Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/167b4480-e0b7-376f-80c0-8d4a801ff233.roa
File: 167b4480-e0b7-376f-80c0-8d4a801ff233.roa (raw, json)
Hash identifier: JqW+RyOXVw+8YkxNglC3TxIkj9xnsd0bL0zbatIJ7+s=
Subject key identifier: 69:4E:41:3D:9A:9E:B1:CB:DE:95:A0:09:37:A0:A2:51:E0:57:6F:64
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584828058E91D7F571F58D3F9700
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/167b4480-e0b7-376f-80c0-8d4a801ff233.roa
Signing time: Tue 10 Dec 2024 04:10:25 +0000
ROA not before: Tue 10 Dec 2024 04:10:25 +0000
ROA not after: Mon 10 Mar 2025 03:10:25 +0000
asID: 13335
IP address blocks: 162.158.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:05:8e:91:d7:f5:71:f5:8d:3f:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 04:10:25 2024 GMT
Not After : Mar 10 03:10:25 2025 GMT
Subject: CN=5e9dc3f0-eaf2-4cca-a66b-6befe8a434fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f5:07:de:07:55:f1:c0:1c:23:ce:1c:3f:40:
87:08:b0:8c:dd:17:61:f5:d6:8e:9e:33:2c:18:8c:
0a:5d:2c:95:b4:81:3b:60:1b:dd:61:79:2e:1c:8d:
06:8c:bd:70:db:1d:d0:58:3c:f4:b8:00:3f:ec:71:
5d:f3:10:47:76:f6:13:2b:2d:53:d8:dc:f8:6a:c4:
1a:ff:63:d5:c4:14:3b:65:dc:94:94:dd:ca:8d:2b:
bc:94:ea:de:77:2c:61:40:8d:85:d7:68:f7:d7:be:
32:4f:31:95:31:19:4d:0d:5c:ae:03:97:fd:e6:f8:
a7:72:5d:ce:89:ef:d9:ab:57:89:04:46:44:e8:9c:
83:85:02:9d:00:b6:b9:af:f3:c3:ab:0e:fb:87:6b:
13:52:42:6e:af:fe:22:cc:1b:f3:37:31:9a:fb:d6:
17:a9:cc:4f:8a:13:74:a6:97:0a:78:35:ba:09:b8:
63:e7:24:64:16:b8:23:d8:a1:da:eb:b1:5a:af:37:
79:cb:f4:b4:6c:b0:98:b7:66:40:9d:4e:a6:c0:95:
b7:e2:db:67:d3:6c:7c:b6:f6:4f:6f:30:23:9b:c8:
eb:d2:94:00:04:7d:eb:2a:fd:a0:c6:20:29:a3:78:
d7:5d:9a:b5:13:51:6a:d0:5e:13:ac:a9:42:51:25:
3f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4E:41:3D:9A:9E:B1:CB:DE:95:A0:09:37:A0:A2:51:E0:57:6F:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/167b4480-e0b7-376f-80c0-8d4a801ff233.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:52:c8:59:94:eb:ed:13:8c:b4:ad:1c:83:8f:35:3f:c1:97:
40:61:22:65:b8:54:4c:4b:8a:e1:93:22:b0:6a:40:2e:99:2c:
db:4a:1a:be:57:f2:56:c7:9e:9a:7e:f7:20:a3:88:ba:88:f3:
2f:7d:f3:71:ec:61:0d:28:1a:ae:55:20:b4:73:5c:2f:b5:d5:
46:f1:d5:24:01:4a:7d:ff:0b:da:ae:37:e6:e8:3c:fb:22:ee:
c7:20:d0:32:a5:96:4f:42:dc:2d:59:6f:60:4b:b8:df:51:cf:
98:d8:b8:bf:ae:ba:bf:71:41:f1:c7:47:ed:37:a4:e2:8d:91:
be:76:10:c2:3d:42:82:49:14:28:45:76:6c:c4:eb:17:7a:e3:
10:98:b8:d3:53:48:1b:cf:bb:45:ff:74:52:d7:e9:38:b2:1f:
92:88:4e:92:a5:93:ce:a5:43:51:87:4a:a6:5d:d5:83:11:e2:
7c:b8:5f:33:9c:24:4b:80:28:66:bb:b4:47:c1:07:8a:57:b5:
a5:50:2c:a5:18:fd:32:3e:24:8a:97:21:69:7b:be:bc:92:ef:
16:69:8d:68:8b:e7:b6:11:96:55:ba:59:da:cf:66:9b:fa:1d:
96:1a:ea:26:36:bd:84:58:73:d7:a2:f7:84:2e:23:e2:8d:9f:
80:3c:57:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:59:54 2025 by rpki-client