Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/69136d25-6cea-331c-b4f3-4060b88abae4.roa
File: 69136d25-6cea-331c-b4f3-4060b88abae4.roa (raw, json)
Hash identifier: bxFzOhKzu1m/2yQ1Y/k4ygkikPeg6tEdyOVzL4PiPu0=
Subject key identifier: 7A:EB:94:1D:2A:33:D7:32:D7:6F:5C:9B:C3:37:22:5B:79:93:84:95
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071BF4F95F5696F6E3301F30
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/69136d25-6cea-331c-b4f3-4060b88abae4.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 172.71.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:f4:f9:5f:56:96:f6:e3:30:1f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=565a00d7-5718-498f-80e6-b7dd0b9a73c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:d3:de:3c:3b:a0:00:42:af:39:90:a7:31:
a4:f4:78:58:30:df:f0:76:f6:29:5f:f0:7d:2a:98:
9e:dc:1a:15:61:eb:84:7c:1e:e4:1a:a6:44:01:9d:
0f:c4:84:a8:5e:73:10:b4:c8:dc:ec:2a:6f:22:9e:
05:1e:41:4d:83:fa:d6:6d:ea:d5:7d:d3:51:61:1a:
fb:ea:e7:8a:88:1f:82:a0:59:d8:ce:d9:4a:84:ad:
92:23:03:1f:9c:c5:ce:d8:46:7d:38:72:c0:61:60:
34:27:ad:f3:00:7f:71:ec:2c:ea:35:a6:5c:80:80:
57:d7:17:8b:98:06:0e:2a:68:8c:68:e6:01:89:d4:
e8:89:d4:15:b8:77:b4:41:fd:0f:c2:09:ad:12:cb:
61:85:df:ac:80:8e:46:aa:9d:5c:7b:55:af:48:c3:
17:62:72:61:8f:a7:b8:25:d5:9c:49:97:84:ed:7b:
9c:01:42:fb:9f:2d:54:f5:70:d8:6d:fe:20:55:ff:
2b:93:66:65:7a:0f:37:da:ff:e7:db:b1:5b:ef:d2:
7b:f5:41:e3:32:82:89:4a:f5:f4:0e:a6:ae:54:31:
b1:ac:0b:8b:c9:44:47:3b:9a:13:74:4e:c8:68:a5:
38:c2:90:14:2e:b2:c8:d5:dd:cf:14:02:cc:e9:9d:
21:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EB:94:1D:2A:33:D7:32:D7:6F:5C:9B:C3:37:22:5B:79:93:84:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/69136d25-6cea-331c-b4f3-4060b88abae4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:6d:46:09:c9:44:14:00:cb:42:04:cc:3b:5a:2c:c2:ff:07:
f4:36:c5:46:db:43:69:18:f7:e4:7b:e7:00:a1:af:e1:28:c4:
94:ff:1b:35:d9:c3:6c:17:95:01:76:e4:36:88:5a:82:35:aa:
25:17:ba:56:9b:16:dd:7c:9c:d0:40:01:d9:80:50:dd:da:0b:
2d:a3:c4:98:e1:86:3f:a9:35:6e:ec:6f:5b:f7:96:27:db:e3:
fa:37:50:f9:2d:82:d0:3d:33:95:37:3e:2b:ae:0f:a0:0a:fa:
a1:38:0c:c6:f3:ef:70:e0:23:8a:e6:e1:c4:c8:9c:9e:cc:86:
b2:8e:c5:ce:9e:61:6b:76:d4:d4:08:d2:35:ac:52:60:2e:a5:
d1:d7:47:35:4e:63:83:36:db:a0:31:f2:f4:fd:bf:55:0d:df:
2c:56:af:53:6e:46:92:cf:b2:35:5e:f4:9a:dc:15:de:49:29:
52:5d:c1:b2:38:fc:4f:38:e5:e2:48:57:34:12:5c:c2:53:f0:
77:19:0d:81:70:f8:d8:94:a0:27:78:3b:df:0a:54:d5:ad:e3:
77:7a:1f:a6:cd:02:40:c4:20:00:12:5e:e6:dc:6a:f7:6e:f3:
72:e2:e0:f1:d3:3e:79:18:cf:c0:0f:88:db:ea:98:2a:c8:8e:
fe:41:3f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:57:24 2025 by rpki-client