Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17519f02-ce91-3408-9598-658c9ed66ab2.roa
File: 17519f02-ce91-3408-9598-658c9ed66ab2.roa (raw, json)
Hash identifier: 519N3C8HMwnHMmD9RBGXdSiosinLJcIzir5mjg83Nug=
Subject key identifier: 4D:ED:A3:67:8E:59:03:CB:B8:01:81:29:69:7A:25:D5:A3:A2:F2:EC
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584827A2395C908F8CCBDC9F2B00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17519f02-ce91-3408-9598-658c9ed66ab2.roa
Signing time: Tue 10 Dec 2024 00:50:16 +0000
ROA not before: Tue 10 Dec 2024 00:50:16 +0000
ROA not after: Sun 09 Mar 2025 23:50:16 +0000
asID: 13335
IP address blocks: 162.158.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:a2:39:5c:90:8f:8c:cb:dc:9f:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 00:50:16 2024 GMT
Not After : Mar 9 23:50:16 2025 GMT
Subject: CN=a44134c9-e91c-4e8a-890a-cdaf337cd1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:57:56:b2:e1:92:c5:6c:b8:ca:e4:69:77:a3:
a2:6d:b0:d1:90:f0:aa:15:c8:29:94:23:e4:7c:6b:
5a:60:6a:e5:fc:ad:e3:5f:c2:48:d1:ba:d2:6d:4a:
c5:bb:10:cd:21:28:f7:63:9d:e0:7f:a7:27:de:2a:
6b:03:c9:8c:8d:2f:e1:a4:49:9f:86:16:10:a6:87:
24:3b:e3:41:a2:b3:9f:0c:07:35:82:7c:3b:18:0a:
91:8f:ba:bd:7f:97:bd:5f:e4:94:6c:f5:b1:da:2b:
b7:3c:5b:a2:c8:12:a8:60:48:72:8f:ac:72:96:cf:
51:0d:67:25:39:a6:5a:9c:7c:fa:ff:40:35:6e:1b:
b0:a5:fd:68:1c:b8:cc:a7:f8:23:4f:26:99:a8:76:
7c:de:c5:df:cd:86:a7:36:1a:d9:5f:c8:7e:a7:5f:
cf:04:57:cd:23:0f:aa:01:8d:ea:b0:55:97:4d:2b:
14:c9:e4:a0:41:04:05:6d:a5:75:4e:03:85:73:67:
1f:9f:9c:ed:c4:aa:05:53:ce:c5:7f:72:45:7c:c1:
e8:88:07:ea:39:08:06:d0:bf:09:31:94:de:30:cd:
ad:37:45:9c:a3:ea:92:c2:d7:4c:6a:aa:63:3e:c1:
8a:98:15:62:50:fc:8b:8b:c2:84:ff:d1:6e:d8:47:
1c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:ED:A3:67:8E:59:03:CB:B8:01:81:29:69:7A:25:D5:A3:A2:F2:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17519f02-ce91-3408-9598-658c9ed66ab2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:70:dc:41:6b:bd:60:e3:22:8c:1d:46:b9:9e:62:6d:82:21:
2a:d8:94:b5:4a:0f:2b:fc:dc:d0:8e:66:0f:ce:b9:51:0d:87:
d2:3f:3a:71:08:1d:5e:7e:ee:3c:45:72:e5:46:f6:67:c6:5c:
65:4e:76:44:ef:5a:60:31:c4:91:b3:c6:6d:b3:00:45:b0:b5:
3f:1d:ba:f8:ba:32:00:36:af:63:cd:85:5c:7f:27:d8:b8:d9:
cc:c3:61:07:f4:61:5c:35:e9:d9:fa:11:90:e4:84:9a:f8:23:
73:b0:9c:ff:b0:cd:f0:16:97:ce:14:8c:b7:3c:fb:b5:83:2c:
cd:6c:0b:7d:b4:26:e3:7e:a2:dd:a7:b5:a5:2d:f6:51:c4:9d:
d4:02:4e:93:13:a5:26:63:aa:59:ee:f6:c2:89:62:f1:4e:08:
06:ce:25:02:8b:eb:06:52:fb:3a:4d:ca:69:d0:4d:d2:08:af:
af:a1:c9:d3:50:aa:b7:ed:d3:e3:22:72:2d:93:bd:e3:91:24:
9f:e3:9d:2e:b5:62:ce:ff:15:cf:04:c5:3b:3b:45:c6:ea:77:
da:9a:94:60:8c:cc:72:d5:27:a8:19:d9:ab:12:fb:b9:44:33:
7a:e3:ec:10:a0:3c:92:5c:64:bb:fb:92:5c:b4:ab:d7:e0:16:
48:ea:70:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:17:44 2025 by rpki-client