
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b5c5effb-7664-3b9e-aad6-47d39f4943b4.roa
File: b5c5effb-7664-3b9e-aad6-47d39f4943b4.roa (raw, json)
Hash identifier: HaPaaHecT/tEWU0yQIgtd9uzFRauuawdA81BW+L7gtU=
Subject key identifier: 2B:26:BE:88:AC:0C:3F:7D:9E:31:45:0A:E1:02:9F:3A:C6:A1:C4:66
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858483044AC25132850B8EF585D40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b5c5effb-7664-3b9e-aad6-47d39f4943b4.roa
Signing time: Fri 13 Dec 2024 03:04:03 +0000
ROA not before: Fri 13 Dec 2024 03:04:03 +0000
ROA not after: Thu 13 Mar 2025 02:04:03 +0000
asID: 13335
IP address blocks: 172.71.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:44:ac:25:13:28:50:b8:ef:58:5d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:04:03 2024 GMT
Not After : Mar 13 02:04:03 2025 GMT
Subject: CN=264853a3-239c-4fd3-a94b-91eeff232385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:79:52:92:6e:50:b4:d6:c4:3f:51:8e:cc:a8:
8f:33:a3:cd:57:e9:75:e3:b0:45:b1:3f:0f:bd:c6:
f3:af:02:5b:fd:ce:90:96:6c:9d:bd:93:36:74:e6:
bd:63:e5:66:7f:4b:9c:c3:71:ed:b1:bc:4e:db:a7:
df:16:49:a2:02:80:89:0d:ef:a3:6b:b7:9c:c1:90:
0f:22:a8:a1:b3:2f:91:6e:04:4a:80:1d:d0:9d:9b:
1e:b0:a0:8a:8c:80:8a:d3:80:30:48:34:9f:56:b8:
ff:68:60:2c:b6:ba:30:e1:79:d0:97:03:dd:ca:d3:
29:19:38:ad:f1:b6:98:68:a8:eb:04:21:43:19:e2:
8e:51:d4:61:b7:1f:81:b9:43:e2:4a:bf:65:55:97:
76:2d:c5:6b:d7:95:1d:18:61:66:ef:54:05:bb:b9:
9f:95:20:f6:fe:ee:f7:21:8c:de:8d:08:1d:3f:b8:
56:12:04:0d:0d:3c:5f:75:d2:fc:2b:a9:7f:75:e2:
bf:be:35:29:43:92:1a:40:61:6e:2e:5b:99:70:29:
ef:b0:10:31:34:31:3c:7e:03:84:b0:f6:af:db:95:
29:9d:02:c9:a4:d7:5a:9b:eb:9b:03:ae:d3:4b:ff:
e5:92:0b:4a:a8:81:16:b8:d1:0e:d9:5e:aa:08:a5:
a0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:26:BE:88:AC:0C:3F:7D:9E:31:45:0A:E1:02:9F:3A:C6:A1:C4:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b5c5effb-7664-3b9e-aad6-47d39f4943b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:5c:bb:1b:41:8e:19:64:92:1b:d4:1a:40:f6:0a:88:39:d7:
89:54:fa:66:ff:a2:96:5d:b7:38:01:02:fb:87:c9:88:5c:69:
c1:e7:97:91:61:0e:3d:02:be:9e:b0:5f:e4:37:5a:b7:51:bc:
15:61:01:08:ec:9a:2d:2c:53:87:09:3a:1d:80:82:63:46:ea:
7d:c6:a3:23:de:69:89:2e:00:f4:38:87:43:6e:0a:ca:26:be:
5a:fc:41:85:cf:13:f6:6c:80:92:84:45:43:74:34:ef:08:14:
cb:6f:a9:be:20:a0:92:4b:39:4a:81:b0:1c:0c:0f:37:63:df:
ff:57:41:20:27:c2:74:c8:d2:88:b7:04:0d:ff:bc:b7:c9:46:
dd:fc:95:59:b9:b9:65:76:06:80:48:7e:1e:df:73:2f:aa:67:
63:69:43:ff:e7:02:81:7c:10:e9:43:e3:e4:5b:19:76:37:3a:
c5:2f:38:51:45:a4:78:2d:71:f2:af:30:6c:e9:0e:5b:b3:89:
70:0a:8e:29:93:e0:84:d0:88:1a:9f:a3:b2:0e:43:a2:c2:c7:
8a:a8:cf:6e:7e:32:86:5d:c8:79:41:8f:b5:9a:ef:8a:92:f9:
57:2b:2e:0e:f6:bb:70:25:7b:3b:7b:13:e2:ef:d7:89:08:e4:
2b:f8:fb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:44 2025 by rpki-client