Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2610cb2e-339b-36b1-afc7-4687cbaecd42.roa
File: 2610cb2e-339b-36b1-afc7-4687cbaecd42.roa (raw, json)
Hash identifier: 0OboS24O0DFa3HT8xqxSXPtctXIqD3gsZbR5oT2O9Kw=
Subject key identifier: 2C:BD:48:A4:08:97:95:CC:BF:C6:B4:70:26:D4:A4:79:4E:89:5A:19
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584910E170A4EFDC3EE5F9418A80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2610cb2e-339b-36b1-afc7-4687cbaecd42.roa
Signing time: Mon 03 Mar 2025 14:00:53 +0000
ROA not before: Mon 03 Mar 2025 14:00:53 +0000
ROA not after: Sun 01 Jun 2025 13:00:53 +0000
asID: 13335
IP address blocks: 172.71.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:e1:70:a4:ef:dc:3e:e5:f9:41:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 14:00:53 2025 GMT
Not After : Jun 1 13:00:53 2025 GMT
Subject: CN=ff81a492-3e11-4874-9d51-00e7bbcb0969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bf:41:9d:92:89:f0:c7:96:b5:3b:f7:97:17:
bb:23:f3:6b:0f:c1:57:0d:97:03:e0:70:2b:0e:c7:
36:4f:95:67:5e:8b:b0:18:f6:cf:72:59:f2:67:72:
67:68:e4:8d:25:9f:12:a7:0a:2e:24:c0:53:f4:9d:
45:17:80:84:68:bc:3e:5b:89:64:c5:bf:dd:3e:30:
fd:51:3b:de:7d:bc:68:b0:19:b1:76:74:cc:f2:eb:
a6:58:78:5c:8f:eb:a7:e6:c8:25:24:4d:d6:36:6b:
2a:20:bd:33:c0:45:9e:28:cf:75:70:ab:44:52:17:
6c:ba:52:a6:e5:c7:23:ae:7e:c0:07:1a:2d:b2:0a:
08:66:31:c9:91:b7:12:5e:c5:0f:e1:40:62:00:a8:
29:9d:ff:7d:e4:58:42:a0:9e:f3:1c:6e:8b:b9:c9:
b2:4c:ac:46:68:b4:23:a9:d8:85:d0:8c:f4:2c:64:
31:6a:7c:36:44:12:cb:96:0e:a5:5e:06:24:7d:b5:
9d:da:eb:d8:1a:96:a3:60:80:f9:67:1e:35:91:69:
65:76:04:c9:2a:7f:59:cc:5c:66:cd:b2:b7:e7:af:
f3:84:1f:7d:43:a2:7d:1f:91:fc:f1:07:b2:b2:49:
86:48:ed:3e:5c:da:b8:01:4d:7a:27:99:b9:e3:15:
8c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BD:48:A4:08:97:95:CC:BF:C6:B4:70:26:D4:A4:79:4E:89:5A:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2610cb2e-339b-36b1-afc7-4687cbaecd42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:e3:04:e9:35:f8:e2:f9:73:58:e9:a1:7d:83:cc:42:91:55:
9e:c1:c8:bd:5b:a0:2e:24:0e:6e:11:72:39:5c:17:ca:2b:45:
ca:87:f8:22:6b:d5:c6:02:ea:90:0c:b5:c9:19:f3:11:2f:ad:
c0:a0:46:ce:36:60:5e:80:08:58:64:22:78:5f:7a:35:4b:43:
ef:0a:83:f4:a6:d0:b3:f4:c5:84:8b:42:e6:bb:c8:43:64:7a:
92:ef:de:3f:70:b0:ff:a8:33:2c:99:37:89:4d:81:3b:d4:3e:
5a:1e:f8:5b:b7:b4:e0:71:9e:c3:79:0a:29:55:d7:c0:59:46:
6e:a2:f0:49:cf:66:3c:35:92:e0:65:c2:a7:5b:46:cc:c3:f7:
c9:d2:8c:d9:d7:19:9a:96:87:90:6f:4f:5a:50:4b:eb:a3:ff:
66:c3:d0:e9:56:95:26:75:cd:5e:59:90:85:6d:87:c2:9d:05:
d7:58:05:fb:96:61:56:e7:7f:13:15:b5:e6:45:ad:28:01:59:
9e:b9:9f:3e:f2:77:8a:c0:c0:4b:37:da:ec:9f:78:6e:38:01:
b9:94:da:96:2f:aa:f9:e9:ab:ae:24:50:33:6c:c3:5a:14:af:
9a:9b:02:7f:a5:d7:86:da:8b:05:75:c2:92:f3:1e:3a:07:86:
b9:f4:d6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:02:10 2025 by rpki-client