Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7644c097-e65a-3ebc-be83-baa3ced8f80b.roa
File: 7644c097-e65a-3ebc-be83-baa3ced8f80b.roa (raw, json)
Hash identifier: ok7ANitWUCq2OzvwaJZMNU+fqHpHkojL3F0JpRhibw8=
Subject key identifier: A8:EE:EA:F5:63:EE:DF:ED:1D:2D:04:0C:FE:6A:F4:67:37:46:FF:92
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584910E174E09A80F3B4EBE8F200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7644c097-e65a-3ebc-be83-baa3ced8f80b.roa
Signing time: Mon 03 Mar 2025 14:00:53 +0000
ROA not before: Mon 03 Mar 2025 14:00:53 +0000
ROA not after: Sun 01 Jun 2025 13:00:53 +0000
asID: 13335
IP address blocks: 172.71.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:e1:74:e0:9a:80:f3:b4:eb:e8:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 14:00:53 2025 GMT
Not After : Jun 1 13:00:53 2025 GMT
Subject: CN=bbae65a9-7f21-49fd-b576-91ace9c21fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ae:93:43:e8:ae:60:55:91:3e:35:94:74:9d:
40:e3:95:e2:49:d0:ca:16:5f:5a:52:19:52:a4:da:
3f:b2:ee:c4:31:e8:2d:4f:5f:ef:aa:03:1f:26:d6:
27:1f:30:12:9f:88:67:fc:49:dc:8f:a3:2b:48:cf:
55:cb:60:60:2c:44:c7:71:f2:69:a0:2a:e6:45:1a:
75:49:a6:f7:1b:75:e3:bb:33:c4:35:76:ba:1e:b7:
e0:59:5b:55:85:95:55:5a:c5:40:fa:a9:91:9b:74:
be:ea:1e:4f:bf:ee:95:57:e9:c6:95:14:fe:4f:5d:
dd:27:b7:8b:85:2b:34:ae:e7:cd:0f:34:ad:55:9d:
8b:fa:41:69:fd:21:e5:77:50:bd:e6:d5:61:b5:16:
01:01:d4:38:08:c5:61:ff:98:73:e5:28:25:55:00:
cf:68:11:27:18:eb:1f:b7:c7:4d:ef:0d:61:07:22:
37:55:e4:9b:30:2e:3d:ce:d8:29:48:3a:fc:5b:5f:
f8:6a:36:b1:79:c3:0c:c7:92:e9:5e:93:ae:00:53:
f2:2f:69:72:65:2f:56:f8:b8:ca:9b:c6:5b:e9:b9:
7e:e9:40:20:4b:32:cf:44:82:25:05:38:67:b4:e2:
af:41:11:a5:38:ca:72:4e:be:48:bc:1e:7a:85:d6:
13:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EE:EA:F5:63:EE:DF:ED:1D:2D:04:0C:FE:6A:F4:67:37:46:FF:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7644c097-e65a-3ebc-be83-baa3ced8f80b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:2c:26:6c:1b:88:45:41:62:0e:b0:b3:7a:d1:fd:21:18:30:
22:52:04:6c:5f:81:65:c7:25:1e:b8:3c:00:52:aa:2f:54:11:
76:2c:f4:3e:e8:d4:ad:f2:93:f8:9d:04:ab:19:1f:43:fe:28:
33:2f:41:26:d8:57:a8:48:53:de:83:67:d7:14:19:18:c7:8b:
ed:12:c8:b2:00:39:b8:f2:b5:af:b5:25:32:95:de:fa:a3:ee:
d5:d6:bd:1a:3b:d4:9d:1b:60:f3:5c:bf:24:2a:d7:3b:2f:b3:
ca:ae:96:5f:8c:9a:fe:ef:9d:c5:4f:d7:55:8e:11:4d:b0:cd:
9e:d0:b8:81:33:7c:d2:97:dc:11:1e:be:cf:dc:ae:30:2a:59:
81:5e:d0:ff:4d:d4:2e:2b:8e:4b:f8:11:41:84:d6:b4:f9:e9:
07:90:2d:0b:3e:50:38:5c:e4:fe:ea:be:0f:94:4c:dc:6a:7e:
31:e2:fe:a8:94:f0:87:25:52:c9:32:19:23:c7:65:50:f3:14:
ec:ca:04:26:b4:8d:de:c8:9d:4f:94:68:2c:c5:66:16:03:2e:
58:f0:de:51:0a:af:e6:f4:eb:fd:1e:ca:96:07:f7:61:98:f4:
47:8e:f9:d1:a4:04:bc:e4:9b:c8:ca:c1:e6:30:fb:39:7a:6c:
23:a6:79:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:37:21 2025 by rpki-client