Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0fc1f4a2-ab1f-3fa6-a584-aa9d172a920a.roa
File: 0fc1f4a2-ab1f-3fa6-a584-aa9d172a920a.roa (raw, json)
Hash identifier: r9sxk5LVheJYXIdhjoyeeEVSHX8GyxFksmbxbpd/Da4=
Subject key identifier: 4F:A0:C9:F0:14:72:25:8C:28:66:44:B3:79:27:CF:D5:D8:76:6D:1D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071BF9A88C3EE6FA8572DD00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0fc1f4a2-ab1f-3fa6-a584-aa9d172a920a.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 172.71.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:f9:a8:8c:3e:e6:fa:85:72:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=157b91da-37db-4f4d-9bdd-15666406468e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d7:a2:d5:de:a8:18:35:44:ac:e0:83:80:d9:
25:92:46:60:44:c4:ad:bb:26:73:33:a1:bd:d4:f7:
c3:83:ef:42:29:3e:66:05:0c:87:6f:fc:ba:12:13:
c0:9e:f2:f7:2e:b3:bc:a9:03:9f:c5:b9:8e:13:8d:
74:d8:2f:e7:b6:30:f0:42:11:5b:9b:50:ec:c0:4f:
33:c5:b2:c9:22:58:57:b9:c9:2b:7d:ae:7f:0f:a9:
36:f7:7b:59:7c:de:3f:3e:4e:a5:2a:f0:3c:d8:0a:
41:fb:1e:28:af:b4:13:af:7c:32:5c:f0:72:19:4d:
9e:97:e7:c1:f3:b5:eb:25:d5:58:22:e1:ff:b5:6c:
ab:71:49:8d:8b:3d:0f:cc:79:3b:cb:cf:63:d9:cc:
56:90:e8:18:6d:55:48:ac:a8:8e:af:82:77:50:ad:
34:5a:88:c9:0d:d3:fe:17:91:79:ce:2f:07:05:c4:
cd:ec:5d:b6:df:fb:e1:f9:f3:6c:68:e9:0f:28:2c:
fc:e1:0b:46:f8:31:e8:ab:93:2f:b9:75:05:40:9f:
d9:4e:03:c2:cd:d1:77:c5:cf:82:57:a1:12:dc:85:
82:2f:9a:57:db:36:19:4c:46:0e:f2:af:cb:fe:b1:
8d:9e:4d:c7:61:58:1d:01:56:6c:aa:a1:7e:d6:87:
49:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A0:C9:F0:14:72:25:8C:28:66:44:B3:79:27:CF:D5:D8:76:6D:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0fc1f4a2-ab1f-3fa6-a584-aa9d172a920a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:b8:1a:89:07:e9:27:1e:bd:63:78:27:e5:79:c1:c8:48:9e:
10:cf:da:ad:c6:1c:9b:86:f4:48:6a:8d:04:6d:36:8c:b0:d1:
be:3f:e0:6b:67:c8:da:6e:c0:24:03:8c:6d:48:15:c2:3b:d1:
5d:7e:28:7c:a6:ab:4e:12:66:11:f3:41:b8:43:b2:9d:0a:9d:
f6:df:b1:6f:65:2f:68:36:a7:27:fe:9d:42:17:df:cf:af:42:
7d:88:2e:d8:ef:de:81:c6:95:2e:42:9e:25:df:df:2b:34:1a:
e0:f9:8a:e7:39:c2:1f:ee:ef:33:66:3f:11:27:87:21:a3:6b:
0c:6e:a7:34:da:16:12:4b:2f:f3:19:2c:52:35:49:39:80:c0:
cd:93:6f:3c:c6:86:46:4a:d1:78:8a:ff:07:24:f8:68:61:f3:
f2:11:54:e6:1f:d9:1c:58:d0:cc:c5:5c:e0:f5:0f:ba:29:5f:
76:9b:51:c8:2e:e2:3a:66:d7:d8:eb:55:3b:39:ce:d2:4a:a3:
c8:fb:11:17:96:c2:0e:48:23:88:dd:be:3d:14:c4:66:94:bd:
40:bc:55:29:65:6c:a4:de:6e:a6:51:f2:cb:b6:b6:df:2e:92:
1c:a0:f4:c2:63:76:b7:56:31:f5:44:17:54:a0:81:0b:81:b3:
d5:b1:46:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:16 2025 by rpki-client