Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/27822e64-c2b3-36a0-ae8b-ce1130a700db.roa
File: 27822e64-c2b3-36a0-ae8b-ce1130a700db.roa (raw, json)
Hash identifier: xah2nTyx8A3Ivlb9V8oRxAv2aiUbtOI7hEH9XGUcixg=
Subject key identifier: 8B:C3:70:97:7B:7E:35:B1:03:F8:24:23:D5:CD:90:6D:EE:C4:7F:3D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584828055933421B8B81DA675CC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/27822e64-c2b3-36a0-ae8b-ce1130a700db.roa
Signing time: Tue 10 Dec 2024 04:10:00 +0000
ROA not before: Tue 10 Dec 2024 04:10:00 +0000
ROA not after: Mon 10 Mar 2025 03:10:00 +0000
asID: 13335
IP address blocks: 162.158.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:28:05:59:33:42:1b:8b:81:da:67:5c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 10 04:10:00 2024 GMT
Not After : Mar 10 03:10:00 2025 GMT
Subject: CN=c2d1c6e8-4dd3-445b-913c-e0d5fa510b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:06:2f:41:b0:92:5b:6f:64:5a:9c:0d:c4:
c3:da:cc:53:82:fe:d5:af:da:9d:8a:6a:93:7c:3a:
89:1f:2a:da:bd:19:e3:4c:c8:01:18:85:65:91:09:
c3:db:1d:63:f1:e1:a2:a5:29:d9:67:d9:4d:52:ff:
99:33:e2:e6:b2:b1:40:35:d6:fa:d4:5b:38:a6:75:
9a:1c:a4:13:7e:1b:72:e7:91:de:6e:c7:04:67:27:
c4:d7:c1:67:4f:04:a1:d9:dc:f4:be:70:d4:fc:63:
b2:87:29:ae:b7:e7:6b:b1:d8:af:fd:ad:24:66:6c:
f6:8b:4b:1e:64:f6:6a:19:c4:ca:68:aa:58:2d:0b:
ae:18:4b:5a:f1:b9:0f:1c:86:0e:3e:1e:f6:9d:f8:
44:5c:81:fb:8a:ed:61:70:56:cb:d6:e1:14:b0:a3:
f0:0d:1a:19:bb:1d:5a:6d:35:3a:a6:3f:4e:97:fe:
3e:39:69:19:3f:1e:8e:96:e5:22:32:ce:41:04:b6:
87:5b:28:bb:69:cd:f2:19:3e:f3:b4:91:b6:ac:18:
4c:ef:44:ec:e0:79:5d:bc:3b:f1:d9:6a:9c:9d:76:
d0:2e:bb:f8:66:f3:c4:24:de:79:db:e0:bd:a0:a3:
82:9b:ec:d9:79:e9:12:3b:84:01:9e:0d:9c:5a:cf:
35:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C3:70:97:7B:7E:35:B1:03:F8:24:23:D5:CD:90:6D:EE:C4:7F:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/27822e64-c2b3-36a0-ae8b-ce1130a700db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
162.158.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:bb:dc:00:1b:d2:78:0a:5d:bd:2c:80:a3:c1:a9:3b:b4:86:
43:12:00:00:df:de:cb:62:d2:40:80:6e:23:c9:59:d9:89:be:
ec:d3:4e:d9:9a:a2:ab:5a:50:e2:f9:0f:f5:13:2d:0a:fb:52:
df:f1:96:0f:09:a0:d2:4a:e3:2d:34:24:50:0b:dd:0a:11:29:
12:ba:9f:6a:4f:4d:38:1f:7c:2c:d4:42:0f:a6:84:cc:1e:41:
fb:c1:9d:00:81:f8:c0:8e:b5:77:74:d3:55:f2:ba:ef:fa:c2:
bf:16:21:77:fb:a4:2c:fd:00:40:d2:1d:a7:0e:91:36:a2:96:
58:a0:c1:9e:e4:47:15:43:8d:94:fb:0e:7e:05:ff:af:a4:b5:
9d:c4:49:a6:db:95:04:89:66:82:a6:94:f2:e5:27:0d:ca:d7:
db:3d:da:27:47:28:28:d0:fe:68:44:26:b7:65:3d:e3:81:98:
28:9a:2b:b6:3a:63:57:6f:40:31:0b:a4:71:82:22:c0:30:dd:
81:2b:e5:51:ad:71:74:0d:54:a2:43:a1:d7:dd:fb:55:19:78:
47:4e:85:eb:cb:4f:b2:d3:38:c3:c9:5b:c2:ec:ad:f4:20:25:
df:3b:a0:99:f5:01:87:3d:e0:e5:c4:c9:01:c5:d9:06:7d:8a:
03:2b:18:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:08:39 2025 by rpki-client