Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0b8d15fe-4b1b-34b6-89d0-e2cb6d83c703.roa
File: 0b8d15fe-4b1b-34b6-89d0-e2cb6d83c703.roa (raw, json)
Hash identifier: 9jEBxakcRYZpvi/9pa5Ko4fHog6Lr2vSHsIsVKWRKUw=
Subject key identifier: 9C:71:6A:7F:47:D8:34:17:61:B5:22:7F:6D:88:E7:FD:CE:E7:A5:14
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848281115030EC0E647F6454E80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0b8d15fe-4b1b-34b6-89d0-e2cb6d83c703.roa
Signing time: Tue 10 Dec 2024 04:33:38 +0000
ROA not before: Tue 10 Dec 2024 04:33:38 +0000
ROA not after: Mon 10 Mar 2025 03:33:38 +0000
asID: 13335
IP address blocks: 162.159.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:11:15:03:0e:c0:e6:47:f6:45:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 04:33:38 2024 GMT
Not After : Mar 10 03:33:38 2025 GMT
Subject: CN=ab10aa5b-66f3-426f-8b29-c726cc10d644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3a:f8:87:15:23:b6:f2:8b:02:48:ae:28:f3:
e6:9b:5a:e2:55:6d:6d:71:75:8a:0b:e8:0f:e3:2d:
10:0f:ea:eb:e4:d4:17:ac:9a:f9:71:cd:c3:08:cb:
20:3b:6e:10:79:32:d6:d0:ab:14:a4:fd:9e:4b:5d:
0f:98:ac:12:85:06:94:0a:29:31:87:4e:fa:00:5f:
4b:a1:3e:9e:03:69:8b:e0:7e:25:fe:a4:aa:21:ce:
2c:30:4d:83:61:5b:5c:bc:15:71:14:17:3e:d2:3f:
1e:7c:dc:bd:63:b9:14:79:8a:0a:b0:41:30:44:86:
ab:90:77:02:92:7a:bd:ae:25:87:06:ec:33:ec:52:
cd:a8:51:79:22:b7:a8:74:b5:c6:47:cc:ae:9e:31:
7d:b4:cc:d7:05:da:d7:b3:0d:29:eb:59:7a:2d:3b:
11:02:b8:a8:ef:e5:c8:44:08:7e:a4:4a:4d:d3:bc:
95:58:99:6c:e9:98:63:d8:b4:a9:42:de:c8:ef:9c:
c0:21:d3:46:91:52:3c:5f:9b:e6:2d:f9:9f:f8:d2:
96:83:44:ba:92:e7:9b:ce:52:01:d0:4f:15:15:0e:
11:1e:6d:0a:6e:53:ab:1c:71:62:14:2f:74:6f:fa:
9b:94:ff:bd:22:55:b2:5c:55:ce:6f:e9:da:23:83:
95:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:71:6A:7F:47:D8:34:17:61:B5:22:7F:6D:88:E7:FD:CE:E7:A5:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0b8d15fe-4b1b-34b6-89d0-e2cb6d83c703.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.159.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:a8:7f:47:2b:68:f4:7f:0c:f7:b5:4c:e5:ce:e2:52:8c:60:
af:53:7d:94:9f:c5:e7:2e:14:bc:b5:e4:5c:d9:3b:4c:b9:a1:
79:79:a0:65:07:a3:f9:22:73:cb:4d:8d:af:66:6a:4e:18:cb:
07:7a:de:31:32:ba:ef:5d:3d:93:fa:21:40:19:e2:73:49:69:
d6:7b:5a:ff:37:f6:cf:e7:d3:5a:89:ff:69:82:5a:4c:94:5a:
b0:2a:38:b1:ff:3b:df:9b:ea:88:3b:dc:d4:9b:fd:82:9b:2b:
3b:6d:f9:e1:30:ea:18:56:ba:ae:65:10:f1:66:9d:25:27:fa:
6d:c2:ad:75:b5:e9:e4:2e:9c:44:6e:0c:d0:77:01:0a:e2:91:
55:3d:59:8f:34:08:ca:a4:f7:c1:a8:31:12:a7:27:ee:e1:d1:
c1:40:a8:00:20:c1:2f:29:95:de:85:e2:6d:67:c4:da:94:23:
ff:a8:5b:2b:de:c9:3d:0c:5d:98:3a:3a:5e:13:aa:86:73:62:
6a:0e:37:81:8e:aa:a5:3c:39:8e:7e:be:a1:82:f3:8a:a6:71:
90:2e:f3:ef:28:c4:4c:72:5b:19:48:78:ce:f7:85:db:03:5c:
62:5f:db:79:84:5d:32:10:cb:3e:98:c5:04:04:83:8e:5d:46:
d4:05:f1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:43 2025 by rpki-client