Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0fe0ec97-d451-33e7-b281-4c28630df292.roa
File: 0fe0ec97-d451-33e7-b281-4c28630df292.roa (raw, json)
Hash identifier: 1msIiOFMefXVUKvvFDIZNrfUYzDVYSKJObAXZtGYzjM=
Subject key identifier: 85:CD:60:81:EF:A1:6A:3E:FC:D9:C3:87:5D:4E:15:35:48:F2:EB:79
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827B395BD36993BF5AC194BB0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0fe0ec97-d451-33e7-b281-4c28630df292.roa
Signing time: Tue 10 Dec 2024 01:25:15 +0000
ROA not before: Tue 10 Dec 2024 01:25:15 +0000
ROA not after: Mon 10 Mar 2025 00:25:15 +0000
asID: 13335
IP address blocks: 162.158.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:b3:95:bd:36:99:3b:f5:ac:19:4b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 01:25:15 2024 GMT
Not After : Mar 10 00:25:15 2025 GMT
Subject: CN=7eaa563c-159b-46b0-8ad6-e6f5d8ad8aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d4:c1:1c:cb:9e:c7:3e:e0:c0:19:62:b7:26:
56:d7:9d:2b:54:c2:9a:67:09:cd:f9:e4:c2:5a:1b:
01:f2:9a:9e:a7:56:90:50:5b:5e:fa:ec:13:96:17:
da:2c:b6:50:ee:99:e8:20:20:5e:bb:29:13:2a:6b:
72:26:49:74:f1:c7:fa:f2:99:de:07:19:2c:ce:5b:
a8:e1:b5:72:b4:17:3a:73:44:f1:33:88:59:fb:2b:
d1:4f:a3:18:57:53:a9:2c:ee:78:4b:04:70:f7:17:
cc:a0:83:38:66:28:e4:f8:b3:b5:1b:d2:3c:82:e9:
7c:09:38:52:d8:24:53:dc:2f:51:36:9c:44:9b:f8:
35:7e:22:14:bf:20:f8:9a:b9:d2:96:7b:05:8b:29:
b1:b1:fa:1f:67:92:da:47:25:c0:b4:40:ca:2d:77:
0c:ef:a9:5d:c2:36:15:36:85:bf:19:27:b5:ee:06:
51:be:39:35:c7:4f:84:60:58:4d:bd:23:bd:a1:3d:
c6:e7:1d:ef:33:58:68:9e:61:31:05:f0:f6:68:b4:
a1:d2:96:fa:e4:15:47:b0:e3:aa:a8:a9:5e:ab:02:
11:54:b4:6d:a8:05:05:93:b2:bd:45:cb:a5:df:53:
19:12:76:4e:75:8e:ff:7f:17:4c:75:f7:88:6f:8e:
c2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CD:60:81:EF:A1:6A:3E:FC:D9:C3:87:5D:4E:15:35:48:F2:EB:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0fe0ec97-d451-33e7-b281-4c28630df292.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:df:d6:18:bb:5d:bc:e5:5b:b0:00:28:d3:56:67:b0:d9:74:
c9:14:18:8b:e4:df:5f:de:eb:40:83:a8:42:8c:db:7c:a1:43:
a9:0d:59:58:c7:7f:f0:25:d3:73:ef:28:a7:4c:51:f5:79:e3:
cd:b8:ec:e4:44:95:56:b4:ac:57:89:9e:27:5f:5d:c7:89:bd:
44:c8:21:49:23:f5:4d:84:ad:b0:30:14:31:76:2b:9d:4f:5f:
4e:6e:59:76:2d:82:87:a8:93:77:9a:ad:68:44:ed:7b:25:ed:
1f:5e:7e:12:9f:0b:9a:1c:c4:4c:7c:af:69:5d:96:c1:ba:08:
6d:aa:e8:cf:de:50:70:7a:fd:a4:46:ba:17:bd:7b:b0:2b:61:
63:78:dc:cc:b2:42:fe:56:bb:be:57:a4:dd:89:ce:f9:0d:a3:
07:d5:70:d3:ac:12:23:fb:61:0f:44:a0:a7:9c:13:5a:23:53:
1c:0d:02:01:e2:30:57:c8:75:5c:fd:c7:02:40:2f:f8:c7:e7:
52:59:bc:a4:85:0d:4a:21:0e:10:43:39:d6:60:6d:53:1a:82:
41:9f:81:b3:2f:e9:aa:c7:2b:39:7d:79:23:17:98:22:98:55:
bb:f2:7b:97:e0:db:87:37:57:d0:f5:85:ae:2d:a2:27:30:fa:
c1:cd:32:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:08:02 2025 by rpki-client