Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ed33532b-71f4-3edc-8b2c-e05fc4eae1ab.roa
File: ed33532b-71f4-3edc-8b2c-e05fc4eae1ab.roa (raw, json)
Hash identifier: w2pzfGVNTgG7DUjpdKZZFtS60joqKqv3dAXl/7osj3E=
Subject key identifier: 20:F3:E2:8D:79:14:39:DD:D2:FD:BA:25:9F:6F:57:30:DC:BA:C4:4A
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848304527C00870B608B45A9210
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ed33532b-71f4-3edc-8b2c-e05fc4eae1ab.roa
Signing time: Fri 13 Dec 2024 03:05:02 +0000
ROA not before: Fri 13 Dec 2024 03:05:02 +0000
ROA not after: Thu 13 Mar 2025 02:05:02 +0000
asID: 13335
IP address blocks: 172.71.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:45:27:c0:08:70:b6:08:b4:5a:92:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:05:02 2024 GMT
Not After : Mar 13 02:05:02 2025 GMT
Subject: CN=e5c4109f-e2af-4e73-a1bb-15999e111a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:ce:b9:f3:df:49:f0:a8:72:4d:68:91:2b:
04:0a:5f:16:ed:1b:e4:98:e9:14:b4:d0:c9:a8:cd:
6c:0f:9e:aa:67:d6:8b:ad:cb:49:ea:51:4e:7d:c5:
34:03:db:58:d2:9a:91:99:08:a3:6c:d4:bd:11:15:
ea:47:8a:d4:72:65:71:e3:bb:78:f5:60:62:88:7c:
9c:ea:da:b9:40:4d:66:08:e5:51:5e:9c:94:c2:a9:
77:22:7c:9d:27:20:65:e0:a3:9a:63:8a:57:cc:e1:
ba:d6:d3:3c:ac:5f:89:21:69:a9:9e:e7:69:c5:f9:
95:e7:2f:11:1d:b9:d2:80:3a:ff:26:58:64:6d:67:
92:2e:fa:24:4a:1c:e8:61:37:3f:03:80:bd:a5:09:
22:a9:04:33:10:11:1e:d2:78:62:fa:b8:95:06:45:
be:8d:10:d5:ee:e7:f9:85:1d:7a:81:40:2b:82:95:
36:02:17:6f:f8:14:77:5b:b7:ef:35:13:b2:61:34:
98:fc:b7:17:c6:97:e5:5c:1a:db:f3:67:af:bf:d9:
3b:f6:c9:11:aa:36:4d:36:5d:d8:45:bd:08:3f:eb:
fc:73:18:b0:71:b0:b8:28:86:b8:30:59:42:57:e5:
c7:ff:ae:68:bb:71:b6:78:a0:2b:4e:72:e0:67:77:
ce:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F3:E2:8D:79:14:39:DD:D2:FD:BA:25:9F:6F:57:30:DC:BA:C4:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ed33532b-71f4-3edc-8b2c-e05fc4eae1ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:3b:b5:54:98:41:0f:28:16:81:72:14:f2:0d:1d:89:0f:7d:
40:13:a5:ee:b6:c7:84:1e:16:04:8c:ea:b1:02:d5:ef:ca:a7:
77:70:6f:21:69:59:d4:22:53:31:9e:f9:64:24:48:cb:07:e2:
8d:b8:a1:7c:d1:e0:79:4c:69:65:b3:99:8e:e0:a9:1b:76:90:
bb:2d:76:ca:f9:3b:d5:8f:78:c4:3c:1a:b8:b0:87:32:da:fc:
97:fa:66:82:07:1e:5d:93:43:6e:d8:cb:85:4d:bc:83:44:28:
20:00:b5:d0:d3:bd:25:ff:ac:f5:4f:a6:ac:9e:4e:97:11:48:
de:f0:dd:f6:e2:1a:a3:00:84:6d:f2:6c:da:3b:4f:f5:b4:f5:
05:b9:d4:16:6d:a4:8b:a8:2f:3f:50:13:55:67:8c:a6:78:c4:
57:5b:00:ed:61:e3:4a:e6:2a:e4:be:20:76:ed:79:4b:61:cf:
f8:78:36:95:e8:ab:d9:6e:9c:29:97:9e:01:3e:68:32:57:20:
0d:5e:76:57:c8:a7:8a:2e:d9:b5:0e:95:60:a1:2c:9a:23:0c:
cf:4b:9d:2c:c1:f7:cb:b5:59:bd:a9:74:cd:a4:c4:ea:dd:65:
f5:a3:01:60:6c:96:90:5a:aa:5e:98:48:b4:bf:26:e9:75:c9:
7b:3b:b0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:52 2025 by rpki-client