Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/799dac6d-77ec-354d-93ee-26d180b5d533.roa
File: 799dac6d-77ec-354d-93ee-26d180b5d533.roa (raw, json)
Hash identifier: JrFyd2zKQ5f8bLsejhg/6FLBjYOfRnP9PU7mmgY6a80=
Subject key identifier: E8:53:B2:5E:F8:52:8E:AC:01:53:E8:07:B9:E5:92:A7:5C:D8:CE:C3
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584910E173CB065B91855F2CEB80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/799dac6d-77ec-354d-93ee-26d180b5d533.roa
Signing time: Mon 03 Mar 2025 14:00:53 +0000
ROA not before: Mon 03 Mar 2025 14:00:53 +0000
ROA not after: Sun 01 Jun 2025 13:00:53 +0000
asID: 13335
IP address blocks: 172.71.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:e1:73:cb:06:5b:91:85:5f:2c:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 14:00:53 2025 GMT
Not After : Jun 1 13:00:53 2025 GMT
Subject: CN=b85d3d00-fca4-47e6-835b-07f184f39310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d9:6b:46:1d:29:1a:a3:c8:4b:2c:d5:81:58:
e2:aa:af:04:59:ab:f3:fc:12:af:95:0a:f6:96:89:
ff:58:09:be:80:ed:28:1b:2f:f9:f8:e3:71:69:07:
71:ec:2e:e5:e1:bd:fa:53:70:15:e3:3c:92:21:1e:
f4:ef:30:79:63:3b:2a:cf:a3:84:fa:c8:02:b1:2f:
24:85:7c:0c:49:28:d0:58:4d:96:64:14:ef:c6:86:
6a:96:0d:69:89:fe:6f:d1:37:14:71:c5:0b:16:c1:
d7:56:09:91:c0:db:78:b0:16:91:a4:5a:89:0a:b8:
8e:7a:db:26:af:0c:43:43:37:3c:ff:7d:3b:5d:c0:
bd:aa:13:ef:95:e4:18:a5:e9:7e:34:4f:30:14:69:
94:ce:a7:77:53:bc:a9:49:d3:ed:e9:e6:2f:56:a6:
f4:34:59:fe:8c:1e:9a:da:30:ba:ba:9c:0a:1d:a1:
2d:c3:96:94:b4:36:a7:c3:99:1a:53:c5:ad:20:fa:
7e:93:f2:80:b7:cc:27:e8:39:34:b5:4c:35:78:ab:
5f:a4:41:48:01:2e:f1:68:bd:ae:89:3b:c3:c0:1a:
97:f0:1a:00:20:24:46:37:ed:12:c4:20:b3:f0:0e:
c7:34:ed:6c:e8:b7:97:42:7b:c0:83:ab:6d:52:62:
71:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:53:B2:5E:F8:52:8E:AC:01:53:E8:07:B9:E5:92:A7:5C:D8:CE:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/799dac6d-77ec-354d-93ee-26d180b5d533.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:e5:55:f2:7f:70:d2:d3:54:b1:44:ba:c1:04:52:ba:4d:c2:
e4:8a:07:12:ea:b6:68:22:20:68:9c:86:56:7b:6a:b9:28:0c:
88:c9:a7:ff:70:d6:7e:c1:67:8d:cd:9d:61:af:61:df:67:48:
e1:a1:1d:b8:6f:1e:38:03:61:3b:fb:d1:d8:1c:3b:48:82:f7:
d1:2d:5d:a0:12:17:9a:69:ba:2e:1a:4e:b8:b1:76:83:ec:fc:
28:6a:bd:5f:dd:17:8c:95:f0:11:af:b8:1e:49:34:76:20:58:
ec:68:1b:01:5e:34:14:6f:ab:ce:60:4b:fa:0c:a7:4d:bf:fe:
80:1c:3b:1a:57:61:24:5b:65:c0:4b:24:4d:ee:af:af:28:6b:
dd:dd:63:4d:4c:99:d7:ef:6d:45:55:47:e3:d4:5c:8c:2c:8a:
67:0b:c2:07:55:35:e7:5d:8e:3c:22:ec:80:d2:ae:03:97:85:
fe:2a:12:89:93:1e:70:d0:51:46:6d:59:09:83:8c:6f:31:9f:
d3:82:5a:53:74:4b:ee:70:7a:d4:c4:a1:f8:0a:5e:dd:ae:e9:
40:e0:b4:4b:6d:50:9c:6e:03:c5:8c:8f:ce:f7:e2:4a:a8:bb:
f3:dc:b0:84:5f:f8:22:89:de:81:2d:f8:c1:3f:08:33:dd:fb:
b1:eb:21:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:15:37 2025 by rpki-client