Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d44b16e1-558a-3344-9295-18b764afa5a0.roa
File: d44b16e1-558a-3344-9295-18b764afa5a0.roa (raw, json)
Hash identifier: f+7UPIwrqpQdRc+SXxkT99LC17aJeJO2E86iWhU76ec=
Subject key identifier: BC:A3:D0:53:7E:18:24:B9:96:79:11:B0:A1:86:34:03:D5:01:F9:7D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584905B6CDE3B027EEA1320A2B60
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d44b16e1-558a-3344-9295-18b764afa5a0.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 13335
IP address blocks: 172.71.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:cd:e3:b0:27:ee:a1:32:0a:2b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=43683573-6de4-462a-b2dc-5a691339b530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:32:6c:ee:d6:dd:a9:6e:79:dd:e7:26:6c:
ac:b0:d8:a3:a5:d6:56:47:5b:ed:c0:6c:89:f3:62:
4d:8a:d8:b5:58:87:02:d7:ee:69:f3:21:8f:bb:b8:
64:a4:61:88:0a:a9:51:9f:fa:18:45:09:58:61:8b:
7c:f4:7e:7c:1d:c8:3f:f8:93:d3:fd:5e:94:1e:e3:
61:ce:2d:19:e9:7d:20:33:f0:9b:ed:e5:30:7f:3f:
2e:22:b4:a7:89:c4:df:7b:5c:96:9f:ea:16:24:49:
7f:a0:41:0f:1f:36:7b:05:bf:89:26:7a:4f:55:79:
b5:b8:47:65:22:f4:e4:70:3b:52:d4:d4:04:0d:68:
11:9a:6f:9e:36:a4:01:2d:6f:81:b5:9e:17:c6:34:
a9:59:ff:3c:3e:ab:ee:1f:c6:c1:06:d3:98:b4:ab:
06:02:44:26:60:ab:e5:14:79:1a:06:3d:14:a4:33:
4d:13:60:70:68:0b:ae:1f:fd:b2:4c:2e:fa:e2:03:
42:63:a0:9d:6b:d7:1e:2d:b7:87:4a:39:e9:25:66:
6d:4d:01:b1:4e:b7:21:95:85:f5:73:2c:ad:cd:04:
5c:17:37:7a:97:5b:98:41:43:29:46:b5:10:0c:8b:
8a:e4:d3:94:7b:18:74:09:ad:8a:d1:6a:f8:17:12:
6c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A3:D0:53:7E:18:24:B9:96:79:11:B0:A1:86:34:03:D5:01:F9:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d44b16e1-558a-3344-9295-18b764afa5a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:80:34:0e:1f:e2:1f:d3:0b:17:ec:40:1e:2e:86:d1:93:f2:
0e:5b:ec:b8:3b:24:80:53:54:84:d0:61:97:0b:bc:95:75:fd:
c0:39:fd:56:55:b2:37:e7:9b:96:8d:79:4c:f2:c6:83:b1:75:
d3:54:e0:0a:34:0f:1a:79:8d:d8:88:64:89:70:ea:a1:ca:47:
fc:37:54:f8:db:15:7b:05:a3:8f:92:9f:1f:0d:03:f0:d8:f2:
15:03:e7:61:d5:bf:6c:8c:8b:3c:6c:72:2d:79:a8:b7:c7:1c:
24:07:dc:54:f4:39:ff:09:eb:eb:ab:6a:ee:9e:78:49:05:86:
99:21:2d:28:66:2d:34:8f:64:fe:6f:d2:36:03:8a:bb:1e:f1:
ab:68:aa:6f:67:ee:38:84:2e:b0:34:bb:94:b6:93:39:f8:fe:
08:2b:7b:70:92:c5:fe:b0:ca:95:1e:f0:0c:8d:07:58:d2:cf:
aa:a0:25:d5:a6:65:fd:6a:a0:75:c5:31:a8:47:f9:0c:0a:2a:
6d:9b:45:03:ea:8f:d5:35:f8:a9:78:9d:6c:fc:cf:a5:50:48:
89:7e:85:d8:f4:ab:7f:50:e3:2a:06:7c:f0:a3:0b:13:da:b0:
85:40:42:88:92:85:05:ea:e3:ee:df:7b:cb:df:c9:9f:46:9d:
37:c2:d4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:51:26 2025 by rpki-client