Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8222374e-de48-3942-9fc5-b6afdb016b1d.roa
File: 8222374e-de48-3942-9fc5-b6afdb016b1d.roa (raw, json)
Hash identifier: NX/SkccoWJ89xaaAonNHdqY2miV5ZIh6ClhNKljDn+0=
Subject key identifier: BB:C2:77:44:AD:C6:45:55:9E:2B:43:5E:C0:05:FF:8B:6E:57:CB:36
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848256455A67C38110730403B78
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8222374e-de48-3942-9fc5-b6afdb016b1d.roa
Signing time: Mon 09 Dec 2024 05:33:57 +0000
ROA not before: Mon 09 Dec 2024 05:33:57 +0000
ROA not after: Sun 09 Mar 2025 05:33:57 +0000
asID: 13335
IP address blocks: 172.71.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:64:55:a6:7c:38:11:07:30:40:3b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 05:33:57 2024 GMT
Not After : Mar 9 05:33:57 2025 GMT
Subject: CN=9cd0ae5f-fc27-4f5f-a26c-359c6d5000f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b0:57:bf:a9:2c:a0:5e:28:b8:99:b7:a9:b1:
7d:99:8b:46:6a:b1:f4:e1:c7:fa:fe:b5:b9:fe:7b:
7b:ac:2f:5c:23:00:d8:23:30:5d:8f:b9:74:83:de:
a8:08:d5:5d:73:5b:ac:95:06:89:70:5d:0b:4e:03:
d9:c7:36:45:eb:86:b5:43:f2:23:9c:4b:27:77:ca:
de:e0:be:2f:cc:2f:f8:08:3b:d2:0c:dd:f9:eb:a7:
a3:cc:c8:a6:80:ea:82:1b:18:b4:a8:d2:3a:d4:44:
46:6e:37:bf:d9:bb:10:b6:7e:e7:89:19:26:8d:86:
80:5d:a9:12:e3:f7:a4:c3:e0:d1:1f:94:c3:f5:78:
57:6a:34:36:7c:c2:4d:c7:78:77:6d:0b:55:74:87:
19:39:14:8c:de:d0:e0:ab:8b:d9:65:ed:b1:18:37:
89:bd:fc:b2:1c:0b:11:c4:71:94:db:02:dc:bb:ec:
50:34:54:9b:c6:b2:fc:26:26:df:26:f2:10:2c:68:
dc:d7:43:2a:ff:55:62:5e:d2:5a:f5:10:8e:37:24:
e7:6e:24:98:57:8a:0e:b6:1a:ce:73:0b:2d:ee:bb:
22:0f:7b:df:b2:b7:50:b1:cc:86:e7:80:35:31:d9:
47:f9:9e:7e:0b:5a:44:c6:15:8a:3c:1b:e3:cc:58:
ce:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C2:77:44:AD:C6:45:55:9E:2B:43:5E:C0:05:FF:8B:6E:57:CB:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8222374e-de48-3942-9fc5-b6afdb016b1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:38:c6:ce:b2:86:69:ee:0e:30:20:4c:b9:90:29:e2:96:df:
d3:66:fd:2d:e7:8e:ac:8d:5d:6b:92:a6:76:8d:74:d9:97:d2:
07:fa:ad:88:18:2d:09:9c:73:fd:2b:70:9c:b1:3e:ef:a8:cc:
20:d8:07:ad:8d:c0:54:3d:55:39:1f:a9:b9:d4:76:5b:1c:ad:
2c:d5:ce:32:b7:92:69:c5:c9:32:99:1f:9e:bb:fa:69:72:8c:
02:fe:bc:66:52:9d:f0:0a:97:8d:ef:01:f5:77:53:79:08:7a:
22:db:f7:1b:60:92:79:bc:e1:89:fa:9c:db:07:2c:3e:dd:02:
cd:d5:21:f0:30:d5:d9:b1:45:d9:ef:c6:f4:df:a6:b0:42:ad:
48:de:b8:ad:6d:fa:85:8e:c6:34:eb:54:ef:9d:3d:0b:f7:4f:
c9:97:4c:8f:6b:73:4b:7e:d7:1d:d3:97:29:18:ab:53:d2:13:
9d:ef:3b:82:c2:f2:70:96:a9:7c:c1:14:73:1b:a2:f6:f5:de:
52:bf:7d:9d:eb:ed:b9:63:e7:ae:91:ec:46:96:b8:6e:ea:de:
cf:4b:bf:59:d2:09:c8:93:bf:df:24:8f:32:67:bd:98:7d:ea:
eb:38:fb:ec:f1:cd:c5:8b:89:07:61:ec:ef:bd:5a:0a:e2:2b:
0c:d5:2f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:58:12 2025 by rpki-client