Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3cfb4327-c1af-38ef-a7bd-3ab254363cba.roa
File: 3cfb4327-c1af-38ef-a7bd-3ab254363cba.roa (raw, json)
Hash identifier: Tj5KmaCNoqR4sqbWREkEHrwpqdkAlwqfC0vmY10bwjQ=
Subject key identifier: E1:C6:39:0F:F1:FC:B4:83:19:6A:00:22:19:9F:24:EA:8D:E5:D5:6D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584910E173EC9E8580A2B6C86B60
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3cfb4327-c1af-38ef-a7bd-3ab254363cba.roa
Signing time: Mon 03 Mar 2025 14:00:53 +0000
ROA not before: Mon 03 Mar 2025 14:00:53 +0000
ROA not after: Sun 01 Jun 2025 13:00:53 +0000
asID: 13335
IP address blocks: 172.71.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:e1:73:ec:9e:85:80:a2:b6:c8:6b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 14:00:53 2025 GMT
Not After : Jun 1 13:00:53 2025 GMT
Subject: CN=54a8857e-35a5-4b48-b113-0f48df133c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:c3:64:d5:6c:5c:21:e0:4f:b9:54:6b:d9:
f0:e7:23:a3:a2:9f:a3:a8:8d:c2:e3:36:c3:a7:40:
9e:26:a1:32:6a:76:ee:da:89:3e:0a:9c:41:97:35:
cb:66:2c:5c:a2:49:fe:4b:72:7b:9f:7f:72:a6:a8:
01:16:b7:a5:ac:0c:34:60:c9:f9:0f:41:1c:54:5d:
f1:af:f6:28:75:38:c4:23:f6:0b:a6:6b:81:b2:f6:
46:e5:a1:67:04:f0:d1:36:4d:c1:8e:98:bf:2c:11:
c0:2a:47:87:0a:46:f7:91:b2:ee:68:e2:55:c0:78:
f9:7b:a7:b8:91:28:7c:be:00:44:c4:93:2c:f3:a0:
c0:5d:d5:6c:58:62:1f:68:14:7a:b1:2c:0b:5b:9e:
4e:46:ef:10:bf:39:5e:e3:b9:f8:9d:91:d0:98:4c:
61:57:0b:b0:c3:fc:17:4b:bf:1b:eb:9f:67:e7:6d:
3c:90:99:f3:93:18:b0:dc:81:96:2d:9d:0c:01:14:
fa:58:27:9b:10:ea:b7:65:9b:58:cf:23:24:78:7b:
89:5e:98:22:e7:37:b2:86:24:cb:77:79:7a:36:10:
b9:7a:6b:1d:b4:22:7a:3c:1a:6e:f7:bd:31:67:fc:
43:a9:32:6f:9c:da:3e:cd:fe:b2:8b:48:b8:0e:fa:
8f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C6:39:0F:F1:FC:B4:83:19:6A:00:22:19:9F:24:EA:8D:E5:D5:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3cfb4327-c1af-38ef-a7bd-3ab254363cba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:d6:4a:2d:4e:a2:53:f8:1b:19:5a:4f:10:66:db:12:74:f8:
ea:ce:a6:44:f3:39:88:c2:af:1f:39:bf:f6:85:57:80:f5:22:
66:a3:f0:65:7a:64:d3:77:87:2c:07:b1:d9:ed:3c:ee:20:6a:
1b:f8:73:22:74:5a:41:65:bf:50:3e:b2:84:84:bb:4d:66:f5:
bc:ab:b5:01:d9:7f:66:99:16:69:ca:a4:11:06:65:d9:03:ec:
a3:96:51:d4:ab:fe:d5:6f:b7:d6:95:d2:b7:76:a2:c3:c6:e8:
01:b0:96:02:e0:44:49:a2:98:ce:0c:28:21:0a:8d:c5:c0:b7:
a4:79:15:6b:9b:e3:cc:07:f1:a2:50:aa:86:e8:70:62:04:cd:
61:54:4c:e8:7c:f7:17:e6:75:e1:b7:64:67:a8:6f:e5:ff:a7:
ff:35:b0:2a:81:b0:f2:f8:30:e7:3f:e7:86:ea:7c:fd:a1:d7:
0b:a5:2e:bf:82:0a:0c:90:0a:af:82:12:59:cd:19:ae:eb:ed:
9f:38:79:34:1f:fc:0f:88:75:70:0f:31:ee:89:21:fa:4f:ce:
25:26:4e:0d:37:25:91:a7:42:9b:dc:09:8b:da:18:00:13:04:
c6:19:43:f1:17:8e:c7:3d:98:80:57:94:46:17:4b:91:e0:ba:
c3:f1:77:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:02:07 2025 by rpki-client