Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e4e0fa24-84b0-3601-b8ad-66272f0dd5e1.roa
File: e4e0fa24-84b0-3601-b8ad-66272f0dd5e1.roa (raw, json)
Hash identifier: GODgl5BJ/p97e78i+UQBUaxMy0B7LTMLlbi0z+Fl2gc=
Subject key identifier: 6D:62:4B:61:C0:3B:53:D4:85:99:B7:8F:E0:5D:87:5D:33:08:21:AC
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285849071C054ACE1A825A31582E00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e4e0fa24-84b0-3601-b8ad-66272f0dd5e1.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 13335
IP address blocks: 172.71.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1c:05:4a:ce:1a:82:5a:31:58:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=0a5f7b78-7fd2-4440-873f-2570c1fbe9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:27:e2:d5:52:a5:18:2e:70:f4:08:ca:c6:58:
47:1a:9c:dd:5a:d9:2c:b6:90:fe:61:c4:98:3a:eb:
da:8a:5b:b3:cd:00:bc:06:9b:c9:ec:c3:5d:d8:52:
5c:52:c8:36:31:e7:a9:de:ae:e9:01:2a:8e:ca:79:
a9:d9:44:ac:68:25:5f:0f:71:09:51:e6:99:eb:19:
42:ad:28:9d:14:10:fa:82:2d:b6:a8:34:00:46:9f:
04:b3:33:24:91:f6:3e:73:94:6c:9e:09:b4:98:a3:
98:4b:0c:13:b0:66:3f:e8:85:80:a6:33:7e:f7:e9:
b1:8b:bd:97:94:d3:cf:a8:ff:c3:d5:6b:11:e2:01:
43:51:ad:54:4c:39:05:10:8b:0c:22:20:bb:b6:2d:
1d:f8:12:49:96:d7:5c:4c:d5:2f:6a:7c:9a:85:80:
34:35:16:49:f3:01:40:9d:1e:4b:f9:53:54:06:0c:
0a:fd:22:bf:c9:3a:a5:d5:5a:c8:00:66:c5:71:d9:
09:02:1e:bc:6a:19:2e:6a:5b:80:f6:51:29:fc:e6:
ff:3a:27:04:e0:07:5a:ab:b9:04:ca:8b:13:3b:22:
71:c5:d5:7c:2f:ac:95:e7:0b:78:94:d8:2e:0b:2d:
23:ad:be:42:b2:23:b6:fb:7f:a4:c5:67:d0:98:fc:
69:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:62:4B:61:C0:3B:53:D4:85:99:B7:8F:E0:5D:87:5D:33:08:21:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e4e0fa24-84b0-3601-b8ad-66272f0dd5e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:b2:12:b6:87:ae:fe:7f:ad:6f:d5:f9:84:b1:3e:39:aa:0d:
f7:d6:4a:84:db:83:07:ce:0a:aa:f7:b1:5b:9b:af:bf:dd:9d:
fb:24:7b:ac:21:69:58:26:e3:10:e8:f3:a6:0b:fc:14:f5:42:
90:28:e8:7e:14:78:d2:0a:4f:b6:ed:cb:43:c1:ed:67:14:c2:
29:1a:e6:b4:f5:d3:e1:02:25:32:40:25:4d:b3:e4:b4:06:75:
3a:1c:40:8b:51:d9:57:c1:0d:b5:03:a2:a9:cc:f2:9f:3c:bc:
2e:55:6a:d1:3a:3d:c4:b0:fb:06:b6:57:2a:d8:d5:dc:24:51:
9a:d4:61:46:81:85:ec:a2:72:fe:d5:81:a9:2c:27:1f:4a:bf:
6f:c0:35:89:b1:26:58:66:17:80:b4:0b:f2:45:c7:17:d4:af:
f6:26:bb:a2:fa:89:16:ae:f0:7b:13:5f:c6:a9:98:5f:1b:84:
3f:37:fc:23:8c:55:01:80:38:e9:79:dc:47:f5:1e:47:3d:06:
00:15:78:13:75:c0:2a:76:12:fc:92:d5:0e:de:a5:02:37:2a:
4f:9e:35:c7:8c:7a:57:71:15:1a:41:b0:5d:90:a0:05:bb:af:
54:5c:ac:99:37:0f:d7:a2:5b:43:06:45:31:43:6e:3d:21:c3:
1b:7e:0b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:52:32 2025 by rpki-client