Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8222374e-de48-3942-9fc5-b6afdb016b1d.roa
File: 8222374e-de48-3942-9fc5-b6afdb016b1d.roa (raw, json)
Hash identifier: 5Bym2Rj+erBiK0AxpPxv9hIO3X7XL2vqaT1y/WUNdi8=
Subject key identifier: BB:FD:0C:32:96:20:C7:83:7D:7B:0C:A6:41:97:FF:4F:51:D2:FA:21
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6CDAE08E08523FD49B800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8222374e-de48-3942-9fc5-b6afdb016b1d.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 172.71.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:cd:ae:08:e0:85:23:fd:49:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=dac6b115-f371-4be1-9afa-46b44bea4ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:94:f6:ec:55:58:85:00:62:b0:8d:48:e9:73:
64:d1:b5:c2:ca:01:c8:03:56:10:9a:06:fc:dc:db:
1c:fd:6d:cc:5a:cc:85:8e:d5:81:d2:e7:1c:3b:64:
3a:b4:91:0a:8e:92:3a:b2:35:33:f6:50:14:25:6f:
8b:7e:65:a4:0b:52:b0:b8:9b:ca:f3:ae:3e:87:34:
f1:9f:49:ee:0b:96:a5:e2:95:af:60:bb:cf:20:62:
f9:0e:ad:7a:a2:7f:d3:f4:67:57:a1:e9:39:a5:dc:
fb:cd:71:8b:9b:2e:e0:26:4a:ee:47:fc:87:4e:e3:
9b:3c:b9:e0:d4:ea:b5:cd:f2:a9:b0:b4:72:d2:9d:
7b:62:b0:6b:27:00:d1:83:07:8a:e0:e2:35:09:2a:
3b:48:f0:05:49:d8:6d:6f:90:8b:5c:1e:0b:b9:2b:
a2:c4:9e:0d:bc:df:cc:86:11:bd:7f:a0:98:a1:a6:
ca:10:47:08:c7:fe:85:f5:74:32:d5:2e:53:57:52:
b8:9e:10:1c:e2:74:bf:44:6a:45:c0:2c:63:89:d0:
75:d5:2d:dc:93:b3:43:03:ff:2a:9b:69:99:6d:3b:
d3:f7:2f:3a:18:37:c3:ea:3f:9d:2b:88:b5:5d:39:
76:ec:a9:2f:0d:f0:94:c4:64:ad:ff:cd:ce:50:80:
56:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FD:0C:32:96:20:C7:83:7D:7B:0C:A6:41:97:FF:4F:51:D2:FA:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8222374e-de48-3942-9fc5-b6afdb016b1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:0e:d6:0d:7e:b1:a9:0e:33:88:d0:f5:d7:df:f0:fd:49:9f:
46:8a:bf:51:da:3b:79:5e:db:b3:ca:bd:d5:61:9f:18:c2:01:
9e:ea:5d:c2:65:a7:6c:ea:c6:ea:78:65:1a:1b:e3:93:9d:e7:
21:5c:0c:d1:67:8c:e2:85:8b:90:9b:e3:a5:de:f5:03:1e:b5:
70:4e:c9:75:9e:f6:04:4a:6b:aa:e6:86:93:a2:40:bd:d4:ab:
e7:cf:9b:e4:2c:7c:49:08:7c:a7:26:cd:de:ca:75:60:a4:c8:
4a:43:f2:9b:d3:d1:61:f4:dc:8f:d4:d3:6a:ac:51:20:58:1d:
bf:74:b2:56:67:7b:b9:5b:30:c4:ad:e3:6b:48:e3:3b:72:fb:
91:29:e5:8d:82:65:0d:ad:a0:cb:28:b1:aa:c4:0a:11:04:96:
74:67:d6:1a:48:fd:0e:0b:f1:ec:e4:08:c2:75:6b:08:54:ab:
00:e5:0e:3a:b9:49:2d:ba:20:21:5c:2d:c7:99:02:a8:9c:b9:
4b:3d:2a:50:a9:ef:6f:9e:b1:46:a0:16:48:20:39:75:63:39:
18:21:11:3f:27:ab:96:24:c5:24:c8:bf:94:cf:68:30:09:ae:
b1:ba:fe:e4:ee:6b:97:28:a3:b5:88:3f:9c:2a:7f:89:ce:aa:
a2:7d:ca:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:02:07 2025 by rpki-client