Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8cfdd889-e994-345d-823c-e2688cee7aca.roa
File: 8cfdd889-e994-345d-823c-e2688cee7aca.roa (raw, json)
Hash identifier: ar5Kbu09+rqm2kccrkhUBfBstKNU1ZdZQvCPgQssHRM=
Subject key identifier: CB:77:78:10:F4:83:EF:38:28:7A:13:89:F2:A4:14:A5:22:25:B8:12
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584910E174F648F80FAC8A4FFD80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8cfdd889-e994-345d-823c-e2688cee7aca.roa
Signing time: Mon 03 Mar 2025 14:00:53 +0000
ROA not before: Mon 03 Mar 2025 14:00:53 +0000
ROA not after: Sun 01 Jun 2025 13:00:53 +0000
asID: 13335
IP address blocks: 172.71.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:e1:74:f6:48:f8:0f:ac:8a:4f:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 14:00:53 2025 GMT
Not After : Jun 1 13:00:53 2025 GMT
Subject: CN=3a6cccc2-be70-4073-b1a9-f6d6b3fb5272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e4:ed:ba:70:19:83:26:13:8d:df:d3:31:b9:
1b:a8:f3:c8:de:32:fa:06:9e:47:ea:af:22:85:26:
f6:dc:e8:f8:a6:f8:d4:57:5e:13:e3:0e:10:bb:fe:
a5:2c:d2:66:d3:9c:a9:d7:92:c5:e1:7c:57:8b:27:
94:35:8f:69:a0:ab:f6:ba:d0:c9:03:c0:e0:a9:69:
45:54:41:61:ae:83:7d:61:76:20:00:f9:fa:d4:a4:
66:0f:85:43:ca:71:16:d6:0e:e0:8f:e9:e2:dd:32:
83:ef:a2:65:64:db:72:e8:aa:56:db:73:5c:fa:69:
6e:3e:50:79:10:71:1b:f1:07:c0:92:d0:2a:f8:4c:
8a:5b:af:a9:f1:64:3e:9c:d3:e6:e4:5a:fc:03:87:
f3:63:e0:4b:7d:35:8a:2d:85:ad:8b:3c:c0:e6:46:
5e:fe:5a:b8:f8:1a:e5:2d:bc:c6:01:97:38:cf:54:
d9:7f:57:e7:d0:d8:31:1f:8a:3d:41:b3:06:71:12:
50:82:23:eb:42:82:fc:04:4c:c5:95:6a:44:9d:53:
5e:b4:ce:a5:5b:14:08:51:6e:a4:e5:a8:0d:96:69:
93:f8:e0:4f:e6:f7:46:b6:e2:3c:a9:3a:f3:35:39:
33:45:90:f0:55:ab:2e:3d:55:c2:af:1d:d2:a3:b2:
31:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:77:78:10:F4:83:EF:38:28:7A:13:89:F2:A4:14:A5:22:25:B8:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8cfdd889-e994-345d-823c-e2688cee7aca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:39:4d:b2:9d:47:4b:89:3e:42:db:83:20:ce:15:43:40:e0:
5e:2e:2c:ce:bd:d0:aa:9d:e1:6d:90:70:b3:7a:ae:bd:b9:fc:
c8:b9:1a:4d:51:02:02:9e:48:0e:bb:e1:fe:84:bd:2d:90:2e:
a5:00:28:d6:a3:0e:81:33:9a:1e:62:9b:ec:20:aa:cb:94:bf:
de:a4:fa:19:e4:a4:27:25:a0:c8:7f:6e:e1:e9:0a:ee:da:06:
af:1f:30:a2:8e:a0:58:74:f9:b7:fb:3a:91:0d:95:92:dd:0a:
b8:3a:c4:81:94:c1:df:e9:7d:4d:12:24:24:f9:c6:c6:54:28:
de:90:82:d1:88:b1:09:b0:1b:07:12:bb:2e:15:ca:bc:6e:5f:
af:d6:39:b2:85:fc:86:83:fa:6e:c4:fb:bd:04:09:d5:4c:ef:
60:6f:42:a4:a5:bd:38:30:3e:24:d4:c3:56:29:01:b5:3c:1c:
61:0d:6e:c0:a9:99:5c:f9:0a:c5:c2:9a:0b:41:22:ff:41:d4:
83:ce:d9:18:df:20:24:34:05:a1:05:72:d3:8a:aa:5f:11:47:
60:6b:1c:28:3d:f3:56:d6:e8:24:09:05:ea:cd:2e:55:60:5b:
92:4a:48:85:ea:75:fb:8d:52:b6:5e:10:f1:ab:d2:be:46:eb:
84:0e:41:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:51:27 2025 by rpki-client