Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e4e0fa24-84b0-3601-b8ad-66272f0dd5e1.roa
File: e4e0fa24-84b0-3601-b8ad-66272f0dd5e1.roa (raw, json)
Hash identifier: krm2DPFCOPb8EazEujV+2CNTpF2oeSw8Qx+y36gGsSM=
Subject key identifier: 8D:0B:9E:8F:A2:73:9F:EA:D2:4B:21:D4:CD:E9:B7:40:98:17:F5:FB
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827B0D23B4C364F6CC8481640
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e4e0fa24-84b0-3601-b8ad-66272f0dd5e1.roa
Signing time: Tue 10 Dec 2024 01:19:41 +0000
ROA not before: Tue 10 Dec 2024 01:19:41 +0000
ROA not after: Mon 10 Mar 2025 00:19:41 +0000
asID: 13335
IP address blocks: 172.71.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:b0:d2:3b:4c:36:4f:6c:c8:48:16:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:19:41 2024 GMT
Not After : Mar 10 00:19:41 2025 GMT
Subject: CN=e11f3783-2529-4aa4-9599-ddb1c5d97d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fa:2d:a1:f8:b6:69:b4:00:b0:78:f7:24:b5:
47:f1:ad:f7:08:40:5a:d8:38:64:80:f0:5a:67:24:
9d:65:c6:3e:9b:e8:b0:d7:d5:1b:c8:a9:cd:bd:09:
b6:89:6e:e0:57:70:69:0b:f5:b7:cb:1c:b0:76:f4:
ed:9a:3c:ad:ef:f4:b9:57:11:a8:dd:b6:2d:48:45:
c3:41:f9:af:76:78:17:29:80:6f:af:65:52:80:31:
8b:41:ce:11:10:23:5a:7c:f0:0f:53:da:86:32:0f:
91:89:f5:c3:c7:68:8d:89:5d:f0:d8:5c:67:75:ca:
a5:f7:b1:1b:5b:43:f3:24:db:af:f1:e5:2d:c5:ba:
16:0a:9e:db:c4:fd:13:8b:f6:2b:58:99:97:c1:f2:
8c:e7:40:fd:d9:69:d1:50:0e:6b:d5:1e:b6:05:7d:
0b:1d:a8:15:1f:da:2a:96:50:44:89:a0:75:43:b2:
eb:eb:2c:3f:4d:09:d1:cd:1c:8d:fb:ea:64:ae:01:
99:a6:db:06:c0:00:ad:5b:42:2b:82:7a:85:91:46:
c8:02:0d:14:2d:aa:54:2d:8d:52:3b:f6:c3:15:32:
59:8c:0b:d9:09:54:c8:5f:f5:56:c5:61:d0:90:4e:
4e:da:ab:ca:0d:bb:34:b1:eb:61:e0:b8:c9:fd:de:
5a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0B:9E:8F:A2:73:9F:EA:D2:4B:21:D4:CD:E9:B7:40:98:17:F5:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e4e0fa24-84b0-3601-b8ad-66272f0dd5e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:b9:6e:de:bc:cd:1d:3a:3c:f6:f2:7e:a0:9a:77:c5:49:1e:
48:f7:b4:ff:3b:50:00:14:ed:2b:2c:ba:ba:85:04:c6:e1:18:
4c:05:60:91:b5:3d:cb:1e:92:a8:7a:cd:a1:f6:2c:a8:c6:ec:
bf:ee:47:d8:3d:33:87:c5:c5:ad:79:66:74:a4:22:1c:da:ec:
e0:45:aa:28:1e:36:95:7f:5c:2d:ff:3a:90:e0:44:ba:28:eb:
73:f0:c0:3b:f0:fa:81:ad:58:56:da:b9:c6:d9:f4:2c:88:fe:
9f:25:5e:3a:bd:51:83:d3:3e:f8:42:0c:8a:7b:67:78:6a:b2:
9f:0c:30:a4:32:06:e7:92:00:d7:96:26:a8:71:29:8b:e3:4d:
b1:4f:9f:38:73:c7:6e:66:1b:3d:c2:8d:38:9c:57:1c:e8:56:
62:93:42:bd:ef:95:0f:5c:5c:ca:e7:67:aa:1d:33:3f:ee:67:
ac:f3:cd:9c:18:de:3d:92:40:74:3b:a4:a9:8f:2c:90:6f:7c:
a0:47:32:42:eb:08:23:cd:75:c9:cd:f4:dd:0c:73:1a:25:fc:
1e:7e:a8:f3:4d:9f:4d:3c:88:9a:c6:55:b7:11:0d:3b:cb:e0:
1d:95:13:4d:0a:30:dd:e8:ad:94:7d:51:22:1e:09:9f:6c:30:
26:80:d7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:10:35 2025 by rpki-client