Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/87705ffc-7d04-3726-8c38-dc34a1468f6a.roa
File: 87705ffc-7d04-3726-8c38-dc34a1468f6a.roa (raw, json)
Hash identifier: FDaLnys0xi9pMI+W5LrsDe3l3+gS3NB8Gx6qf7bolkI=
Subject key identifier: C7:5E:35:B3:94:A7:F8:D3:99:BC:80:D1:F4:3F:A9:FB:45:38:3C:5F
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584910E1768F8C6C4570BE9B0440
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/87705ffc-7d04-3726-8c38-dc34a1468f6a.roa
Signing time: Mon 03 Mar 2025 14:00:53 +0000
ROA not before: Mon 03 Mar 2025 14:00:53 +0000
ROA not after: Sun 01 Jun 2025 13:00:53 +0000
asID: 13335
IP address blocks: 172.71.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:e1:76:8f:8c:6c:45:70:be:9b:04:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 14:00:53 2025 GMT
Not After : Jun 1 13:00:53 2025 GMT
Subject: CN=8559b2ae-bf4b-448b-b525-20de770384ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f0:92:8e:42:0c:e9:f2:85:ac:07:ba:44:76:
9b:e3:68:99:62:44:77:f7:d2:38:38:bb:f2:ed:77:
02:6d:c2:f6:93:94:7d:9a:e2:c0:57:fe:dc:26:e0:
68:79:3e:73:0d:3a:87:33:4d:c2:07:04:c2:41:82:
6f:21:fc:a7:a8:20:ca:e5:d2:5e:90:26:ae:f2:b0:
a1:ad:76:04:c9:c1:d0:ec:01:98:37:97:be:21:1b:
b8:1a:26:4c:d2:08:da:56:08:f9:25:8e:70:8f:d2:
45:cb:a7:3e:17:c7:43:d9:38:30:7b:50:18:a6:1e:
94:50:28:51:96:8b:69:fe:7b:1a:26:bb:9a:e5:51:
92:74:cc:24:dc:41:54:59:0b:91:8e:dd:06:85:f9:
75:b6:71:34:ff:0c:bb:c9:8f:ec:b3:10:7e:ca:c3:
4c:4d:64:b7:36:72:47:3f:9a:6c:ee:ca:46:da:23:
22:33:ac:6e:90:28:a6:c2:9c:64:ef:30:d7:c0:a7:
44:ab:10:ba:97:95:3f:d0:ee:29:05:f1:8d:18:d3:
a6:3a:47:d5:da:76:ca:e4:63:d3:7b:8d:2e:7d:5d:
60:fe:14:9d:f8:be:b0:5a:66:aa:63:3e:bc:b9:65:
27:74:a3:2c:d6:61:80:7c:3d:59:62:bf:8c:77:1c:
a6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5E:35:B3:94:A7:F8:D3:99:BC:80:D1:F4:3F:A9:FB:45:38:3C:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/87705ffc-7d04-3726-8c38-dc34a1468f6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:0f:20:b6:75:e3:b1:6c:79:46:3c:a7:6e:55:3e:9c:c9:f5:
50:79:a3:0a:27:e1:37:1b:f9:bc:08:b0:48:25:9f:71:18:c0:
e0:3c:ea:f7:9f:4f:0c:35:a1:72:63:6d:f7:9b:11:84:d5:b2:
26:1d:d2:3d:72:36:4c:50:57:fd:6c:b5:a7:dd:72:4d:13:ae:
a3:e7:2b:5f:12:f8:3e:a0:97:7c:3b:5e:74:a4:b5:2e:9b:88:
b0:5f:87:0d:42:56:b6:90:a6:88:9c:29:de:9d:2e:2e:6d:f6:
19:50:9d:c5:b6:d7:bb:ca:c0:3d:63:1d:c3:e1:d6:cb:69:fd:
1f:a3:e9:0e:7a:8f:7c:76:2c:34:bd:7a:e7:93:f1:c5:2d:71:
31:00:67:62:ce:d4:66:55:a3:54:66:5b:d7:03:0c:09:04:e7:
1e:aa:14:2f:bb:10:af:c1:1c:d5:c3:bc:cf:97:5a:53:13:23:
47:ed:70:05:1c:10:da:3f:e8:ed:d3:4c:14:c6:53:13:ca:68:
02:a7:a3:f9:86:5b:89:b6:15:2a:60:9a:59:05:59:f7:0a:65:
a0:fb:67:7d:35:b6:70:b8:67:69:ce:87:15:26:16:cd:58:4f:
cc:69:16:10:66:07:77:59:b8:f1:92:a6:c8:12:d9:9c:be:ee:
7e:1c:66:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:49:55 2025 by rpki-client