Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3e4ceeb-98f9-3e72-b588-703473930bef.roa
File: c3e4ceeb-98f9-3e72-b588-703473930bef.roa (raw, json)
Hash identifier: Aa6wRc29Xh2gP8AgqDXrlDigQc3fCPVXhS9V243bwdc=
Subject key identifier: 08:33:19:5A:E8:B7:A4:D5:12:A2:60:A7:31:87:22:FF:28:AF:49:54
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584830589F8D6A637D2C7BADD100
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3e4ceeb-98f9-3e72-b588-703473930bef.roa
Signing time: Fri 13 Dec 2024 03:44:15 +0000
ROA not before: Fri 13 Dec 2024 03:44:15 +0000
ROA not after: Thu 13 Mar 2025 02:44:15 +0000
asID: 13335
IP address blocks: 172.71.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:58:9f:8d:6a:63:7d:2c:7b:ad:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:44:15 2024 GMT
Not After : Mar 13 02:44:15 2025 GMT
Subject: CN=fa87dae6-845e-4f24-9205-62ba92d1e935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6b:c0:e1:d2:ec:76:1f:15:0f:26:d3:36:58:
9d:1e:d7:c2:48:79:ae:eb:2d:9f:04:83:54:1c:54:
da:d0:20:96:20:25:0c:78:7a:46:41:c0:16:6a:dc:
f0:ed:91:39:3b:c9:60:fc:ca:2b:a7:20:ea:97:3f:
f0:d2:52:81:ae:52:77:23:8c:3b:c3:5e:e9:b3:0c:
7e:62:c6:b7:01:a9:dd:e5:b8:f8:ab:62:39:c1:56:
35:fb:98:51:2b:29:61:96:cb:98:43:24:a1:6e:d3:
f1:91:e0:3d:a9:7d:6d:03:2d:2d:a0:65:fa:60:87:
19:81:e2:52:81:c0:53:a8:d3:f9:11:04:42:1b:bb:
10:4c:7b:a3:0d:10:71:8f:10:5b:e7:16:21:f8:af:
4a:2f:0e:a8:74:b5:64:ff:6a:cd:16:d0:87:f6:53:
7d:0a:fc:2e:50:6e:92:92:fc:8b:1a:0f:69:ea:fd:
7d:ed:8c:93:fd:75:5e:88:3f:d3:f5:f1:5c:24:0d:
67:2c:5c:4b:ad:59:bb:3d:89:4c:e5:6b:d4:ee:81:
e9:7c:85:99:78:d4:e9:43:8b:51:a7:1f:cc:96:51:
ab:d7:3b:63:1f:e7:d5:64:70:76:e1:d7:09:7f:26:
32:83:3f:16:27:2c:c3:54:bf:c6:ad:db:95:86:d4:
9e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:33:19:5A:E8:B7:A4:D5:12:A2:60:A7:31:87:22:FF:28:AF:49:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3e4ceeb-98f9-3e72-b588-703473930bef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:06:c3:cd:ff:ee:43:05:e2:c2:86:9c:56:88:d4:ea:d3:9a:
87:ec:7d:3f:9f:4a:c7:31:ff:65:e9:b7:68:97:e0:de:c2:3a:
d8:8a:78:8c:82:e6:66:07:e2:2e:dd:1b:46:62:18:85:a1:18:
ac:d4:1a:a1:f3:95:ba:8c:3c:4c:42:9d:b6:3f:58:f0:5e:a0:
08:75:d7:a8:82:0d:51:f4:57:fa:4b:59:14:02:b4:d8:ad:ca:
81:fa:c8:b6:71:69:cd:69:12:25:a8:2c:42:bd:40:7f:de:aa:
97:9e:75:0e:e2:8f:a6:04:88:27:af:da:3b:15:0d:61:ac:b3:
5d:ca:9b:3e:0c:fb:fc:83:42:54:24:12:70:8f:fa:01:96:99:
f5:f2:8c:e9:05:17:44:c2:52:ad:cf:71:ba:18:a5:27:3a:3a:
b9:bd:80:92:22:51:f4:fa:d9:01:8e:8a:3e:44:cd:45:da:72:
98:7a:6b:dd:2a:46:cd:81:3b:cd:da:a0:5e:c9:d0:49:c3:ea:
4d:0c:33:ae:81:f5:5a:ba:d0:0c:a8:2f:19:a6:d1:10:f7:c2:
73:7d:c0:d9:bf:0b:8f:e1:03:f9:61:84:51:6d:9c:74:3e:94:
4f:49:46:8a:71:d8:3f:c9:b3:4d:9e:c7:76:f8:95:39:e2:b4:
04:88:0d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:12:30 2025 by rpki-client