Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b03d6cb0-599d-378e-990f-34751b70d79f.roa
File: b03d6cb0-599d-378e-990f-34751b70d79f.roa (raw, json)
Hash identifier: ict+I6TAvebSlvkTiPpy7kVRK2zDFnPw0PcyFQdUiE8=
Subject key identifier: B4:D8:89:67:56:E9:1A:64:CE:D1:0B:2E:B9:F0:E3:5B:7B:2A:13:8E
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858483046C0A7C80BD303C0796000
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b03d6cb0-599d-378e-990f-34751b70d79f.roa
Signing time: Fri 13 Dec 2024 03:08:15 +0000
ROA not before: Fri 13 Dec 2024 03:08:15 +0000
ROA not after: Thu 13 Mar 2025 02:08:15 +0000
asID: 13335
IP address blocks: 172.71.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:46:c0:a7:c8:0b:d3:03:c0:79:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:08:15 2024 GMT
Not After : Mar 13 02:08:15 2025 GMT
Subject: CN=9f919897-d5f5-4374-b1d6-9a0560590714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ea:4d:3f:c6:cd:49:4d:0c:35:0f:2a:68:c2:
13:87:90:bb:ff:a3:c4:33:ed:7c:7d:f1:ec:a5:e7:
72:0e:df:73:82:5c:61:72:00:2f:78:a7:e9:48:4f:
09:c5:fe:ff:3a:95:e8:30:57:d5:24:47:c8:94:16:
f4:7d:60:44:7b:69:16:a3:2a:67:ec:1f:c5:cf:c3:
08:7d:c6:2f:9c:16:89:d3:65:39:40:09:71:41:43:
a2:79:c5:84:81:9d:ab:43:ef:f9:57:dd:d1:1e:aa:
e6:20:d7:07:44:3b:86:5e:bd:5b:eb:69:a6:43:c1:
d3:a9:f2:23:1b:99:5a:b6:b5:34:78:02:1e:d2:40:
2d:52:01:53:eb:05:42:66:4f:0a:1d:f8:6b:92:75:
da:0e:49:32:77:08:9a:51:9f:52:6f:9e:26:e4:e1:
b8:b6:3f:62:22:99:e7:28:24:55:8b:d1:7e:11:52:
10:f0:e4:22:00:3d:87:48:ae:d5:52:b7:97:b5:7e:
4b:5e:a0:a0:8e:ef:d6:5a:14:cc:c6:3f:20:09:97:
4d:a0:f2:80:86:91:81:be:12:b5:2e:15:70:9e:10:
96:6c:da:bc:cd:cb:1f:64:e4:3f:52:6d:00:9c:dd:
0e:a0:92:f9:40:58:a9:6e:19:92:76:74:52:a4:22:
1b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D8:89:67:56:E9:1A:64:CE:D1:0B:2E:B9:F0:E3:5B:7B:2A:13:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b03d6cb0-599d-378e-990f-34751b70d79f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:1e:07:6d:23:a2:47:32:e9:c4:17:3a:d2:81:76:1c:f7:55:
55:15:75:ca:96:59:46:ce:53:20:6f:66:2d:5c:e4:7e:b9:85:
71:06:d4:24:f7:1b:a0:25:79:05:07:bf:1c:9c:bf:47:a9:d7:
6d:6e:9b:24:3b:2f:61:c4:d7:c5:cc:ac:97:1d:1b:50:29:ff:
3f:19:ce:45:55:da:59:ee:71:64:e7:78:ea:90:04:e6:f7:85:
69:89:05:e9:71:81:6e:b0:0f:39:e5:73:ce:32:d0:e2:ed:0d:
e7:63:fd:7b:f3:7c:a9:a7:43:d5:b1:82:be:7e:cf:0c:85:59:
be:d3:86:9e:56:a9:ea:84:8c:db:89:13:f0:1c:85:98:26:13:
3c:e9:b0:84:db:0e:4b:73:13:28:ac:72:e5:f3:55:f4:1e:33:
fb:d1:88:2b:58:bc:cb:47:17:85:22:54:08:ba:e8:2c:66:36:
6b:08:8c:d0:40:90:80:5f:b5:54:b0:e0:1f:ff:8a:63:dc:65:
cd:e7:b3:19:04:53:3c:c3:12:c8:ca:71:57:38:53:2a:4e:d5:
a6:97:9f:8d:c3:36:47:1d:d0:f5:af:74:f0:5c:6a:55:ab:6e:
16:27:41:35:8f:80:56:8d:15:c9:f8:74:e2:85:a4:0b:3e:62:
01:e0:18:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:18:02 2025 by rpki-client