:80:d7:2f:35:5f:a2:74:fe:13:d5:9e:eb:7b:52:34:f6:b0:
3c:98:b9:f6:de:bd:75:14:3b:7d:cc:20:37:ee:8e:fe:d9:f9:
f5:5a:4c:c4:d8:2b:01:fd:b4:17:59:48:03:b0:9c:58:dc:19:
df:f8:ef:3e:a0:ad:e5:b2:b1:7c:ff:12:5f:b0:74:5a:17:b0:
5c:bc:8b:fb:66:0f:11:ce:a6:a5:d7:2b:e8:6f:eb:a4:da:fe:
11:88:d3:39:50:ce:f5:9f:e3:4e:e6:71:c9:54:7b:83:e6:64:
d2:21:61:eb:85:2f:c2:24:14:23:33:c4:6b:13:87:48:16:69:
e3:0f:70:b0:c9:14:77:f8:41:23:e7:cd:a1:fb:c2:d3:1c:7b:
4b:e2:23:d3:06:78:a3:18:9c:f0:ba:ac:0c:23:33:74:d1:ad:
d3:b4:3e:46:24:f2:cc:f3:8c:ca:75:6e:52:56:41:bf:dc:18:
28:52:09:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:12:05 2025 by rpki-client