Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e5868084-5d8c-376e-af1c-77fe0c67ae23.roa
File: e5868084-5d8c-376e-af1c-77fe0c67ae23.roa (raw, json)
Hash identifier: oQccVxWwy/bfaeG+RhdgOUU2ns8kB9rhhOMnbMPlQts=
Subject key identifier: 8F:AD:60:09:A7:88:4B:CD:AF:A8:20:93:CA:26:87:DC:60:1F:08:35
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858483041A58653BE5BB45314BE00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e5868084-5d8c-376e-af1c-77fe0c67ae23.roa
Signing time: Fri 13 Dec 2024 02:57:57 +0000
ROA not before: Fri 13 Dec 2024 02:57:57 +0000
ROA not after: Thu 13 Mar 2025 01:57:57 +0000
asID: 13335
IP address blocks: 172.71.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:41:a5:86:53:be:5b:b4:53:14:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 02:57:57 2024 GMT
Not After : Mar 13 01:57:57 2025 GMT
Subject: CN=64e020bd-788e-4b85-ab32-adace81d0812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:75:48:5e:76:0c:a7:03:ea:46:2a:67:3a:b6:
fd:cf:fb:f8:3e:a2:8c:0a:97:1b:55:b9:2c:af:d4:
2a:51:c1:2b:ab:85:1a:bf:7e:73:07:8b:d1:14:98:
04:e1:de:87:92:71:d5:6c:d5:b9:7e:e3:c9:f8:b3:
a7:b5:4f:31:51:df:28:ce:d6:4d:7e:87:23:89:3c:
08:5e:2d:5b:8e:59:35:b1:be:c3:ae:e7:6c:f3:91:
78:0a:cd:e4:39:17:2a:5f:54:34:7a:e7:e4:23:69:
17:d9:2c:4f:07:c7:91:24:0e:c5:90:29:83:11:e7:
0a:a0:81:31:d1:b2:6d:2c:2a:9a:13:89:d9:0d:b6:
ee:69:f6:10:97:b4:3d:0a:f0:10:ab:7f:02:16:1b:
80:01:66:fc:91:a2:28:88:8e:d4:15:14:3c:da:f2:
d7:bc:f8:78:c0:8a:b0:a0:e8:7c:29:97:94:8f:6e:
09:9d:7b:ca:3e:60:41:89:30:b8:f8:24:0b:60:6a:
8f:b7:f1:21:7a:40:78:a7:ec:53:72:bc:3f:2f:35:
b3:2a:f6:84:f9:6a:10:aa:ee:7a:44:23:f0:88:32:
1e:41:d3:44:59:04:96:b6:e3:82:0f:28:74:34:a7:
95:b8:73:26:a3:a6:72:57:5c:c1:23:c6:fd:07:4c:
8f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AD:60:09:A7:88:4B:CD:AF:A8:20:93:CA:26:87:DC:60:1F:08:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e5868084-5d8c-376e-af1c-77fe0c67ae23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:8f:05:cc:29:ac:ac:51:4e:7e:ee:5a:37:fe:f8:40:59:2d:
ee:6d:bc:d9:32:2b:b6:44:43:6d:1e:5a:7b:3f:ec:cf:cc:52:
b7:13:ae:11:90:63:ab:a3:17:c1:be:3a:12:07:bd:66:c3:d2:
a3:e3:5c:4f:9d:13:1b:26:0a:8f:ad:a8:71:ff:02:93:1f:bb:
7a:82:71:48:11:cb:33:87:a8:ba:75:b6:3c:a2:71:e0:a3:68:
ad:8f:5f:1b:7a:e0:54:0e:59:2b:5f:a1:b4:e7:69:6a:b1:75:
f6:63:a2:a0:59:27:62:51:a0:25:d4:c9:4c:54:a1:19:b2:58:
0a:8c:4c:b5:be:23:4b:b0:bd:7a:df:31:09:61:00:10:5d:03:
83:89:f9:2c:93:47:34:77:fe:53:0b:be:71:e0:99:c7:d3:38:
f5:aa:b6:ec:4f:2d:ce:2c:0a:cd:50:19:2f:a2:bd:32:54:86:
54:9d:d1:1b:32:bb:7d:62:c7:8c:88:01:05:b8:51:f5:09:7d:
ae:af:f8:87:6d:83:d5:bb:00:7a:10:27:51:a5:a2:70:c8:3b:
9d:23:da:61:0e:b9:c0:0c:c1:e5:15:3a:01:b9:8a:96:54:3c:
7b:cf:88:2c:98:c1:3d:67:b0:39:23:3e:af:9a:fd:b1:7c:47:
90:8c:c4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:02:23 2025 by rpki-client