Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a363bb5b-3723-3b72-a45e-73b75a1dfc3e.roa
File: a363bb5b-3723-3b72-a45e-73b75a1dfc3e.roa (raw, json)
Hash identifier: M5vEZYy819aXS2Cdb16TMhQsSfrkeaWTYJE/VUA4JQQ=
Subject key identifier: 0A:1B:CF:6B:61:A2:69:64:E9:63:FF:25:14:20:88:61:B0:C8:3E:9D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848305A003202EB76925241FE80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a363bb5b-3723-3b72-a45e-73b75a1dfc3e.roa
Signing time: Fri 13 Dec 2024 03:47:02 +0000
ROA not before: Fri 13 Dec 2024 03:47:02 +0000
ROA not after: Thu 13 Mar 2025 02:47:02 +0000
asID: 13335
IP address blocks: 172.71.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:5a:00:32:02:eb:76:92:52:41:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:47:02 2024 GMT
Not After : Mar 13 02:47:02 2025 GMT
Subject: CN=204fba57-ec19-4dc2-a36f-68251cedce29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:01:05:ee:3d:f6:2a:78:a0:54:59:b3:32:bd:
05:ca:2e:be:cf:9b:c6:c6:ac:1d:c5:20:d1:a2:e7:
32:5f:cf:5a:35:77:83:e7:b5:06:7d:4a:8a:f7:67:
ef:76:a2:75:a4:b1:02:f4:db:13:86:13:41:b4:20:
15:ce:48:3e:f2:2c:2e:35:b9:a4:8b:a0:79:42:ff:
ab:c2:a1:41:dd:59:ea:99:e6:df:46:c4:0b:5c:d7:
87:09:bc:22:96:a0:5a:6c:39:0f:5a:7a:27:16:02:
c1:40:73:76:c5:97:37:2c:7f:44:41:2b:5e:bc:6a:
23:39:f4:c4:14:4c:c5:e0:c1:12:8a:92:ea:0d:d5:
3e:03:d1:64:09:de:8b:bc:24:d4:a5:fa:b4:26:75:
dd:e2:2e:56:a4:dd:e3:25:de:32:5e:11:a0:d5:55:
40:90:c1:d4:06:32:ec:9f:40:2b:c8:6d:61:90:57:
fa:88:c5:3e:94:bc:f4:e0:ca:73:4c:f5:b0:6e:4c:
15:10:a1:b5:ce:66:81:41:a4:25:42:f4:6c:68:c2:
73:6f:d1:15:7f:01:9b:18:51:2a:05:13:e3:ba:d8:
d8:28:4b:5b:c3:c2:69:db:b4:e2:11:e5:89:36:2b:
e3:8c:0f:bc:4b:22:1b:63:d1:00:b0:07:89:1e:dd:
e1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1B:CF:6B:61:A2:69:64:E9:63:FF:25:14:20:88:61:B0:C8:3E:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a363bb5b-3723-3b72-a45e-73b75a1dfc3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:b0:2f:02:88:bf:4b:35:de:1e:5c:8e:61:7c:5a:ea:5c:d2:
51:6c:98:6a:d4:a0:46:00:14:1a:ae:c7:e9:c5:60:2c:3f:f3:
ae:2f:88:11:4f:0f:28:d8:fc:14:da:32:3e:5d:32:a7:6c:4a:
06:01:c5:06:e1:0d:73:84:a3:8a:d3:2a:f7:00:83:77:7e:68:
fb:6b:fb:5a:67:46:c8:73:85:27:12:69:51:8c:18:a9:89:16:
86:72:a1:96:67:d9:65:ab:18:c8:f0:b4:ce:6e:e1:ea:3b:53:
13:8e:b0:b8:43:42:d0:82:d5:4c:d1:2b:eb:1a:6b:d1:24:1b:
69:bc:90:b7:08:de:8b:4b:5c:28:aa:c8:b7:2f:c7:6b:77:c9:
30:56:75:2b:38:8f:6c:9f:c5:71:d1:58:73:74:24:33:de:6c:
84:c2:0d:05:10:dd:8f:0c:9f:f0:bc:ca:e8:10:ac:7f:83:71:
ca:6d:c5:ef:bf:92:b4:68:04:37:f0:c5:c5:85:2a:fc:40:71:
e6:3d:c5:6a:5f:db:ad:76:28:89:81:fd:cc:65:cb:30:41:df:
be:21:8f:0d:0a:97:18:4e:ae:cc:01:9e:03:15:b5:82:2f:8b:
0f:42:d7:86:b1:fb:47:d6:a9:e6:55:41:ec:a6:a5:a0:46:79:
e8:6f:9b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:01 2025 by rpki-client