
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9346992-f358-3044-b41e-e5b433a129f8.roa
File: c9346992-f358-3044-b41e-e5b433a129f8.roa (raw, json)
Hash identifier: O6serOMwwZ/zQWbn3vu3hayHhRJs7BvuZwknQpcr2uE=
Subject key identifier: BF:8F:62:C7:94:EE:65:D9:5E:DF:D0:E3:11:C0:94:9A:01:61:AF:A4
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071BF7728B425D9BE2BBB9A8
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9346992-f358-3044-b41e-e5b433a129f8.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 172.71.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:f7:72:8b:42:5d:9b:e2:bb:b9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=ad47794d-ee7d-4760-803d-feea4ee8e98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:26:bc:64:0f:05:ff:e3:12:f5:7a:50:aa:9e:
a1:f0:1e:44:b5:75:48:d6:18:4b:6d:82:a0:d4:a4:
06:e3:46:2c:20:63:17:af:fe:f0:e6:8d:b2:37:52:
f8:5a:0e:02:44:6f:b7:01:60:32:7c:ba:27:13:84:
d9:d6:25:88:a7:28:bb:6f:19:b3:ae:1a:1f:1e:73:
61:2c:6e:f6:88:de:4b:27:eb:4e:f0:80:03:fc:53:
78:bf:08:f1:76:54:64:df:85:cf:25:2a:81:db:ba:
c2:7c:1f:c5:e2:8b:c6:c2:90:52:f1:80:12:6f:bd:
30:e8:5e:bc:99:76:4d:58:2d:7b:db:24:37:b5:fa:
9f:63:35:8d:0e:53:4a:29:04:b9:5f:cc:77:83:cf:
2e:e7:f9:a7:28:0c:5d:ef:21:ec:8a:d7:e1:dc:10:
ca:a9:be:f9:04:3f:0b:51:49:65:2b:8d:10:a5:7c:
f6:f1:39:ff:73:8b:8d:78:3d:d3:5e:ce:56:cd:14:
ef:10:8a:a4:cd:8f:21:37:65:e1:cf:95:c3:dd:a3:
8f:ce:d1:1f:c5:7f:f2:32:95:1a:93:17:3f:16:0a:
ba:a7:81:61:48:a9:cd:8f:ef:78:12:38:14:f7:f7:
23:97:c5:4f:9f:f4:4e:0e:13:ec:22:5c:01:87:31:
35:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8F:62:C7:94:EE:65:D9:5E:DF:D0:E3:11:C0:94:9A:01:61:AF:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9346992-f358-3044-b41e-e5b433a129f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:62:88:7d:e1:5a:14:30:68:7f:a8:1b:5d:43:33:d6:a0:6e:
f9:9f:6c:cf:ee:8a:c9:7f:36:69:01:79:aa:a4:22:a1:70:72:
11:01:bf:1f:27:b5:7a:aa:e9:24:1e:29:4e:3c:0d:83:76:32:
36:eb:ed:55:96:94:61:97:f5:77:9e:04:5f:d9:a2:37:9c:e2:
ab:4d:b2:d1:41:b9:af:fb:dc:24:45:8c:fb:43:c6:84:1d:b7:
cb:95:36:91:da:d7:e8:a5:68:30:85:87:87:cf:88:23:34:31:
c4:52:1b:36:ec:40:25:34:c5:d8:b4:6e:fa:34:64:6a:41:5b:
78:2e:08:8a:89:d1:e5:48:a5:1a:23:7c:d4:20:e5:a3:c0:33:
a2:e5:bf:cc:79:72:ad:2a:44:57:1e:d0:2a:cf:97:3e:b0:9e:
dc:54:e5:fe:11:80:dd:06:23:22:75:c4:8f:dc:dc:da:c5:2f:
88:e2:fc:b9:a1:78:2e:8a:61:6d:2e:bb:86:3f:de:62:19:ad:
33:f8:20:c8:c2:85:bd:bd:24:ab:34:5f:82:ab:99:07:e3:7a:
5d:d3:17:05:44:e8:24:b9:e5:71:6d:ad:92:42:4f:c1:07:31:
22:45:bf:bf:3f:d1:89:06:b0:ba:42:b1:ed:7e:e9:7a:29:0a:
7d:a8:7a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:27:58 2025 by rpki-client