Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d37a8a99-70c7-3742-9762-8ef8e2bfbef0.roa
File: d37a8a99-70c7-3742-9762-8ef8e2bfbef0.roa (raw, json)
Hash identifier: 3WplFR75d/IasaMEJImytMcjcdtzfbK0EZ7ynko5ySM=
Subject key identifier: 3D:1E:6F:33:46:A2:4D:EA:52:32:3D:15:47:5F:53:11:06:E8:5D:E7
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858490F7BFA821189717598A5B780
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d37a8a99-70c7-3742-9762-8ef8e2bfbef0.roa
Signing time: Mon 03 Mar 2025 02:00:39 +0000
ROA not before: Mon 03 Mar 2025 02:00:39 +0000
ROA not after: Sun 01 Jun 2025 01:00:39 +0000
asID: 13335
IP address blocks: 172.71.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0f:7b:fa:82:11:89:71:75:98:a5:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 02:00:39 2025 GMT
Not After : Jun 1 01:00:39 2025 GMT
Subject: CN=fab9feac-1f71-4bf0-b71b-e90b0ed78506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ff:42:c0:26:a8:dd:df:07:ed:d6:d9:02:8a:
86:74:69:f9:fb:57:cf:43:1e:b6:80:57:3e:3a:5f:
da:23:8f:70:5c:7e:01:38:31:98:31:87:79:a8:69:
4b:be:f2:34:5d:a1:67:5b:9e:ea:ec:1d:3a:2b:28:
bf:f3:a6:6a:3d:7c:d3:d0:95:bc:63:72:2f:b3:5e:
40:48:2a:12:bd:f0:bb:43:39:83:0d:3d:00:e8:14:
7e:31:72:1b:6c:65:19:fc:95:0a:44:10:00:d0:0e:
ec:51:69:a8:ef:b7:80:ec:05:26:42:ff:74:d3:a8:
6c:ca:71:c6:02:62:1f:a7:17:ef:6f:e7:0a:e5:13:
af:d3:55:e8:a8:0a:29:0d:1a:dd:e6:c0:8c:fc:4a:
17:64:53:04:80:03:5a:fa:81:d1:e2:29:f2:11:c7:
0d:b6:f5:c0:c8:62:6c:7a:16:ad:d9:60:9c:6a:28:
1d:38:30:b9:2b:4d:be:db:cf:db:80:53:eb:99:98:
37:4e:8a:3b:4c:ec:40:0d:4c:d1:e1:95:19:b3:e2:
5e:2b:14:1a:29:e4:3a:1c:30:aa:20:06:88:0e:8c:
5f:f8:84:8b:f1:b0:ab:82:fc:8f:44:28:1b:a3:0e:
e7:a6:b0:92:77:e4:25:0f:87:15:81:99:41:ba:fd:
b3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1E:6F:33:46:A2:4D:EA:52:32:3D:15:47:5F:53:11:06:E8:5D:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d37a8a99-70c7-3742-9762-8ef8e2bfbef0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:d7:0b:05:44:41:60:3e:17:0f:04:9d:3a:1e:27:78:cf:dc:
06:40:14:a3:56:46:19:99:46:fd:bc:3f:32:51:05:eb:32:ea:
18:9a:75:cc:99:d9:6e:37:1d:76:da:9c:fb:85:b4:7a:14:1f:
9a:fa:f0:5f:3f:66:d7:1a:c1:08:d0:8d:1c:36:77:4c:1d:2f:
3b:32:d2:02:5a:06:ae:e8:d5:e8:9a:88:9a:2e:9e:6f:86:83:
a4:ff:c6:56:25:69:8f:a6:56:ab:d7:10:95:0b:8d:93:81:ec:
81:f5:06:5e:d4:90:47:74:13:a7:94:17:a3:e7:95:4c:70:b0:
31:ec:b7:68:81:39:88:bf:18:a7:6a:20:5b:5d:ff:69:f9:41:
db:27:60:67:db:e8:ad:0d:f1:58:13:63:30:7f:92:34:88:0a:
ae:f5:ac:09:74:6d:e7:f8:85:78:e7:94:b3:11:fb:cf:db:85:
30:b0:44:a8:33:77:c7:ad:3f:a4:6e:8e:2b:89:53:0a:72:80:
ba:2a:66:59:85:02:df:13:ab:2c:25:af:d7:06:5e:ea:54:de:
b2:70:0b:a1:db:e3:24:fb:ef:2a:0b:21:3e:9f:aa:21:6f:41:
c0:d2:43:2c:fe:83:d8:d1:93:79:c8:fd:59:ec:e0:16:5b:60:
42:10:2f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:17 2025 by rpki-client