Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/78ef5081-df1f-3c6f-be27-1cd9e1d5c610.roa
File: 78ef5081-df1f-3c6f-be27-1cd9e1d5c610.roa (raw, json)
Hash identifier: jgEyTtEGZgwIQmqp+LG1zk9ZC8Gd2lYI37yQx9FcRvg=
Subject key identifier: E7:41:53:B3:E4:0E:61:02:C4:FB:D5:1F:73:5E:E1:B4:CC:5E:20:4F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858483059EEA627E6C37DB417B618
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/78ef5081-df1f-3c6f-be27-1cd9e1d5c610.roa
Signing time: Fri 13 Dec 2024 03:46:53 +0000
ROA not before: Fri 13 Dec 2024 03:46:53 +0000
ROA not after: Thu 13 Mar 2025 02:46:53 +0000
asID: 13335
IP address blocks: 172.71.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:59:ee:a6:27:e6:c3:7d:b4:17:b6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:46:53 2024 GMT
Not After : Mar 13 02:46:53 2025 GMT
Subject: CN=442a3860-0da9-484d-ac3a-0bb2b914b22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c1:20:dc:58:88:c7:d3:22:11:10:c1:e1:0e:
d6:a4:b7:16:5e:78:44:6f:e3:95:e4:3b:49:a3:5e:
45:cf:0e:3e:5a:7f:53:83:50:96:67:96:05:7a:ef:
01:ec:2a:1b:68:12:d2:df:80:8c:13:e6:5d:05:82:
a6:35:bd:cd:43:6e:9e:b7:e4:c5:ce:be:b4:e8:1b:
d5:6e:4e:5c:60:cb:6f:82:05:ac:e8:41:8f:25:35:
36:20:d3:0b:4f:9e:9c:ca:66:7e:ac:ce:37:59:21:
b5:ca:9e:de:84:d0:83:44:1b:60:52:09:02:40:20:
d2:c5:c8:8b:ad:b9:cc:ec:ef:09:c2:21:2a:a4:94:
2b:69:4e:fd:ec:6a:0a:72:30:eb:4f:be:1e:ab:74:
1a:0b:06:0a:4f:51:75:41:4d:85:a5:f9:ee:8c:c8:
77:b3:28:22:5a:22:9b:fa:37:46:f4:e1:cd:27:0e:
f4:ae:ae:0d:58:5a:79:19:a3:43:2a:f3:8d:6e:a6:
86:5a:90:65:5c:bd:43:78:34:b0:ee:eb:fb:d7:3e:
bd:30:b7:0e:a9:cf:70:7e:c1:c9:dc:d1:fa:18:28:
78:f8:de:1f:ab:3f:f4:9b:09:d3:3d:02:22:c6:3c:
30:33:9f:86:d5:59:4a:69:3d:64:84:a5:0b:08:45:
6f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:41:53:B3:E4:0E:61:02:C4:FB:D5:1F:73:5E:E1:B4:CC:5E:20:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/78ef5081-df1f-3c6f-be27-1cd9e1d5c610.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:e7:70:fd:24:03:7a:4b:e6:12:b9:1a:f9:7b:91:8d:40:b5:
7f:e9:de:63:20:ae:ee:6d:59:64:68:86:d3:5a:ab:1f:53:27:
dd:38:81:93:94:d0:a5:e9:22:8c:43:88:e8:bc:70:5b:75:79:
bc:f4:a0:e3:7c:08:9e:04:6f:26:cc:f4:0e:3a:a3:36:57:cf:
0a:e6:e0:3c:2b:a7:d9:f8:d0:6b:0d:89:07:a2:9a:f1:9b:97:
be:57:86:7c:60:c2:25:8d:27:72:be:01:4c:e1:85:8b:61:db:
90:cb:c1:9e:f1:f6:ab:a9:af:1d:8d:e8:41:19:8d:9d:cf:cf:
c1:f8:06:35:5a:04:99:3f:da:90:a3:ae:c7:9a:f6:39:d4:bf:
98:aa:cf:86:95:b3:58:df:4e:a2:00:ff:4b:2c:1a:1a:ee:2b:
7d:0b:03:36:cc:08:64:60:8e:9f:4e:a2:8e:4a:d3:5d:ee:b4:
54:1c:dc:08:97:ba:2f:de:aa:b3:de:8c:e5:20:8e:f8:39:29:
38:3f:46:b8:88:fb:be:1b:a8:85:cb:fb:38:1c:09:70:07:15:
a3:ec:9c:c3:44:b9:cd:40:8e:fa:80:22:24:70:a1:19:b1:a1:
7a:52:49:bd:05:2c:ca:8c:8f:61:dc:73:40:e7:e5:20:fe:b7:
94:e3:b2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:45:57 2025 by rpki-client