Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/03eb4b43-2bc3-3cc7-bb31-6446ec1c66a0.roa
File: 03eb4b43-2bc3-3cc7-bb31-6446ec1c66a0.roa (raw, json)
Hash identifier: b14OwGK99K0ABBOgTCKnHtslCJwOLEOpNheDGX0ypWM=
Subject key identifier: 83:5C:DB:F7:23:5E:80:81:3E:98:C8:29:06:30:DE:5F:1F:E9:0F:46
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848280FD379E29EAB78F403F560
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/03eb4b43-2bc3-3cc7-bb31-6446ec1c66a0.roa
Signing time: Tue 10 Dec 2024 04:31:07 +0000
ROA not before: Tue 10 Dec 2024 04:31:07 +0000
ROA not after: Mon 10 Mar 2025 03:31:07 +0000
asID: 13335
IP address blocks: 162.159.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:0f:d3:79:e2:9e:ab:78:f4:03:f5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 04:31:07 2024 GMT
Not After : Mar 10 03:31:07 2025 GMT
Subject: CN=cf2d5e77-ee0b-48c0-9b46-158d10808a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:db:a4:ce:fa:17:f8:28:a0:0a:5a:f1:2b:29:
d8:4e:2a:db:7a:8d:f5:12:00:b9:bb:69:4c:25:a7:
68:98:c2:21:6a:7b:f7:76:9e:7f:96:96:05:a5:52:
46:17:a3:06:70:b9:85:39:31:a0:27:a6:d3:7a:a0:
a8:8e:2c:be:c1:00:d0:07:5c:bb:28:68:4f:89:61:
d4:26:e6:06:3d:08:77:43:37:97:31:3d:58:4c:87:
55:9e:fb:4d:30:c5:4b:80:b9:cd:0a:97:2e:18:75:
da:52:8f:6f:f8:7a:f9:f4:dc:3e:af:5e:e8:07:0e:
7f:cb:2b:6a:7d:19:ff:15:29:63:2d:42:6d:ba:ef:
15:00:33:c6:29:e6:d4:db:01:85:e7:33:bc:e0:6d:
76:d0:1f:35:a9:ba:25:5b:90:d7:09:c9:27:c4:75:
9c:fc:df:f8:12:ed:99:e7:a4:e0:91:ca:7f:87:2f:
0a:e4:66:8c:ee:51:d7:fd:00:06:dc:4a:8b:c9:72:
4c:9a:83:40:fd:71:54:44:53:2f:2e:33:43:69:9e:
46:9b:0b:fe:26:af:df:fd:14:9d:96:46:81:af:ef:
64:88:e2:33:b5:c7:17:34:df:79:38:c9:05:a9:43:
eb:72:ba:f4:88:7f:a6:53:9d:8c:24:b9:5c:86:28:
b1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5C:DB:F7:23:5E:80:81:3E:98:C8:29:06:30:DE:5F:1F:E9:0F:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/03eb4b43-2bc3-3cc7-bb31-6446ec1c66a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.159.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:a1:f2:83:0b:99:f8:b6:cf:c1:0a:2a:69:f3:85:1a:44:22:
f0:e0:e9:61:e2:1b:6a:f9:6e:7a:22:ec:3f:88:b2:80:05:e2:
6c:c8:6a:c0:db:00:43:28:a7:17:ca:1b:55:51:81:d7:30:57:
ba:79:a8:79:57:a8:fb:52:a9:09:eb:83:dc:08:9e:79:ec:6d:
d1:71:ba:d3:d0:75:53:20:e8:5c:c2:73:93:df:38:21:ea:f6:
fc:1e:65:de:4b:84:b1:dc:87:88:1f:64:b5:bd:d3:f2:5e:a1:
8e:e3:da:2f:2e:4c:ae:ba:95:4f:52:53:ea:cd:01:96:51:fe:
bc:bd:87:78:fd:2b:8e:a1:fc:2a:8b:bf:2e:bf:a4:f5:c5:d3:
26:50:d5:f3:5a:b9:c8:e2:03:bb:d6:45:63:84:3c:35:aa:10:
8c:83:b4:dd:21:a1:68:3a:bf:3d:98:be:0a:95:a9:90:e0:7c:
5c:87:2f:fd:9e:f7:d8:4a:c9:1f:74:6b:42:11:cb:b2:23:4d:
01:aa:ee:d9:4d:12:da:08:15:86:44:59:78:c2:b7:18:12:bc:
ac:f8:a5:1f:85:c7:88:26:f2:9e:8f:e6:5a:c8:fc:88:86:04:
20:31:f5:90:e6:f2:e5:c5:ab:bf:c8:7d:2b:77:2e:36:81:69:
b7:4f:a6:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgoD9N54p6rePQD9WAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDA0MzEwN1oXDTI1MDMxMDAzMzEwN1owLzEtMCsGA1UEAxMk
Y2YyZDVlNzctZWUwYi00OGMwLTliNDYtMTU4ZDEwODA4YTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltukzvoX+CigClrxKynYTirbeo31EgC5u2lM
JadomMIhanv3dp5/lpYFpVJGF6MGcLmFOTGgJ6bTeqCojiy+wQDQB1y7KGhPiWHU
JuYGPQh3QzeXMT1YTIdVnvtNMMVLgLnNCpcuGHXaUo9v+Hr59Nw+r17oBw5/yytq
fRn/FSljLUJtuu8VADPGKebU2wGF5zO84G120B81qbolW5DXCcknxHWc/N/4Eu2Z
56Tgkcp/hy8K5GaM7lHX/QAG3EqLyXJMmoNA/XFURFMvLjNDaZ5Gmwv+Jq/f/RSd
lkaBr+9kiOIztccXNN95OMkFqUPrcrr0iH+mU52MJLlchiixuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFINc2/cjXoCBPpjIKQYw3l8f6Q9GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDNlYjRiNDMtMmJjMy0z
Y2M3LWJiMzEtNjQ0NmVjMWM2NmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop8EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA+h8oMLmfi2z8EKKmnzhRpEIvDg6WHiG2r5bnoi7D+IsoAF4mzIasDb
AEMopxfKG1VRgdcwV7p5qHlXqPtSqQnrg9wInnnsbdFxutPQdVMg6FzCc5PfOCHq
9vweZd5LhLHch4gfZLW90/JeoY7j2i8uTK66lU9SU+rNAZZR/ry9h3j9K46h/CqL
vy6/pPXF0yZQ1fNaucjiA7vWRWOEPDWqEIyDtN0hoWg6vz2YvgqVqZDgfFyHL/2e
99hKyR90a0IRy7IjTQGq7tlNEtoIFYZEWXjCtxgSvKz4pR+Fx4gm8p6P5lrI/IiG
BCAx9ZDm8uXFq7/IfSt3LjaBabdPpn0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:40:25 2025 by rpki-client