Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2a12e60-e84e-3388-8add-50e8bcbdbb63.roa
File: d2a12e60-e84e-3388-8add-50e8bcbdbb63.roa (raw, json)
Hash identifier: GgULKH43Gkj6ee+QOapYMwBu8gwn4r55ksn2y4pTT2M=
Subject key identifier: B9:29:EB:93:60:90:65:92:0C:34:C7:F2:C2:46:CA:26:CE:82:82:6E
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858483059A854A72B603EDC8ECB80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2a12e60-e84e-3388-8add-50e8bcbdbb63.roa
Signing time: Fri 13 Dec 2024 03:46:20 +0000
ROA not before: Fri 13 Dec 2024 03:46:20 +0000
ROA not after: Thu 13 Mar 2025 02:46:20 +0000
asID: 13335
IP address blocks: 172.71.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:59:a8:54:a7:2b:60:3e:dc:8e:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:46:20 2024 GMT
Not After : Mar 13 02:46:20 2025 GMT
Subject: CN=8ce34c5e-e0a8-4b90-bbc6-c4d845c4f670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b0:15:49:18:61:55:8b:ce:90:fa:1f:92:c8:
62:c4:b6:a9:ee:ba:03:dd:22:33:d6:1d:b9:e4:6a:
55:8d:35:08:1e:24:92:b3:6b:17:47:61:12:a2:ec:
a6:ad:85:80:0d:4c:60:af:a5:60:24:5d:90:c3:b2:
56:63:19:78:0d:e8:69:59:80:23:67:1d:8a:57:ae:
f6:4e:6b:ba:32:72:f3:2a:f4:75:b9:2c:e3:74:22:
b7:85:ea:c7:83:41:d2:77:ce:d8:e4:3c:19:8a:ea:
47:73:a0:96:1d:e6:a9:53:e0:46:4c:fc:44:88:36:
f9:80:cd:fc:f0:a2:e4:59:a4:dc:2b:08:03:9d:9e:
2a:1e:fd:42:b5:f2:bf:94:4b:09:5b:01:0e:2e:09:
00:a9:30:8d:c9:d1:3f:b5:a4:15:e6:b5:db:66:fd:
99:88:71:96:65:20:e9:55:6f:18:79:2e:dc:c8:1a:
08:dd:9c:42:a6:fa:6c:fb:e1:76:8e:5c:57:36:d3:
33:6b:f8:2b:b1:33:8b:d3:f3:59:d0:46:fe:3c:1c:
a1:45:43:1f:f1:2d:db:fb:3d:2d:c9:6a:95:26:41:
00:bb:bb:93:2b:cc:df:97:23:be:f0:39:5d:90:c6:
ee:34:75:3a:75:d3:49:ad:a4:f6:f1:3d:24:67:c2:
00:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:29:EB:93:60:90:65:92:0C:34:C7:F2:C2:46:CA:26:CE:82:82:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2a12e60-e84e-3388-8add-50e8bcbdbb63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:09:cb:85:b4:10:e8:40:04:a3:df:0c:c6:18:ea:f6:58:d0:
b2:32:f7:08:59:bf:fc:6f:49:4d:0d:01:42:1d:fa:7d:6b:5a:
53:fa:a7:1b:30:41:12:c4:3c:1a:bd:84:ed:3e:65:ba:32:8b:
3c:c6:63:af:af:4b:22:67:ff:c6:39:58:38:ea:e6:c5:70:43:
51:2d:74:ab:06:57:f8:8e:6a:59:98:8f:b5:be:7d:98:59:c3:
49:0b:82:ad:20:05:6d:86:24:e0:53:4e:94:b5:d8:52:46:b1:
6c:ed:e0:ef:c2:4d:b2:0d:a1:c2:84:12:e5:a4:fa:9b:18:bb:
8f:36:a7:d9:db:89:ef:cb:74:eb:f1:ba:39:45:13:a5:d6:94:
b4:6e:46:34:0e:77:f1:64:fd:36:08:43:33:fa:b6:54:c3:4e:
4d:4b:98:12:46:a5:54:0a:dc:f6:8c:79:74:b4:e6:2c:3b:23:
67:d5:b8:a5:f7:15:51:f7:bf:e6:c0:71:8a:41:eb:0f:d5:4c:
eb:64:c3:0b:23:3e:27:0f:b4:c5:79:e0:e8:a9:82:78:17:6f:
82:16:89:ea:de:a6:2a:87:64:f1:a4:75:62:6f:71:11:8a:66:
ac:fe:51:9b:f4:90:02:37:b3:d0:68:a1:6b:49:65:8e:6e:3f:
d5:7e:17:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:32:52 2025 by rpki-client