Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb9d9ce3-2664-30da-8611-f3adf046b24c.roa
File: cb9d9ce3-2664-30da-8611-f3adf046b24c.roa (raw, json)
Hash identifier: P1+436GcLsDPGYNv5IUyIg4lqdGXISnlXGCnLvuVW70=
Subject key identifier: 28:4D:BE:86:0B:A1:93:D7:86:01:07:5C:71:17:CF:C6:87:E5:C2:4C
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584830454ADD27D4624B5BAA48E0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb9d9ce3-2664-30da-8611-f3adf046b24c.roa
Signing time: Fri 13 Dec 2024 03:05:18 +0000
ROA not before: Fri 13 Dec 2024 03:05:18 +0000
ROA not after: Thu 13 Mar 2025 02:05:18 +0000
asID: 13335
IP address blocks: 172.71.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:45:4a:dd:27:d4:62:4b:5b:aa:48:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:05:18 2024 GMT
Not After : Mar 13 02:05:18 2025 GMT
Subject: CN=c472b735-0d86-4d4c-ad01-6a1f17abac7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8e:ae:eb:f5:59:ec:d0:f5:28:d9:f0:35:20:
86:a3:dc:e6:e2:dc:25:72:a7:f5:cb:de:32:58:5b:
46:82:c6:df:64:18:15:15:78:94:e1:95:28:96:4b:
f6:82:d5:79:8d:e6:7f:3d:83:81:71:4b:ba:ae:db:
4c:b4:92:77:93:69:92:38:30:3f:7e:3f:0a:20:3b:
03:9a:37:c3:44:2c:4c:e6:f2:80:60:ff:a7:78:cd:
ce:3e:c2:40:2b:2a:8f:7b:65:c3:40:3b:ba:dd:cf:
c1:7e:ce:59:89:5f:a1:5d:54:29:de:7b:79:08:58:
6f:98:bf:e1:5e:47:39:86:03:a0:a7:cd:ed:aa:68:
0a:b6:17:42:ae:c1:a2:68:86:56:0b:aa:bc:50:73:
02:da:17:4c:65:a5:1c:5d:77:6c:e9:e6:92:1d:2f:
99:4e:a5:cf:54:71:4c:77:a3:33:a8:5f:e0:70:a4:
04:ee:8b:95:bb:44:98:69:63:22:d1:fe:41:52:34:
a3:3d:e6:9a:14:88:f1:40:8a:2b:83:97:70:17:ec:
89:b8:e1:5e:a4:b3:a5:83:a1:14:12:14:9b:0b:d7:
54:66:fe:f1:d4:96:d0:03:3a:aa:dc:75:70:c3:c2:
a5:ff:f7:77:c4:92:73:ba:5b:bf:02:7b:e6:f9:8f:
02:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4D:BE:86:0B:A1:93:D7:86:01:07:5C:71:17:CF:C6:87:E5:C2:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb9d9ce3-2664-30da-8611-f3adf046b24c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:98:fc:a2:ab:e5:fd:ca:24:6c:3c:d3:17:33:56:46:fa:91:
ca:08:37:a9:37:00:a1:71:1d:10:50:0d:68:da:10:66:9f:3e:
f0:f3:ac:cb:d5:05:1b:65:9b:72:b9:40:ff:27:28:95:81:0b:
a2:e6:a9:46:93:42:79:3d:d2:27:06:e8:bb:ad:0a:2e:d7:e2:
ed:6f:39:2f:54:2d:50:80:00:4c:59:5b:15:b4:bc:b6:20:a1:
5d:bb:24:3b:f1:44:fc:4a:30:7d:1a:dc:e8:49:29:c4:03:5f:
52:a7:32:00:5b:60:3d:b4:ec:b1:b6:7b:ce:7e:69:d0:1b:01:
ad:2a:44:d9:1d:68:50:82:32:6f:8b:d1:d5:f1:f7:b2:64:ad:
6c:39:55:86:55:08:1f:7c:30:19:b0:cd:05:ba:e1:46:31:96:
b0:07:1d:fb:54:af:72:a4:65:a9:53:b1:43:c0:10:22:66:54:
5b:dc:be:72:f1:e4:26:75:8e:68:ed:0d:7e:1f:63:c7:d7:f6:
5a:4b:73:c2:2e:cd:41:f8:1a:1a:05:95:b5:c0:09:0f:80:6b:
11:f5:76:10:24:09:3c:69:05:56:28:38:c3:ac:71:95:5e:13:
79:b3:7e:23:92:e7:98:ca:05:9b:b7:34:41:8d:85:f6:77:9d:
a9:0d:be:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:56:26 2025 by rpki-client